@payloadcms/storage-azure 3.86.0-internal.ac46214 → 3.87.0

package/README.md

@@ -14,7 +14,32 @@ pnpm add @payloadcms/storage-azure
 
 - Configure the `collections` object to specify which collections should use the Azure Blob Storage adapter. The slug _must_ match one of your existing collection slugs.
 - When enabled, this package will automatically set `disableLocalStorage` to `true` for each collection.
-- When deploying to Vercel, server uploads are limited with 4.5MB. Set `clientUploads` to `true` to do uploads directly on the client. You must allow CORS PUT method to your website.
+- When deploying to Vercel, server uploads are limited with 4.5MB. Set `clientUploads` to `true` to do uploads directly on the client.
+
+### Large client uploads (files over ~5GB)
+
+By default, client uploads (`clientUploads: true`) send each file in a single request, which Azure caps at ~5GB. To upload larger files, set `chunkLargeFiles: true`:
+
+```ts
+azureStorage({
+  // ...
+  clientUploads: {
+    chunkLargeFiles: true,
+  },
+})
+```
+
+This uploads through the Azure Blob SDK, which splits the file into blocks (`Put Block` + `Put Block List`) and raises the limit to Azure's block-blob maximum (~190TiB).
+
+Because the SDK sends additional `x-ms-*` headers, the browser issues a CORS preflight, so your storage account's CORS rules must allow the `OPTIONS` and `PUT` methods **and** those headers. Configure a CORS rule on the Blob service (Storage account → **Resource sharing (CORS)**):
+
+| Field           | Value                                                    |
+| --------------- | -------------------------------------------------------- |
+| Allowed origins | Your site origin (e.g. `https://example.com`)            |
+| Allowed methods | `GET,PUT,OPTIONS` (add `HEAD` if reading in-browser)     |
+| Allowed headers | `*` (or at minimum `x-ms-*,content-type,content-length`) |
+| Exposed headers | `*`                                                      |
+| Max age         | `3600`                                                   |
 
 ```ts
 import { azureStorage } from '@payloadcms/storage-azure'

package/dist/client/AzureClientUploadHandler.d.ts

@@ -1,8 +1,11 @@
+export type AzureClientUploadHandlerExtra = {
+    chunkLargeFiles: boolean;
+};
 export declare const AzureClientUploadHandler: ({ children, collectionSlug, enabled, extra, prefix, serverHandlerPath, }: {
     children: import("react").ReactNode;
     collectionSlug: import("packages/payload/src/index.js").UploadCollectionSlug;
     enabled?: boolean;
-    extra: Record<string, unknown>;
+    extra: AzureClientUploadHandlerExtra;
     prefix?: string;
     serverHandlerPath: `/${string}`;
 }) => import("react").JSX.Element;

package/dist/client/AzureClientUploadHandler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AzureClientUploadHandler.d.ts","sourceRoot":"","sources":["../../src/client/AzureClientUploadHandler.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,wBAAwB;;;;;;;aA+BjB,OACjB,aAqBD,CAAA"}
+{"version":3,"file":"AzureClientUploadHandler.d.ts","sourceRoot":"","sources":["../../src/client/AzureClientUploadHandler.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,6BAA6B,GAAG;IAC1C,eAAe,EAAE,OAAO,CAAA;CACzB,CAAA;AAED,eAAO,MAAM,wBAAwB;;;;;;;aAuBgI,OAAO,aAD1K,CAAA"}

package/dist/client/AzureClientUploadHandler.js

@@ -1,40 +1,18 @@
 'use client';
 import { createClientUploadHandler } from '@payloadcms/plugin-cloud-storage/client';
-import { formatAdminURL } from 'payload/shared';
+import { handleAzureUpload } from './handleAzureUpload.js';
 export const AzureClientUploadHandler = createClientUploadHandler({
-    handler: async ({ apiRoute, collectionSlug, docPrefix, file, serverHandlerPath, serverURL, updateFilename })=>{
-        const endpointRoute = formatAdminURL({
+    handler: async ({ apiRoute, collectionSlug, docPrefix, extra: { chunkLargeFiles }, file, serverHandlerPath, serverURL, updateFilename })=>{
+        return handleAzureUpload({
             apiRoute,
-            path: serverHandlerPath,
-            serverURL
+            chunkLargeFiles,
+            collectionSlug,
+            docPrefix,
+            file,
+            serverHandlerPath,
+            serverURL,
+            updateFilename
         });
-        const response = await fetch(endpointRoute, {
-            body: JSON.stringify({
-                collectionSlug,
-                docPrefix,
-                filename: file.name,
-                mimeType: file.type
-            }),
-            credentials: 'include',
-            method: 'POST'
-        });
-        const { docPrefix: sanitizedDocPrefix, filename: sanitizedFilename, url } = await response.json();
-        if (sanitizedFilename && sanitizedFilename !== file.name) {
-            updateFilename(sanitizedFilename);
-        }
-        await fetch(url, {
-            body: file,
-            headers: {
-                'Content-Length': file.size.toString(),
-                'Content-Type': file.type,
-                // Required for azure
-                'x-ms-blob-type': 'BlockBlob'
-            },
-            method: 'PUT'
-        });
-        return {
-            prefix: sanitizedDocPrefix
-        };
     }
 });
 

package/dist/client/AzureClientUploadHandler.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/client/AzureClientUploadHandler.ts"],"sourcesContent":["'use client'\nimport { createClientUploadHandler } from '@payloadcms/plugin-cloud-storage/client'\nimport { formatAdminURL } from 'payload/shared'\n\nexport const AzureClientUploadHandler = createClientUploadHandler({\n  handler: async ({\n    apiRoute,\n    collectionSlug,\n    docPrefix,\n    file,\n    serverHandlerPath,\n    serverURL,\n    updateFilename,\n  }) => {\n    const endpointRoute = formatAdminURL({\n      apiRoute,\n      path: serverHandlerPath,\n      serverURL,\n    })\n    const response = await fetch(endpointRoute, {\n      body: JSON.stringify({\n        collectionSlug,\n        docPrefix,\n        filename: file.name,\n        mimeType: file.type,\n      }),\n      credentials: 'include',\n      method: 'POST',\n    })\n\n    const {\n      docPrefix: sanitizedDocPrefix,\n      filename: sanitizedFilename,\n      url,\n    } = (await response.json()) as {\n      docPrefix: string\n      filename?: string\n      url: string\n    }\n\n    if (sanitizedFilename && sanitizedFilename !== file.name) {\n      updateFilename(sanitizedFilename)\n    }\n\n    await fetch(url, {\n      body: file,\n      headers: {\n        'Content-Length': file.size.toString(),\n        'Content-Type': file.type,\n        // Required for azure\n        'x-ms-blob-type': 'BlockBlob',\n      },\n      method: 'PUT',\n    })\n\n    return { prefix: sanitizedDocPrefix }\n  },\n})\n"],"names":["createClientUploadHandler","formatAdminURL","AzureClientUploadHandler","handler","apiRoute","collectionSlug","docPrefix","file","serverHandlerPath","serverURL","updateFilename","endpointRoute","path","response","fetch","body","JSON","stringify","filename","name","mimeType","type","credentials","method","sanitizedDocPrefix","sanitizedFilename","url","json","headers","size","toString","prefix"],"mappings":"AAAA;AACA,SAASA,yBAAyB,QAAQ,0CAAyC;AACnF,SAASC,cAAc,QAAQ,iBAAgB;AAE/C,OAAO,MAAMC,2BAA2BF,0BAA0B;IAChEG,SAAS,OAAO,EACdC,QAAQ,EACRC,cAAc,EACdC,SAAS,EACTC,IAAI,EACJC,iBAAiB,EACjBC,SAAS,EACTC,cAAc,EACf;QACC,MAAMC,gBAAgBV,eAAe;YACnCG;YACAQ,MAAMJ;YACNC;QACF;QACA,MAAMI,WAAW,MAAMC,MAAMH,eAAe;YAC1CI,MAAMC,KAAKC,SAAS,CAAC;gBACnBZ;gBACAC;gBACAY,UAAUX,KAAKY,IAAI;gBACnBC,UAAUb,KAAKc,IAAI;YACrB;YACAC,aAAa;YACbC,QAAQ;QACV;QAEA,MAAM,EACJjB,WAAWkB,kBAAkB,EAC7BN,UAAUO,iBAAiB,EAC3BC,GAAG,EACJ,GAAI,MAAMb,SAASc,IAAI;QAMxB,IAAIF,qBAAqBA,sBAAsBlB,KAAKY,IAAI,EAAE;YACxDT,eAAee;QACjB;QAEA,MAAMX,MAAMY,KAAK;YACfX,MAAMR;YACNqB,SAAS;gBACP,kBAAkBrB,KAAKsB,IAAI,CAACC,QAAQ;gBACpC,gBAAgBvB,KAAKc,IAAI;gBACzB,qBAAqB;gBACrB,kBAAkB;YACpB;YACAE,QAAQ;QACV;QAEA,OAAO;YAAEQ,QAAQP;QAAmB;IACtC;AACF,GAAE"}
+{"version":3,"sources":["../../src/client/AzureClientUploadHandler.ts"],"sourcesContent":["'use client'\nimport { createClientUploadHandler } from '@payloadcms/plugin-cloud-storage/client'\n\nimport { handleAzureUpload } from './handleAzureUpload.js'\n\nexport type AzureClientUploadHandlerExtra = {\n  chunkLargeFiles: boolean\n}\n\nexport const AzureClientUploadHandler = createClientUploadHandler<AzureClientUploadHandlerExtra>({\n  handler: async ({\n    apiRoute,\n    collectionSlug,\n    docPrefix,\n    extra: { chunkLargeFiles },\n    file,\n    serverHandlerPath,\n    serverURL,\n    updateFilename,\n  }) => {\n    return handleAzureUpload({\n      apiRoute,\n      chunkLargeFiles,\n      collectionSlug,\n      docPrefix,\n      file,\n      serverHandlerPath,\n      serverURL,\n      updateFilename,\n    })\n  },\n})\n"],"names":["createClientUploadHandler","handleAzureUpload","AzureClientUploadHandler","handler","apiRoute","collectionSlug","docPrefix","extra","chunkLargeFiles","file","serverHandlerPath","serverURL","updateFilename"],"mappings":"AAAA;AACA,SAASA,yBAAyB,QAAQ,0CAAyC;AAEnF,SAASC,iBAAiB,QAAQ,yBAAwB;AAM1D,OAAO,MAAMC,2BAA2BF,0BAAyD;IAC/FG,SAAS,OAAO,EACdC,QAAQ,EACRC,cAAc,EACdC,SAAS,EACTC,OAAO,EAAEC,eAAe,EAAE,EAC1BC,IAAI,EACJC,iBAAiB,EACjBC,SAAS,EACTC,cAAc,EACf;QACC,OAAOX,kBAAkB;YACvBG;YACAI;YACAH;YACAC;YACAG;YACAC;YACAC;YACAC;QACF;IACF;AACF,GAAE"}

package/dist/client/handleAzureUpload.d.ts

@@ -0,0 +1,20 @@
+type HandleAzureUploadArgs = {
+    apiRoute: string;
+    /**
+     * When true, upload through the Azure Blob SDK, which splits the file into
+     * blocks (Put Block + Put Block List) and lifts the ~5 GB single-request
+     * limit. When false, use the legacy single Put Blob request.
+     */
+    chunkLargeFiles: boolean;
+    collectionSlug: string;
+    docPrefix?: string;
+    file: File;
+    serverHandlerPath: `/${string}`;
+    serverURL: string;
+    updateFilename: (value: string) => void;
+};
+export declare const handleAzureUpload: ({ apiRoute, chunkLargeFiles, collectionSlug, docPrefix, file, serverHandlerPath, serverURL, updateFilename, }: HandleAzureUploadArgs) => Promise<{
+    prefix: string;
+}>;
+export {};
+//# sourceMappingURL=handleAzureUpload.d.ts.map

package/dist/client/handleAzureUpload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handleAzureUpload.d.ts","sourceRoot":"","sources":["../../src/client/handleAzureUpload.ts"],"names":[],"mappings":"AAQA,KAAK,qBAAqB,GAAG;IAC3B,QAAQ,EAAE,MAAM,CAAA;IAChB;;;;OAIG;IACH,eAAe,EAAE,OAAO,CAAA;IACxB,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,IAAI,CAAA;IACV,iBAAiB,EAAE,IAAI,MAAM,EAAE,CAAA;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;CACxC,CAAA;AAED,eAAO,MAAM,iBAAiB,kHAS3B,qBAAqB,KAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CA8DpD,CAAA"}

package/dist/client/handleAzureUpload.js

@@ -0,0 +1,59 @@
+'use client';
+import { formatAdminURL } from 'payload/shared';
+// Balances upload parallelism against browser memory: `blockSize * concurrency`
+// bytes are buffered in flight (64 MiB * 4 = 256 MiB). Only used on the SDK path.
+const BLOCK_SIZE = 64 * 1024 * 1024;
+const CONCURRENCY = 4;
+export const handleAzureUpload = async ({ apiRoute, chunkLargeFiles, collectionSlug, docPrefix, file, serverHandlerPath, serverURL, updateFilename })=>{
+    const endpointRoute = formatAdminURL({
+        apiRoute,
+        path: serverHandlerPath,
+        serverURL
+    });
+    const response = await fetch(endpointRoute, {
+        body: JSON.stringify({
+            collectionSlug,
+            docPrefix,
+            filename: file.name,
+            mimeType: file.type
+        }),
+        credentials: 'include',
+        method: 'POST'
+    });
+    if (!response.ok) {
+        throw new Error('Failed to retrieve signed URL for Azure client upload');
+    }
+    const { docPrefix: sanitizedDocPrefix, filename: sanitizedFilename, url } = await response.json();
+    if (sanitizedFilename && sanitizedFilename !== file.name) {
+        updateFilename(sanitizedFilename);
+    }
+    if (chunkLargeFiles) {
+        // Loaded on demand so @azure/storage-blob is only pulled into the client bundle
+        // when a chunked client upload actually runs, rather than for every Azure user.
+        const { BlockBlobClient } = await import('@azure/storage-blob');
+        const blockBlobClient = new BlockBlobClient(url);
+        await blockBlobClient.uploadData(file, {
+            blobHTTPHeaders: {
+                blobContentType: file.type
+            },
+            blockSize: BLOCK_SIZE,
+            concurrency: CONCURRENCY
+        });
+    } else {
+        await fetch(url, {
+            body: file,
+            headers: {
+                'Content-Length': file.size.toString(),
+                'Content-Type': file.type,
+                // Required for azure
+                'x-ms-blob-type': 'BlockBlob'
+            },
+            method: 'PUT'
+        });
+    }
+    return {
+        prefix: sanitizedDocPrefix
+    };
+};
+
+//# sourceMappingURL=handleAzureUpload.js.map

package/dist/client/handleAzureUpload.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/client/handleAzureUpload.ts"],"sourcesContent":["'use client'\nimport { formatAdminURL } from 'payload/shared'\n\n// Balances upload parallelism against browser memory: `blockSize * concurrency`\n// bytes are buffered in flight (64 MiB * 4 = 256 MiB). Only used on the SDK path.\nconst BLOCK_SIZE = 64 * 1024 * 1024\nconst CONCURRENCY = 4\n\ntype HandleAzureUploadArgs = {\n  apiRoute: string\n  /**\n   * When true, upload through the Azure Blob SDK, which splits the file into\n   * blocks (Put Block + Put Block List) and lifts the ~5 GB single-request\n   * limit. When false, use the legacy single Put Blob request.\n   */\n  chunkLargeFiles: boolean\n  collectionSlug: string\n  docPrefix?: string\n  file: File\n  serverHandlerPath: `/${string}`\n  serverURL: string\n  updateFilename: (value: string) => void\n}\n\nexport const handleAzureUpload = async ({\n  apiRoute,\n  chunkLargeFiles,\n  collectionSlug,\n  docPrefix,\n  file,\n  serverHandlerPath,\n  serverURL,\n  updateFilename,\n}: HandleAzureUploadArgs): Promise<{ prefix: string }> => {\n  const endpointRoute = formatAdminURL({\n    apiRoute,\n    path: serverHandlerPath,\n    serverURL,\n  })\n\n  const response = await fetch(endpointRoute, {\n    body: JSON.stringify({\n      collectionSlug,\n      docPrefix,\n      filename: file.name,\n      mimeType: file.type,\n    }),\n    credentials: 'include',\n    method: 'POST',\n  })\n\n  if (!response.ok) {\n    throw new Error('Failed to retrieve signed URL for Azure client upload')\n  }\n\n  const {\n    docPrefix: sanitizedDocPrefix,\n    filename: sanitizedFilename,\n    url,\n  } = (await response.json()) as {\n    docPrefix: string\n    filename?: string\n    url: string\n  }\n\n  if (sanitizedFilename && sanitizedFilename !== file.name) {\n    updateFilename(sanitizedFilename)\n  }\n\n  if (chunkLargeFiles) {\n    // Loaded on demand so @azure/storage-blob is only pulled into the client bundle\n    // when a chunked client upload actually runs, rather than for every Azure user.\n    const { BlockBlobClient } = await import('@azure/storage-blob')\n\n    const blockBlobClient = new BlockBlobClient(url)\n\n    await blockBlobClient.uploadData(file, {\n      blobHTTPHeaders: { blobContentType: file.type },\n      blockSize: BLOCK_SIZE,\n      concurrency: CONCURRENCY,\n    })\n  } else {\n    await fetch(url, {\n      body: file,\n      headers: {\n        'Content-Length': file.size.toString(),\n        'Content-Type': file.type,\n        // Required for azure\n        'x-ms-blob-type': 'BlockBlob',\n      },\n      method: 'PUT',\n    })\n  }\n\n  return { prefix: sanitizedDocPrefix }\n}\n"],"names":["formatAdminURL","BLOCK_SIZE","CONCURRENCY","handleAzureUpload","apiRoute","chunkLargeFiles","collectionSlug","docPrefix","file","serverHandlerPath","serverURL","updateFilename","endpointRoute","path","response","fetch","body","JSON","stringify","filename","name","mimeType","type","credentials","method","ok","Error","sanitizedDocPrefix","sanitizedFilename","url","json","BlockBlobClient","blockBlobClient","uploadData","blobHTTPHeaders","blobContentType","blockSize","concurrency","headers","size","toString","prefix"],"mappings":"AAAA;AACA,SAASA,cAAc,QAAQ,iBAAgB;AAE/C,gFAAgF;AAChF,kFAAkF;AAClF,MAAMC,aAAa,KAAK,OAAO;AAC/B,MAAMC,cAAc;AAkBpB,OAAO,MAAMC,oBAAoB,OAAO,EACtCC,QAAQ,EACRC,eAAe,EACfC,cAAc,EACdC,SAAS,EACTC,IAAI,EACJC,iBAAiB,EACjBC,SAAS,EACTC,cAAc,EACQ;IACtB,MAAMC,gBAAgBZ,eAAe;QACnCI;QACAS,MAAMJ;QACNC;IACF;IAEA,MAAMI,WAAW,MAAMC,MAAMH,eAAe;QAC1CI,MAAMC,KAAKC,SAAS,CAAC;YACnBZ;YACAC;YACAY,UAAUX,KAAKY,IAAI;YACnBC,UAAUb,KAAKc,IAAI;QACrB;QACAC,aAAa;QACbC,QAAQ;IACV;IAEA,IAAI,CAACV,SAASW,EAAE,EAAE;QAChB,MAAM,IAAIC,MAAM;IAClB;IAEA,MAAM,EACJnB,WAAWoB,kBAAkB,EAC7BR,UAAUS,iBAAiB,EAC3BC,GAAG,EACJ,GAAI,MAAMf,SAASgB,IAAI;IAMxB,IAAIF,qBAAqBA,sBAAsBpB,KAAKY,IAAI,EAAE;QACxDT,eAAeiB;IACjB;IAEA,IAAIvB,iBAAiB;QACnB,gFAAgF;QAChF,gFAAgF;QAChF,MAAM,EAAE0B,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC;QAEzC,MAAMC,kBAAkB,IAAID,gBAAgBF;QAE5C,MAAMG,gBAAgBC,UAAU,CAACzB,MAAM;YACrC0B,iBAAiB;gBAAEC,iBAAiB3B,KAAKc,IAAI;YAAC;YAC9Cc,WAAWnC;YACXoC,aAAanC;QACf;IACF,OAAO;QACL,MAAMa,MAAMc,KAAK;YACfb,MAAMR;YACN8B,SAAS;gBACP,kBAAkB9B,KAAK+B,IAAI,CAACC,QAAQ;gBACpC,gBAAgBhC,KAAKc,IAAI;gBACzB,qBAAqB;gBACrB,kBAAkB;YACpB;YACAE,QAAQ;QACV;IACF;IAEA,OAAO;QAAEiB,QAAQd;IAAmB;AACtC,EAAC"}

package/dist/client/handleAzureUpload.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=handleAzureUpload.spec.d.ts.map

package/dist/client/handleAzureUpload.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handleAzureUpload.spec.d.ts","sourceRoot":"","sources":["../../src/client/handleAzureUpload.spec.ts"],"names":[],"mappings":""}

package/dist/client/handleAzureUpload.spec.js

@@ -0,0 +1,187 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+const uploadDataMock = vi.fn();
+const blockBlobClientMock = vi.fn(function() {
+    return {
+        uploadData: uploadDataMock
+    };
+});
+vi.mock('@azure/storage-blob', ()=>({
+        BlockBlobClient: blockBlobClientMock
+    }));
+import { handleAzureUpload } from './handleAzureUpload.js';
+const serverURL = 'https://example.com';
+const apiRoute = '/api';
+const serverHandlerPath = '/storage-azure-generate-signed-url';
+const signedURL = 'https://account.blob.core.windows.net/container/file.png?sig=abc';
+const createFile = ()=>new File([
+        new Uint8Array([
+            1,
+            2,
+            3
+        ])
+    ], 'file.png', {
+        type: 'image/png'
+    });
+const mockSignedURLResponse = (body, ok = true)=>{
+    const fetchMock = vi.fn().mockResolvedValue({
+        json: ()=>Promise.resolve(body),
+        ok
+    });
+    vi.stubGlobal('fetch', fetchMock);
+    return fetchMock;
+};
+const invoke = (overrides = {})=>handleAzureUpload({
+        apiRoute,
+        chunkLargeFiles: true,
+        collectionSlug: 'media',
+        file: createFile(),
+        serverHandlerPath,
+        serverURL,
+        updateFilename: vi.fn(),
+        ...overrides
+    });
+describe('handleAzureUpload', ()=>{
+    beforeEach(()=>{
+        vi.clearAllMocks();
+        vi.unstubAllGlobals();
+        uploadDataMock.mockResolvedValue(undefined);
+    });
+    describe('shared behavior', ()=>{
+        it('should request a signed URL from the server handler', async ()=>{
+            const fetchMock = mockSignedURLResponse({
+                docPrefix: 'docs',
+                url: signedURL
+            });
+            await invoke({
+                docPrefix: 'docs'
+            });
+            const [calledURL, init] = fetchMock.mock.calls[0];
+            expect(calledURL).toBe(`${serverURL}${apiRoute}${serverHandlerPath}`);
+            expect(init.method).toBe('POST');
+            expect(JSON.parse(init.body)).toEqual({
+                collectionSlug: 'media',
+                docPrefix: 'docs',
+                filename: 'file.png',
+                mimeType: 'image/png'
+            });
+        });
+        it('should call updateFilename when the server returns a sanitized filename', async ()=>{
+            mockSignedURLResponse({
+                docPrefix: 'docs',
+                filename: 'file-1.png',
+                url: signedURL
+            });
+            const updateFilename = vi.fn();
+            await invoke({
+                updateFilename
+            });
+            expect(updateFilename).toHaveBeenCalledWith('file-1.png');
+        });
+        it('should not call updateFilename when the filename is unchanged', async ()=>{
+            mockSignedURLResponse({
+                docPrefix: 'docs',
+                filename: 'file.png',
+                url: signedURL
+            });
+            const updateFilename = vi.fn();
+            await invoke({
+                updateFilename
+            });
+            expect(updateFilename).not.toHaveBeenCalled();
+        });
+        it('should return the sanitized doc prefix', async ()=>{
+            mockSignedURLResponse({
+                docPrefix: 'sanitized-docs',
+                url: signedURL
+            });
+            const result = await invoke();
+            expect(result).toEqual({
+                prefix: 'sanitized-docs'
+            });
+        });
+        it('should throw when the signed URL request fails, before any upload', async ()=>{
+            mockSignedURLResponse({}, false);
+            await expect(invoke()).rejects.toThrow();
+            expect(uploadDataMock).not.toHaveBeenCalled();
+            expect(blockBlobClientMock).not.toHaveBeenCalled();
+        });
+    });
+    describe('chunkLargeFiles: true (SDK block upload)', ()=>{
+        it('should upload via BlockBlobClient.uploadData rather than a raw PUT', async ()=>{
+            const fetchMock = mockSignedURLResponse({
+                docPrefix: 'docs',
+                url: signedURL
+            });
+            const file = createFile();
+            await invoke({
+                chunkLargeFiles: true,
+                file
+            });
+            expect(blockBlobClientMock).toHaveBeenCalledWith(signedURL);
+            expect(uploadDataMock).toHaveBeenCalledTimes(1);
+            const [uploadedFile, options] = uploadDataMock.mock.calls[0];
+            expect(uploadedFile).toBe(file);
+            expect(options.blockSize).toBeGreaterThan(0);
+            expect(options.concurrency).toBeGreaterThan(0);
+            // Only the signed-URL request should hit fetch; no raw PUT to the blob URL.
+            expect(fetchMock).toHaveBeenCalledTimes(1);
+        });
+        it('should pass the file content type to the blob headers', async ()=>{
+            mockSignedURLResponse({
+                docPrefix: 'docs',
+                url: signedURL
+            });
+            await invoke({
+                chunkLargeFiles: true
+            });
+            const [, options] = uploadDataMock.mock.calls[0];
+            expect(options.blobHTTPHeaders).toEqual({
+                blobContentType: 'image/png'
+            });
+        });
+        it('should propagate errors from uploadData', async ()=>{
+            mockSignedURLResponse({
+                docPrefix: 'docs',
+                url: signedURL
+            });
+            uploadDataMock.mockRejectedValue(new Error('block upload failed'));
+            await expect(invoke({
+                chunkLargeFiles: true
+            })).rejects.toThrow('block upload failed');
+        });
+    });
+    describe('chunkLargeFiles: false (single PUT, default/legacy)', ()=>{
+        it('should upload via a single raw PUT with the BlockBlob header', async ()=>{
+            const fetchMock = mockSignedURLResponse({
+                docPrefix: 'docs',
+                url: signedURL
+            });
+            const file = createFile();
+            await invoke({
+                chunkLargeFiles: false,
+                file
+            });
+            // 1st fetch = signed-URL POST, 2nd = the raw PUT to the blob URL
+            expect(fetchMock).toHaveBeenCalledTimes(2);
+            const [putURL, putInit] = fetchMock.mock.calls[1];
+            expect(putURL).toBe(signedURL);
+            expect(putInit.method).toBe('PUT');
+            expect(putInit.body).toBe(file);
+            expect(putInit.headers['x-ms-blob-type']).toBe('BlockBlob');
+            expect(putInit.headers['Content-Type']).toBe('image/png');
+        });
+        it('should not use the Azure SDK', async ()=>{
+            mockSignedURLResponse({
+                docPrefix: 'docs',
+                url: signedURL
+            });
+            await invoke({
+                chunkLargeFiles: false
+            });
+            expect(blockBlobClientMock).not.toHaveBeenCalled();
+            expect(uploadDataMock).not.toHaveBeenCalled();
+        });
+    });
+});
+
+//# sourceMappingURL=handleAzureUpload.spec.js.map

package/dist/client/handleAzureUpload.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/client/handleAzureUpload.spec.ts"],"sourcesContent":["import { beforeEach, describe, expect, it, vi } from 'vitest'\n\nconst uploadDataMock = vi.fn()\nconst blockBlobClientMock = vi.fn(function () {\n  return { uploadData: uploadDataMock }\n})\n\nvi.mock('@azure/storage-blob', () => ({\n  BlockBlobClient: blockBlobClientMock,\n}))\n\nimport { handleAzureUpload } from './handleAzureUpload.js'\n\nconst serverURL = 'https://example.com'\nconst apiRoute = '/api'\nconst serverHandlerPath = '/storage-azure-generate-signed-url' as const\nconst signedURL = 'https://account.blob.core.windows.net/container/file.png?sig=abc'\n\nconst createFile = () => new File([new Uint8Array([1, 2, 3])], 'file.png', { type: 'image/png' })\n\nconst mockSignedURLResponse = (body: Record<string, unknown>, ok = true) => {\n  const fetchMock = vi.fn().mockResolvedValue({\n    json: () => Promise.resolve(body),\n    ok,\n  })\n  vi.stubGlobal('fetch', fetchMock)\n  return fetchMock\n}\n\nconst invoke = (overrides: Partial<Parameters<typeof handleAzureUpload>[0]> = {}) =>\n  handleAzureUpload({\n    apiRoute,\n    chunkLargeFiles: true,\n    collectionSlug: 'media',\n    file: createFile(),\n    serverHandlerPath,\n    serverURL,\n    updateFilename: vi.fn(),\n    ...overrides,\n  })\n\ndescribe('handleAzureUpload', () => {\n  beforeEach(() => {\n    vi.clearAllMocks()\n    vi.unstubAllGlobals()\n    uploadDataMock.mockResolvedValue(undefined)\n  })\n\n  describe('shared behavior', () => {\n    it('should request a signed URL from the server handler', async () => {\n      const fetchMock = mockSignedURLResponse({ docPrefix: 'docs', url: signedURL })\n\n      await invoke({ docPrefix: 'docs' })\n\n      const [calledURL, init] = fetchMock.mock.calls[0]!\n      expect(calledURL).toBe(`${serverURL}${apiRoute}${serverHandlerPath}`)\n      expect(init.method).toBe('POST')\n      expect(JSON.parse(init.body)).toEqual({\n        collectionSlug: 'media',\n        docPrefix: 'docs',\n        filename: 'file.png',\n        mimeType: 'image/png',\n      })\n    })\n\n    it('should call updateFilename when the server returns a sanitized filename', async () => {\n      mockSignedURLResponse({ docPrefix: 'docs', filename: 'file-1.png', url: signedURL })\n      const updateFilename = vi.fn()\n\n      await invoke({ updateFilename })\n\n      expect(updateFilename).toHaveBeenCalledWith('file-1.png')\n    })\n\n    it('should not call updateFilename when the filename is unchanged', async () => {\n      mockSignedURLResponse({ docPrefix: 'docs', filename: 'file.png', url: signedURL })\n      const updateFilename = vi.fn()\n\n      await invoke({ updateFilename })\n\n      expect(updateFilename).not.toHaveBeenCalled()\n    })\n\n    it('should return the sanitized doc prefix', async () => {\n      mockSignedURLResponse({ docPrefix: 'sanitized-docs', url: signedURL })\n\n      const result = await invoke()\n\n      expect(result).toEqual({ prefix: 'sanitized-docs' })\n    })\n\n    it('should throw when the signed URL request fails, before any upload', async () => {\n      mockSignedURLResponse({}, false)\n\n      await expect(invoke()).rejects.toThrow()\n\n      expect(uploadDataMock).not.toHaveBeenCalled()\n      expect(blockBlobClientMock).not.toHaveBeenCalled()\n    })\n  })\n\n  describe('chunkLargeFiles: true (SDK block upload)', () => {\n    it('should upload via BlockBlobClient.uploadData rather than a raw PUT', async () => {\n      const fetchMock = mockSignedURLResponse({ docPrefix: 'docs', url: signedURL })\n      const file = createFile()\n\n      await invoke({ chunkLargeFiles: true, file })\n\n      expect(blockBlobClientMock).toHaveBeenCalledWith(signedURL)\n      expect(uploadDataMock).toHaveBeenCalledTimes(1)\n\n      const [uploadedFile, options] = uploadDataMock.mock.calls[0]!\n      expect(uploadedFile).toBe(file)\n      expect(options.blockSize).toBeGreaterThan(0)\n      expect(options.concurrency).toBeGreaterThan(0)\n\n      // Only the signed-URL request should hit fetch; no raw PUT to the blob URL.\n      expect(fetchMock).toHaveBeenCalledTimes(1)\n    })\n\n    it('should pass the file content type to the blob headers', async () => {\n      mockSignedURLResponse({ docPrefix: 'docs', url: signedURL })\n\n      await invoke({ chunkLargeFiles: true })\n\n      const [, options] = uploadDataMock.mock.calls[0]!\n      expect(options.blobHTTPHeaders).toEqual({ blobContentType: 'image/png' })\n    })\n\n    it('should propagate errors from uploadData', async () => {\n      mockSignedURLResponse({ docPrefix: 'docs', url: signedURL })\n      uploadDataMock.mockRejectedValue(new Error('block upload failed'))\n\n      await expect(invoke({ chunkLargeFiles: true })).rejects.toThrow('block upload failed')\n    })\n  })\n\n  describe('chunkLargeFiles: false (single PUT, default/legacy)', () => {\n    it('should upload via a single raw PUT with the BlockBlob header', async () => {\n      const fetchMock = mockSignedURLResponse({ docPrefix: 'docs', url: signedURL })\n      const file = createFile()\n\n      await invoke({ chunkLargeFiles: false, file })\n\n      // 1st fetch = signed-URL POST, 2nd = the raw PUT to the blob URL\n      expect(fetchMock).toHaveBeenCalledTimes(2)\n      const [putURL, putInit] = fetchMock.mock.calls[1]!\n      expect(putURL).toBe(signedURL)\n      expect(putInit.method).toBe('PUT')\n      expect(putInit.body).toBe(file)\n      expect(putInit.headers['x-ms-blob-type']).toBe('BlockBlob')\n      expect(putInit.headers['Content-Type']).toBe('image/png')\n    })\n\n    it('should not use the Azure SDK', async () => {\n      mockSignedURLResponse({ docPrefix: 'docs', url: signedURL })\n\n      await invoke({ chunkLargeFiles: false })\n\n      expect(blockBlobClientMock).not.toHaveBeenCalled()\n      expect(uploadDataMock).not.toHaveBeenCalled()\n    })\n  })\n})\n"],"names":["beforeEach","describe","expect","it","vi","uploadDataMock","fn","blockBlobClientMock","uploadData","mock","BlockBlobClient","handleAzureUpload","serverURL","apiRoute","serverHandlerPath","signedURL","createFile","File","Uint8Array","type","mockSignedURLResponse","body","ok","fetchMock","mockResolvedValue","json","Promise","resolve","stubGlobal","invoke","overrides","chunkLargeFiles","collectionSlug","file","updateFilename","clearAllMocks","unstubAllGlobals","undefined","docPrefix","url","calledURL","init","calls","toBe","method","JSON","parse","toEqual","filename","mimeType","toHaveBeenCalledWith","not","toHaveBeenCalled","result","prefix","rejects","toThrow","toHaveBeenCalledTimes","uploadedFile","options","blockSize","toBeGreaterThan","concurrency","blobHTTPHeaders","blobContentType","mockRejectedValue","Error","putURL","putInit","headers"],"mappings":"AAAA,SAASA,UAAU,EAAEC,QAAQ,EAAEC,MAAM,EAAEC,EAAE,EAAEC,EAAE,QAAQ,SAAQ;AAE7D,MAAMC,iBAAiBD,GAAGE,EAAE;AAC5B,MAAMC,sBAAsBH,GAAGE,EAAE,CAAC;IAChC,OAAO;QAAEE,YAAYH;IAAe;AACtC;AAEAD,GAAGK,IAAI,CAAC,uBAAuB,IAAO,CAAA;QACpCC,iBAAiBH;IACnB,CAAA;AAEA,SAASI,iBAAiB,QAAQ,yBAAwB;AAE1D,MAAMC,YAAY;AAClB,MAAMC,WAAW;AACjB,MAAMC,oBAAoB;AAC1B,MAAMC,YAAY;AAElB,MAAMC,aAAa,IAAM,IAAIC,KAAK;QAAC,IAAIC,WAAW;YAAC;YAAG;YAAG;SAAE;KAAE,EAAE,YAAY;QAAEC,MAAM;IAAY;AAE/F,MAAMC,wBAAwB,CAACC,MAA+BC,KAAK,IAAI;IACrE,MAAMC,YAAYnB,GAAGE,EAAE,GAAGkB,iBAAiB,CAAC;QAC1CC,MAAM,IAAMC,QAAQC,OAAO,CAACN;QAC5BC;IACF;IACAlB,GAAGwB,UAAU,CAAC,SAASL;IACvB,OAAOA;AACT;AAEA,MAAMM,SAAS,CAACC,YAA8D,CAAC,CAAC,GAC9EnB,kBAAkB;QAChBE;QACAkB,iBAAiB;QACjBC,gBAAgB;QAChBC,MAAMjB;QACNF;QACAF;QACAsB,gBAAgB9B,GAAGE,EAAE;QACrB,GAAGwB,SAAS;IACd;AAEF7B,SAAS,qBAAqB;IAC5BD,WAAW;QACTI,GAAG+B,aAAa;QAChB/B,GAAGgC,gBAAgB;QACnB/B,eAAemB,iBAAiB,CAACa;IACnC;IAEApC,SAAS,mBAAmB;QAC1BE,GAAG,uDAAuD;YACxD,MAAMoB,YAAYH,sBAAsB;gBAAEkB,WAAW;gBAAQC,KAAKxB;YAAU;YAE5E,MAAMc,OAAO;gBAAES,WAAW;YAAO;YAEjC,MAAM,CAACE,WAAWC,KAAK,GAAGlB,UAAUd,IAAI,CAACiC,KAAK,CAAC,EAAE;YACjDxC,OAAOsC,WAAWG,IAAI,CAAC,GAAG/B,YAAYC,WAAWC,mBAAmB;YACpEZ,OAAOuC,KAAKG,MAAM,EAAED,IAAI,CAAC;YACzBzC,OAAO2C,KAAKC,KAAK,CAACL,KAAKpB,IAAI,GAAG0B,OAAO,CAAC;gBACpCf,gBAAgB;gBAChBM,WAAW;gBACXU,UAAU;gBACVC,UAAU;YACZ;QACF;QAEA9C,GAAG,2EAA2E;YAC5EiB,sBAAsB;gBAAEkB,WAAW;gBAAQU,UAAU;gBAAcT,KAAKxB;YAAU;YAClF,MAAMmB,iBAAiB9B,GAAGE,EAAE;YAE5B,MAAMuB,OAAO;gBAAEK;YAAe;YAE9BhC,OAAOgC,gBAAgBgB,oBAAoB,CAAC;QAC9C;QAEA/C,GAAG,iEAAiE;YAClEiB,sBAAsB;gBAAEkB,WAAW;gBAAQU,UAAU;gBAAYT,KAAKxB;YAAU;YAChF,MAAMmB,iBAAiB9B,GAAGE,EAAE;YAE5B,MAAMuB,OAAO;gBAAEK;YAAe;YAE9BhC,OAAOgC,gBAAgBiB,GAAG,CAACC,gBAAgB;QAC7C;QAEAjD,GAAG,0CAA0C;YAC3CiB,sBAAsB;gBAAEkB,WAAW;gBAAkBC,KAAKxB;YAAU;YAEpE,MAAMsC,SAAS,MAAMxB;YAErB3B,OAAOmD,QAAQN,OAAO,CAAC;gBAAEO,QAAQ;YAAiB;QACpD;QAEAnD,GAAG,qEAAqE;YACtEiB,sBAAsB,CAAC,GAAG;YAE1B,MAAMlB,OAAO2B,UAAU0B,OAAO,CAACC,OAAO;YAEtCtD,OAAOG,gBAAgB8C,GAAG,CAACC,gBAAgB;YAC3ClD,OAAOK,qBAAqB4C,GAAG,CAACC,gBAAgB;QAClD;IACF;IAEAnD,SAAS,4CAA4C;QACnDE,GAAG,sEAAsE;YACvE,MAAMoB,YAAYH,sBAAsB;gBAAEkB,WAAW;gBAAQC,KAAKxB;YAAU;YAC5E,MAAMkB,OAAOjB;YAEb,MAAMa,OAAO;gBAAEE,iBAAiB;gBAAME;YAAK;YAE3C/B,OAAOK,qBAAqB2C,oBAAoB,CAACnC;YACjDb,OAAOG,gBAAgBoD,qBAAqB,CAAC;YAE7C,MAAM,CAACC,cAAcC,QAAQ,GAAGtD,eAAeI,IAAI,CAACiC,KAAK,CAAC,EAAE;YAC5DxC,OAAOwD,cAAcf,IAAI,CAACV;YAC1B/B,OAAOyD,QAAQC,SAAS,EAAEC,eAAe,CAAC;YAC1C3D,OAAOyD,QAAQG,WAAW,EAAED,eAAe,CAAC;YAE5C,4EAA4E;YAC5E3D,OAAOqB,WAAWkC,qBAAqB,CAAC;QAC1C;QAEAtD,GAAG,yDAAyD;YAC1DiB,sBAAsB;gBAAEkB,WAAW;gBAAQC,KAAKxB;YAAU;YAE1D,MAAMc,OAAO;gBAAEE,iBAAiB;YAAK;YAErC,MAAM,GAAG4B,QAAQ,GAAGtD,eAAeI,IAAI,CAACiC,KAAK,CAAC,EAAE;YAChDxC,OAAOyD,QAAQI,eAAe,EAAEhB,OAAO,CAAC;gBAAEiB,iBAAiB;YAAY;QACzE;QAEA7D,GAAG,2CAA2C;YAC5CiB,sBAAsB;gBAAEkB,WAAW;gBAAQC,KAAKxB;YAAU;YAC1DV,eAAe4D,iBAAiB,CAAC,IAAIC,MAAM;YAE3C,MAAMhE,OAAO2B,OAAO;gBAAEE,iBAAiB;YAAK,IAAIwB,OAAO,CAACC,OAAO,CAAC;QAClE;IACF;IAEAvD,SAAS,uDAAuD;QAC9DE,GAAG,gEAAgE;YACjE,MAAMoB,YAAYH,sBAAsB;gBAAEkB,WAAW;gBAAQC,KAAKxB;YAAU;YAC5E,MAAMkB,OAAOjB;YAEb,MAAMa,OAAO;gBAAEE,iBAAiB;gBAAOE;YAAK;YAE5C,iEAAiE;YACjE/B,OAAOqB,WAAWkC,qBAAqB,CAAC;YACxC,MAAM,CAACU,QAAQC,QAAQ,GAAG7C,UAAUd,IAAI,CAACiC,KAAK,CAAC,EAAE;YACjDxC,OAAOiE,QAAQxB,IAAI,CAAC5B;YACpBb,OAAOkE,QAAQxB,MAAM,EAAED,IAAI,CAAC;YAC5BzC,OAAOkE,QAAQ/C,IAAI,EAAEsB,IAAI,CAACV;YAC1B/B,OAAOkE,QAAQC,OAAO,CAAC,iBAAiB,EAAE1B,IAAI,CAAC;YAC/CzC,OAAOkE,QAAQC,OAAO,CAAC,eAAe,EAAE1B,IAAI,CAAC;QAC/C;QAEAxC,GAAG,gCAAgC;YACjCiB,sBAAsB;gBAAEkB,WAAW;gBAAQC,KAAKxB;YAAU;YAE1D,MAAMc,OAAO;gBAAEE,iBAAiB;YAAM;YAEtC7B,OAAOK,qBAAqB4C,GAAG,CAACC,gBAAgB;YAChDlD,OAAOG,gBAAgB8C,GAAG,CAACC,gBAAgB;QAC7C;IACF;AACF"}

package/dist/generateSignedURL.js

@@ -32,7 +32,7 @@ export const getGenerateSignedURLHandler = ({ access = defaultAccess, collection
             blobName: fileKey,
             containerName,
             contentType: mimeType,
-            expiresOn: new Date(Date.now() + 30 * 60 * 1000),
+            expiresOn: new Date(Date.now() + 60 * 60 * 1000),
             permissions: BlobSASPermissions.parse('w'),
             startsOn: new Date()
         }, getStorageClient().credential);

package/dist/generateSignedURL.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/generateSignedURL.ts"],"sourcesContent":["import type { ContainerClient, StorageSharedKeyCredential } from '@azure/storage-blob'\nimport type { ClientUploadsAccess } from '@payloadcms/plugin-cloud-storage/types'\nimport type { PayloadHandler } from 'payload'\n\nimport { BlobSASPermissions, generateBlobSASQueryParameters } from '@azure/storage-blob'\nimport { resolveSignedURLKey } from '@payloadcms/plugin-cloud-storage/utilities'\nimport { APIError, Forbidden } from 'payload'\n\nimport type { AzureStorageOptions } from './index.js'\n\ninterface Args {\n  access?: ClientUploadsAccess\n  collections: AzureStorageOptions['collections']\n  containerName: string\n  getStorageClient: () => ContainerClient\n  useCompositePrefixes?: boolean\n}\n\nconst defaultAccess: Args['access'] = ({ req }) => !!req.user\n\nexport const getGenerateSignedURLHandler = ({\n  access = defaultAccess,\n  collections,\n  containerName,\n  getStorageClient,\n  useCompositePrefixes = false,\n}: Args): PayloadHandler => {\n  return async (req) => {\n    if (!req.json) {\n      throw new APIError('Unreachable')\n    }\n\n    const { collectionSlug, docPrefix, filename, mimeType } = (await req.json()) as {\n      collectionSlug: string\n      docPrefix?: string\n      filename: string\n      mimeType: string\n    }\n\n    const collectionStorageConfig = collections[collectionSlug]\n    if (!collectionStorageConfig) {\n      throw new APIError(`Collection ${collectionSlug} was not found in Azure storage options`)\n    }\n\n    const collectionPrefix =\n      (typeof collectionStorageConfig === 'object' && collectionStorageConfig.prefix) || ''\n\n    if (!(await access({ collectionSlug, req }))) {\n      throw new Forbidden()\n    }\n\n    const { fileKey, sanitizedDocPrefix, sanitizedFilename } = await resolveSignedURLKey({\n      collectionPrefix,\n      collectionSlug,\n      docPrefix,\n      filename,\n      req,\n      useCompositePrefixes,\n    })\n\n    const blobClient = getStorageClient().getBlobClient(fileKey)\n\n    const sasToken = generateBlobSASQueryParameters(\n      {\n        blobName: fileKey,\n        containerName,\n        contentType: mimeType,\n        expiresOn: new Date(Date.now() + 30 * 60 * 1000),\n        permissions: BlobSASPermissions.parse('w'),\n        startsOn: new Date(),\n      },\n      getStorageClient().credential as StorageSharedKeyCredential,\n    )\n\n    return Response.json({\n      docPrefix: sanitizedDocPrefix,\n      filename: sanitizedFilename,\n      url: `${blobClient.url}?${sasToken.toString()}`,\n    })\n  }\n}\n"],"names":["BlobSASPermissions","generateBlobSASQueryParameters","resolveSignedURLKey","APIError","Forbidden","defaultAccess","req","user","getGenerateSignedURLHandler","access","collections","containerName","getStorageClient","useCompositePrefixes","json","collectionSlug","docPrefix","filename","mimeType","collectionStorageConfig","collectionPrefix","prefix","fileKey","sanitizedDocPrefix","sanitizedFilename","blobClient","getBlobClient","sasToken","blobName","contentType","expiresOn","Date","now","permissions","parse","startsOn","credential","Response","url","toString"],"mappings":"AAIA,SAASA,kBAAkB,EAAEC,8BAA8B,QAAQ,sBAAqB;AACxF,SAASC,mBAAmB,QAAQ,6CAA4C;AAChF,SAASC,QAAQ,EAAEC,SAAS,QAAQ,UAAS;AAY7C,MAAMC,gBAAgC,CAAC,EAAEC,GAAG,EAAE,GAAK,CAAC,CAACA,IAAIC,IAAI;AAE7D,OAAO,MAAMC,8BAA8B,CAAC,EAC1CC,SAASJ,aAAa,EACtBK,WAAW,EACXC,aAAa,EACbC,gBAAgB,EAChBC,uBAAuB,KAAK,EACvB;IACL,OAAO,OAAOP;QACZ,IAAI,CAACA,IAAIQ,IAAI,EAAE;YACb,MAAM,IAAIX,SAAS;QACrB;QAEA,MAAM,EAAEY,cAAc,EAAEC,SAAS,EAAEC,QAAQ,EAAEC,QAAQ,EAAE,GAAI,MAAMZ,IAAIQ,IAAI;QAOzE,MAAMK,0BAA0BT,WAAW,CAACK,eAAe;QAC3D,IAAI,CAACI,yBAAyB;YAC5B,MAAM,IAAIhB,SAAS,CAAC,WAAW,EAAEY,eAAe,uCAAuC,CAAC;QAC1F;QAEA,MAAMK,mBACJ,AAAC,OAAOD,4BAA4B,YAAYA,wBAAwBE,MAAM,IAAK;QAErF,IAAI,CAAE,MAAMZ,OAAO;YAAEM;YAAgBT;QAAI,IAAK;YAC5C,MAAM,IAAIF;QACZ;QAEA,MAAM,EAAEkB,OAAO,EAAEC,kBAAkB,EAAEC,iBAAiB,EAAE,GAAG,MAAMtB,oBAAoB;YACnFkB;YACAL;YACAC;YACAC;YACAX;YACAO;QACF;QAEA,MAAMY,aAAab,mBAAmBc,aAAa,CAACJ;QAEpD,MAAMK,WAAW1B,+BACf;YACE2B,UAAUN;YACVX;YACAkB,aAAaX;YACbY,WAAW,IAAIC,KAAKA,KAAKC,GAAG,KAAK,KAAK,KAAK;YAC3CC,aAAajC,mBAAmBkC,KAAK,CAAC;YACtCC,UAAU,IAAIJ;QAChB,GACAnB,mBAAmBwB,UAAU;QAG/B,OAAOC,SAASvB,IAAI,CAAC;YACnBE,WAAWO;YACXN,UAAUO;YACVc,KAAK,GAAGb,WAAWa,GAAG,CAAC,CAAC,EAAEX,SAASY,QAAQ,IAAI;QACjD;IACF;AACF,EAAC"}
+{"version":3,"sources":["../src/generateSignedURL.ts"],"sourcesContent":["import type { ContainerClient, StorageSharedKeyCredential } from '@azure/storage-blob'\nimport type { ClientUploadsAccess } from '@payloadcms/plugin-cloud-storage/types'\nimport type { PayloadHandler } from 'payload'\n\nimport { BlobSASPermissions, generateBlobSASQueryParameters } from '@azure/storage-blob'\nimport { resolveSignedURLKey } from '@payloadcms/plugin-cloud-storage/utilities'\nimport { APIError, Forbidden } from 'payload'\n\nimport type { AzureStorageOptions } from './index.js'\n\ninterface Args {\n  access?: ClientUploadsAccess\n  collections: AzureStorageOptions['collections']\n  containerName: string\n  getStorageClient: () => ContainerClient\n  useCompositePrefixes?: boolean\n}\n\nconst defaultAccess: Args['access'] = ({ req }) => !!req.user\n\nexport const getGenerateSignedURLHandler = ({\n  access = defaultAccess,\n  collections,\n  containerName,\n  getStorageClient,\n  useCompositePrefixes = false,\n}: Args): PayloadHandler => {\n  return async (req) => {\n    if (!req.json) {\n      throw new APIError('Unreachable')\n    }\n\n    const { collectionSlug, docPrefix, filename, mimeType } = (await req.json()) as {\n      collectionSlug: string\n      docPrefix?: string\n      filename: string\n      mimeType: string\n    }\n\n    const collectionStorageConfig = collections[collectionSlug]\n    if (!collectionStorageConfig) {\n      throw new APIError(`Collection ${collectionSlug} was not found in Azure storage options`)\n    }\n\n    const collectionPrefix =\n      (typeof collectionStorageConfig === 'object' && collectionStorageConfig.prefix) || ''\n\n    if (!(await access({ collectionSlug, req }))) {\n      throw new Forbidden()\n    }\n\n    const { fileKey, sanitizedDocPrefix, sanitizedFilename } = await resolveSignedURLKey({\n      collectionPrefix,\n      collectionSlug,\n      docPrefix,\n      filename,\n      req,\n      useCompositePrefixes,\n    })\n\n    const blobClient = getStorageClient().getBlobClient(fileKey)\n\n    const sasToken = generateBlobSASQueryParameters(\n      {\n        blobName: fileKey,\n        containerName,\n        contentType: mimeType,\n        expiresOn: new Date(Date.now() + 60 * 60 * 1000),\n        permissions: BlobSASPermissions.parse('w'),\n        startsOn: new Date(),\n      },\n      getStorageClient().credential as StorageSharedKeyCredential,\n    )\n\n    return Response.json({\n      docPrefix: sanitizedDocPrefix,\n      filename: sanitizedFilename,\n      url: `${blobClient.url}?${sasToken.toString()}`,\n    })\n  }\n}\n"],"names":["BlobSASPermissions","generateBlobSASQueryParameters","resolveSignedURLKey","APIError","Forbidden","defaultAccess","req","user","getGenerateSignedURLHandler","access","collections","containerName","getStorageClient","useCompositePrefixes","json","collectionSlug","docPrefix","filename","mimeType","collectionStorageConfig","collectionPrefix","prefix","fileKey","sanitizedDocPrefix","sanitizedFilename","blobClient","getBlobClient","sasToken","blobName","contentType","expiresOn","Date","now","permissions","parse","startsOn","credential","Response","url","toString"],"mappings":"AAIA,SAASA,kBAAkB,EAAEC,8BAA8B,QAAQ,sBAAqB;AACxF,SAASC,mBAAmB,QAAQ,6CAA4C;AAChF,SAASC,QAAQ,EAAEC,SAAS,QAAQ,UAAS;AAY7C,MAAMC,gBAAgC,CAAC,EAAEC,GAAG,EAAE,GAAK,CAAC,CAACA,IAAIC,IAAI;AAE7D,OAAO,MAAMC,8BAA8B,CAAC,EAC1CC,SAASJ,aAAa,EACtBK,WAAW,EACXC,aAAa,EACbC,gBAAgB,EAChBC,uBAAuB,KAAK,EACvB;IACL,OAAO,OAAOP;QACZ,IAAI,CAACA,IAAIQ,IAAI,EAAE;YACb,MAAM,IAAIX,SAAS;QACrB;QAEA,MAAM,EAAEY,cAAc,EAAEC,SAAS,EAAEC,QAAQ,EAAEC,QAAQ,EAAE,GAAI,MAAMZ,IAAIQ,IAAI;QAOzE,MAAMK,0BAA0BT,WAAW,CAACK,eAAe;QAC3D,IAAI,CAACI,yBAAyB;YAC5B,MAAM,IAAIhB,SAAS,CAAC,WAAW,EAAEY,eAAe,uCAAuC,CAAC;QAC1F;QAEA,MAAMK,mBACJ,AAAC,OAAOD,4BAA4B,YAAYA,wBAAwBE,MAAM,IAAK;QAErF,IAAI,CAAE,MAAMZ,OAAO;YAAEM;YAAgBT;QAAI,IAAK;YAC5C,MAAM,IAAIF;QACZ;QAEA,MAAM,EAAEkB,OAAO,EAAEC,kBAAkB,EAAEC,iBAAiB,EAAE,GAAG,MAAMtB,oBAAoB;YACnFkB;YACAL;YACAC;YACAC;YACAX;YACAO;QACF;QAEA,MAAMY,aAAab,mBAAmBc,aAAa,CAACJ;QAEpD,MAAMK,WAAW1B,+BACf;YACE2B,UAAUN;YACVX;YACAkB,aAAaX;YACbY,WAAW,IAAIC,KAAKA,KAAKC,GAAG,KAAK,KAAK,KAAK;YAC3CC,aAAajC,mBAAmBkC,KAAK,CAAC;YACtCC,UAAU,IAAIJ;QAChB,GACAnB,mBAAmBwB,UAAU;QAG/B,OAAOC,SAASvB,IAAI,CAAC;YACnBE,WAAWO;YACXN,UAAUO;YACVc,KAAK,GAAGb,WAAWa,GAAG,CAAC,CAAC,EAAEX,SAASY,QAAQ,IAAI;QACjD;IACF;AACF,EAAC"}

package/dist/index.d.ts

@@ -1,6 +1,17 @@
-import type { ClientUploadsConfig, CollectionOptions } from '@payloadcms/plugin-cloud-storage/types';
+import type { ClientUploadsAccess, CollectionOptions } from '@payloadcms/plugin-cloud-storage/types';
 import type { Plugin, UploadCollectionSlug } from 'payload';
 import { getStorageClient as getStorageClientFunc } from './utils/getStorageClient.js';
+export type AzureClientUploadsConfig = {
+    access?: ClientUploadsAccess;
+    /**
+     * Upload large files in blocks via the Azure Blob SDK, lifting the ~5GB
+     * single-request limit. Requires broader CORS on the storage account
+     * (the `OPTIONS`/`PUT` methods and `x-ms-*` headers).
+     *
+     * @default false
+     */
+    chunkLargeFiles?: boolean;
+} | boolean;
 export type AzureStorageOptions = {
     /**
      * Whether or not to allow the container to be created if it does not exist
@@ -31,8 +42,15 @@ export type AzureStorageOptions = {
     clientCacheKey?: string;
     /**
      * Do uploads directly on the client to bypass limits on Vercel. You must allow CORS PUT method to your website.
+     *
+     * Set `chunkLargeFiles: true` to upload through the Azure Blob SDK, which splits
+     * large files into blocks and lifts the ~5GB single-request limit. The SDK sends
+     * additional `x-ms-*` headers, so your storage account's CORS rules must allow the
+     * `OPTIONS` and `PUT` methods and those headers (allowed headers `*`, or at minimum
+     * `x-ms-*,content-type,content-length`). Left off, uploads use a single request
+     * (the default) and are capped at ~5GB.
      */
-    clientUploads?: ClientUploadsConfig;
+    clientUploads?: AzureClientUploadsConfig;
     /**
      * Collection options to apply the Azure Blob adapter to.
      */

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EAEnB,iBAAiB,EAClB,MAAM,wCAAwC,CAAA;AAC/C,OAAO,KAAK,EAAU,MAAM,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAA;AAOnE,OAAO,EAAE,gBAAgB,IAAI,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAEtF,MAAM,MAAM,mBAAmB,GAAG;IAChC;;;;OAIG;IACH,oBAAoB,EAAE,OAAO,CAAA;IAE7B;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAE5B;;OAEG;IACH,OAAO,EAAE,MAAM,CAAA;IAEf;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IAEvB;;OAEG;IACH,aAAa,CAAC,EAAE,mBAAmB,CAAA;IAEnC;;OAEG;IACH,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,IAAI,CAAC,iBAAiB,EAAE,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA;IAE7F;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAA;IAExB;;OAEG;IACH,aAAa,EAAE,MAAM,CAAA;IAErB;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB;;;;;;;;;;;;OAYG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAC/B,CAAA;AAED,KAAK,kBAAkB,GAAG,CAAC,gBAAgB,EAAE,mBAAmB,KAAK,MAAM,CAAA;AAE3E,eAAO,MAAM,YAAY,EAAE,kBAyFxB,CAAA;AAEH,OAAO,EAAE,oBAAoB,IAAI,gBAAgB,EAAE,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EAEnB,iBAAiB,EAClB,MAAM,wCAAwC,CAAA;AAC/C,OAAO,KAAK,EAAU,MAAM,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAA;AAOnE,OAAO,EAAE,gBAAgB,IAAI,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAEtF,MAAM,MAAM,wBAAwB,GAChC;IACE,MAAM,CAAC,EAAE,mBAAmB,CAAA;IAC5B;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,OAAO,CAAA;CAC1B,GACD,OAAO,CAAA;AAEX,MAAM,MAAM,mBAAmB,GAAG;IAChC;;;;OAIG;IACH,oBAAoB,EAAE,OAAO,CAAA;IAE7B;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAE5B;;OAEG;IACH,OAAO,EAAE,MAAM,CAAA;IAEf;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IAEvB;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,wBAAwB,CAAA;IAExC;;OAEG;IACH,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,IAAI,CAAC,iBAAiB,EAAE,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA;IAE7F;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAA;IAExB;;OAEG;IACH,aAAa,EAAE,MAAM,CAAA;IAErB;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB;;;;;;;;;;;;OAYG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAC/B,CAAA;AAED,KAAK,kBAAkB,GAAG,CAAC,gBAAgB,EAAE,mBAAmB,KAAK,MAAM,CAAA;AAE3E,eAAO,MAAM,YAAY,EAAE,kBA+FxB,CAAA;AAEH,OAAO,EAAE,oBAAoB,IAAI,gBAAgB,EAAE,CAAA"}

package/dist/index.js

@@ -14,6 +14,9 @@ export const azureStorage = (azureStorageOptions)=>(incomingConfig)=>{
             collections: azureStorageOptions.collections,
             config: incomingConfig,
             enabled: !isPluginDisabled && Boolean(azureStorageOptions.clientUploads),
+            extraClientHandlerProps: ()=>({
+                    chunkLargeFiles: typeof azureStorageOptions.clientUploads === 'object' ? Boolean(azureStorageOptions.clientUploads.chunkLargeFiles) : false
+                }),
             serverHandler: getGenerateSignedURLHandler({
                 access: typeof azureStorageOptions.clientUploads === 'object' ? azureStorageOptions.clientUploads.access : undefined,
                 collections: azureStorageOptions.collections,

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type {\n  ClientUploadsConfig,\n  PluginOptions as CloudStoragePluginOptions,\n  CollectionOptions,\n} from '@payloadcms/plugin-cloud-storage/types'\nimport type { Config, Plugin, UploadCollectionSlug } from 'payload'\n\nimport { cloudStoragePlugin } from '@payloadcms/plugin-cloud-storage'\nimport { initClientUploads } from '@payloadcms/plugin-cloud-storage/utilities'\n\nimport { createAzureAdapter } from './adapter.js'\nimport { getGenerateSignedURLHandler } from './generateSignedURL.js'\nimport { getStorageClient as getStorageClientFunc } from './utils/getStorageClient.js'\n\nexport type AzureStorageOptions = {\n  /**\n   * Whether or not to allow the container to be created if it does not exist\n   *\n   * @default false\n   */\n  allowContainerCreate: boolean\n\n  /**\n   * When enabled, fields (like the prefix field) will always be inserted into\n   * the collection schema regardless of whether the plugin is enabled. This\n   * ensures a consistent schema across all environments.\n   *\n   * This will be enabled by default in Payload v4.\n   *\n   * @default false\n   */\n  alwaysInsertFields?: boolean\n\n  /**\n   * Base URL for the Azure Blob storage account\n   */\n  baseURL: string\n\n  /**\n   * Optional cache key to identify the Azure Blob storage client instance.\n   * If not provided, a default key will be used.\n   *\n   * @default `azure:containerName`\n   */\n  clientCacheKey?: string\n\n  /**\n   * Do uploads directly on the client to bypass limits on Vercel. You must allow CORS PUT method to your website.\n   */\n  clientUploads?: ClientUploadsConfig\n\n  /**\n   * Collection options to apply the Azure Blob adapter to.\n   */\n  collections: Partial<Record<UploadCollectionSlug, Omit<CollectionOptions, 'adapter'> | true>>\n\n  /**\n   * Azure Blob storage connection string\n   */\n  connectionString: string\n\n  /**\n   * Azure Blob storage container name\n   */\n  containerName: string\n\n  /**\n   * Whether or not to enable the plugin\n   *\n   * Default: true\n   */\n  enabled?: boolean\n  /**\n   * When true, the collection-level prefix and document-level prefix are combined\n   * (compositional). When false (default), document prefix overrides collection\n   * prefix entirely.\n   *\n   * Example:\n   * - collection prefix: `collection-prefix/`\n   * - document prefix: `document-prefix/`\n   * - resulting prefix with useCompositePrefixes=true: `collection-prefix/document-prefix/`\n   * - resulting prefix with useCompositePrefixes=false: `document-prefix/`\n   *\n   * @default false\n   */\n  useCompositePrefixes?: boolean\n}\n\ntype AzureStoragePlugin = (azureStorageArgs: AzureStorageOptions) => Plugin\n\nexport const azureStorage: AzureStoragePlugin =\n  (azureStorageOptions: AzureStorageOptions) =>\n  (incomingConfig: Config): Config => {\n    const getStorageClient = () =>\n      getStorageClientFunc({\n        connectionString: azureStorageOptions.connectionString,\n        containerName: azureStorageOptions.containerName,\n      })\n\n    const isPluginDisabled = azureStorageOptions.enabled === false\n\n    initClientUploads({\n      clientHandler: '@payloadcms/storage-azure/client#AzureClientUploadHandler',\n      collections: azureStorageOptions.collections,\n      config: incomingConfig,\n      enabled: !isPluginDisabled && Boolean(azureStorageOptions.clientUploads),\n      serverHandler: getGenerateSignedURLHandler({\n        access:\n          typeof azureStorageOptions.clientUploads === 'object'\n            ? azureStorageOptions.clientUploads.access\n            : undefined,\n        collections: azureStorageOptions.collections,\n        containerName: azureStorageOptions.containerName,\n        getStorageClient,\n        useCompositePrefixes: azureStorageOptions.useCompositePrefixes,\n      }),\n      serverHandlerPath: '/storage-azure-generate-signed-url',\n    })\n\n    if (isPluginDisabled) {\n      return incomingConfig\n    }\n\n    const createContainerIfNotExists = () => {\n      void getStorageClientFunc({\n        connectionString: azureStorageOptions.connectionString,\n        containerName: azureStorageOptions.containerName,\n      }).createIfNotExists({\n        access: 'blob',\n      })\n    }\n\n    const adapter = createAzureAdapter({\n      allowContainerCreate: azureStorageOptions.allowContainerCreate,\n      baseURL: azureStorageOptions.baseURL,\n      clientUploads: azureStorageOptions.clientUploads,\n      containerName: azureStorageOptions.containerName,\n      createContainerIfNotExists,\n      getStorageClient,\n      useCompositePrefixes: azureStorageOptions.useCompositePrefixes,\n    })\n\n    // Add adapter to each collection option object\n    const collectionsWithAdapter: CloudStoragePluginOptions['collections'] = Object.entries(\n      azureStorageOptions.collections,\n    ).reduce(\n      (acc, [slug, collOptions]) => ({\n        ...acc,\n        [slug]: {\n          ...(collOptions === true ? {} : collOptions),\n          adapter,\n        },\n      }),\n      {} as Record<string, CollectionOptions>,\n    )\n\n    // Set disableLocalStorage: true for collections specified in the plugin options\n    const config = {\n      ...incomingConfig,\n      collections: (incomingConfig.collections || []).map((collection) => {\n        if (!collectionsWithAdapter[collection.slug]) {\n          return collection\n        }\n\n        return {\n          ...collection,\n          upload: {\n            ...(typeof collection.upload === 'object' ? collection.upload : {}),\n            disableLocalStorage: true,\n          },\n        }\n      }),\n    }\n\n    return cloudStoragePlugin({\n      alwaysInsertFields: azureStorageOptions.alwaysInsertFields,\n      collections: collectionsWithAdapter,\n      useCompositePrefixes: azureStorageOptions.useCompositePrefixes,\n    })(config)\n  }\n\nexport { getStorageClientFunc as getStorageClient }\n"],"names":["cloudStoragePlugin","initClientUploads","createAzureAdapter","getGenerateSignedURLHandler","getStorageClient","getStorageClientFunc","azureStorage","azureStorageOptions","incomingConfig","connectionString","containerName","isPluginDisabled","enabled","clientHandler","collections","config","Boolean","clientUploads","serverHandler","access","undefined","useCompositePrefixes","serverHandlerPath","createContainerIfNotExists","createIfNotExists","adapter","allowContainerCreate","baseURL","collectionsWithAdapter","Object","entries","reduce","acc","slug","collOptions","map","collection","upload","disableLocalStorage","alwaysInsertFields"],"mappings":"AAOA,SAASA,kBAAkB,QAAQ,mCAAkC;AACrE,SAASC,iBAAiB,QAAQ,6CAA4C;AAE9E,SAASC,kBAAkB,QAAQ,eAAc;AACjD,SAASC,2BAA2B,QAAQ,yBAAwB;AACpE,SAASC,oBAAoBC,oBAAoB,QAAQ,8BAA6B;AA8EtF,OAAO,MAAMC,eACX,CAACC,sBACD,CAACC;QACC,MAAMJ,mBAAmB,IACvBC,qBAAqB;gBACnBI,kBAAkBF,oBAAoBE,gBAAgB;gBACtDC,eAAeH,oBAAoBG,aAAa;YAClD;QAEF,MAAMC,mBAAmBJ,oBAAoBK,OAAO,KAAK;QAEzDX,kBAAkB;YAChBY,eAAe;YACfC,aAAaP,oBAAoBO,WAAW;YAC5CC,QAAQP;YACRI,SAAS,CAACD,oBAAoBK,QAAQT,oBAAoBU,aAAa;YACvEC,eAAef,4BAA4B;gBACzCgB,QACE,OAAOZ,oBAAoBU,aAAa,KAAK,WACzCV,oBAAoBU,aAAa,CAACE,MAAM,GACxCC;gBACNN,aAAaP,oBAAoBO,WAAW;gBAC5CJ,eAAeH,oBAAoBG,aAAa;gBAChDN;gBACAiB,sBAAsBd,oBAAoBc,oBAAoB;YAChE;YACAC,mBAAmB;QACrB;QAEA,IAAIX,kBAAkB;YACpB,OAAOH;QACT;QAEA,MAAMe,6BAA6B;YACjC,KAAKlB,qBAAqB;gBACxBI,kBAAkBF,oBAAoBE,gBAAgB;gBACtDC,eAAeH,oBAAoBG,aAAa;YAClD,GAAGc,iBAAiB,CAAC;gBACnBL,QAAQ;YACV;QACF;QAEA,MAAMM,UAAUvB,mBAAmB;YACjCwB,sBAAsBnB,oBAAoBmB,oBAAoB;YAC9DC,SAASpB,oBAAoBoB,OAAO;YACpCV,eAAeV,oBAAoBU,aAAa;YAChDP,eAAeH,oBAAoBG,aAAa;YAChDa;YACAnB;YACAiB,sBAAsBd,oBAAoBc,oBAAoB;QAChE;QAEA,+CAA+C;QAC/C,MAAMO,yBAAmEC,OAAOC,OAAO,CACrFvB,oBAAoBO,WAAW,EAC/BiB,MAAM,CACN,CAACC,KAAK,CAACC,MAAMC,YAAY,GAAM,CAAA;gBAC7B,GAAGF,GAAG;gBACN,CAACC,KAAK,EAAE;oBACN,GAAIC,gBAAgB,OAAO,CAAC,IAAIA,WAAW;oBAC3CT;gBACF;YACF,CAAA,GACA,CAAC;QAGH,gFAAgF;QAChF,MAAMV,SAAS;YACb,GAAGP,cAAc;YACjBM,aAAa,AAACN,CAAAA,eAAeM,WAAW,IAAI,EAAE,AAAD,EAAGqB,GAAG,CAAC,CAACC;gBACnD,IAAI,CAACR,sBAAsB,CAACQ,WAAWH,IAAI,CAAC,EAAE;oBAC5C,OAAOG;gBACT;gBAEA,OAAO;oBACL,GAAGA,UAAU;oBACbC,QAAQ;wBACN,GAAI,OAAOD,WAAWC,MAAM,KAAK,WAAWD,WAAWC,MAAM,GAAG,CAAC,CAAC;wBAClEC,qBAAqB;oBACvB;gBACF;YACF;QACF;QAEA,OAAOtC,mBAAmB;YACxBuC,oBAAoBhC,oBAAoBgC,kBAAkB;YAC1DzB,aAAac;YACbP,sBAAsBd,oBAAoBc,oBAAoB;QAChE,GAAGN;IACL,EAAC;AAEH,SAASV,wBAAwBD,gBAAgB,GAAE"}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type {\n  ClientUploadsAccess,\n  PluginOptions as CloudStoragePluginOptions,\n  CollectionOptions,\n} from '@payloadcms/plugin-cloud-storage/types'\nimport type { Config, Plugin, UploadCollectionSlug } from 'payload'\n\nimport { cloudStoragePlugin } from '@payloadcms/plugin-cloud-storage'\nimport { initClientUploads } from '@payloadcms/plugin-cloud-storage/utilities'\n\nimport { createAzureAdapter } from './adapter.js'\nimport { getGenerateSignedURLHandler } from './generateSignedURL.js'\nimport { getStorageClient as getStorageClientFunc } from './utils/getStorageClient.js'\n\nexport type AzureClientUploadsConfig =\n  | {\n      access?: ClientUploadsAccess\n      /**\n       * Upload large files in blocks via the Azure Blob SDK, lifting the ~5GB\n       * single-request limit. Requires broader CORS on the storage account\n       * (the `OPTIONS`/`PUT` methods and `x-ms-*` headers).\n       *\n       * @default false\n       */\n      chunkLargeFiles?: boolean\n    }\n  | boolean\n\nexport type AzureStorageOptions = {\n  /**\n   * Whether or not to allow the container to be created if it does not exist\n   *\n   * @default false\n   */\n  allowContainerCreate: boolean\n\n  /**\n   * When enabled, fields (like the prefix field) will always be inserted into\n   * the collection schema regardless of whether the plugin is enabled. This\n   * ensures a consistent schema across all environments.\n   *\n   * This will be enabled by default in Payload v4.\n   *\n   * @default false\n   */\n  alwaysInsertFields?: boolean\n\n  /**\n   * Base URL for the Azure Blob storage account\n   */\n  baseURL: string\n\n  /**\n   * Optional cache key to identify the Azure Blob storage client instance.\n   * If not provided, a default key will be used.\n   *\n   * @default `azure:containerName`\n   */\n  clientCacheKey?: string\n\n  /**\n   * Do uploads directly on the client to bypass limits on Vercel. You must allow CORS PUT method to your website.\n   *\n   * Set `chunkLargeFiles: true` to upload through the Azure Blob SDK, which splits\n   * large files into blocks and lifts the ~5GB single-request limit. The SDK sends\n   * additional `x-ms-*` headers, so your storage account's CORS rules must allow the\n   * `OPTIONS` and `PUT` methods and those headers (allowed headers `*`, or at minimum\n   * `x-ms-*,content-type,content-length`). Left off, uploads use a single request\n   * (the default) and are capped at ~5GB.\n   */\n  clientUploads?: AzureClientUploadsConfig\n\n  /**\n   * Collection options to apply the Azure Blob adapter to.\n   */\n  collections: Partial<Record<UploadCollectionSlug, Omit<CollectionOptions, 'adapter'> | true>>\n\n  /**\n   * Azure Blob storage connection string\n   */\n  connectionString: string\n\n  /**\n   * Azure Blob storage container name\n   */\n  containerName: string\n\n  /**\n   * Whether or not to enable the plugin\n   *\n   * Default: true\n   */\n  enabled?: boolean\n  /**\n   * When true, the collection-level prefix and document-level prefix are combined\n   * (compositional). When false (default), document prefix overrides collection\n   * prefix entirely.\n   *\n   * Example:\n   * - collection prefix: `collection-prefix/`\n   * - document prefix: `document-prefix/`\n   * - resulting prefix with useCompositePrefixes=true: `collection-prefix/document-prefix/`\n   * - resulting prefix with useCompositePrefixes=false: `document-prefix/`\n   *\n   * @default false\n   */\n  useCompositePrefixes?: boolean\n}\n\ntype AzureStoragePlugin = (azureStorageArgs: AzureStorageOptions) => Plugin\n\nexport const azureStorage: AzureStoragePlugin =\n  (azureStorageOptions: AzureStorageOptions) =>\n  (incomingConfig: Config): Config => {\n    const getStorageClient = () =>\n      getStorageClientFunc({\n        connectionString: azureStorageOptions.connectionString,\n        containerName: azureStorageOptions.containerName,\n      })\n\n    const isPluginDisabled = azureStorageOptions.enabled === false\n\n    initClientUploads({\n      clientHandler: '@payloadcms/storage-azure/client#AzureClientUploadHandler',\n      collections: azureStorageOptions.collections,\n      config: incomingConfig,\n      enabled: !isPluginDisabled && Boolean(azureStorageOptions.clientUploads),\n      extraClientHandlerProps: () => ({\n        chunkLargeFiles:\n          typeof azureStorageOptions.clientUploads === 'object'\n            ? Boolean(azureStorageOptions.clientUploads.chunkLargeFiles)\n            : false,\n      }),\n      serverHandler: getGenerateSignedURLHandler({\n        access:\n          typeof azureStorageOptions.clientUploads === 'object'\n            ? azureStorageOptions.clientUploads.access\n            : undefined,\n        collections: azureStorageOptions.collections,\n        containerName: azureStorageOptions.containerName,\n        getStorageClient,\n        useCompositePrefixes: azureStorageOptions.useCompositePrefixes,\n      }),\n      serverHandlerPath: '/storage-azure-generate-signed-url',\n    })\n\n    if (isPluginDisabled) {\n      return incomingConfig\n    }\n\n    const createContainerIfNotExists = () => {\n      void getStorageClientFunc({\n        connectionString: azureStorageOptions.connectionString,\n        containerName: azureStorageOptions.containerName,\n      }).createIfNotExists({\n        access: 'blob',\n      })\n    }\n\n    const adapter = createAzureAdapter({\n      allowContainerCreate: azureStorageOptions.allowContainerCreate,\n      baseURL: azureStorageOptions.baseURL,\n      clientUploads: azureStorageOptions.clientUploads,\n      containerName: azureStorageOptions.containerName,\n      createContainerIfNotExists,\n      getStorageClient,\n      useCompositePrefixes: azureStorageOptions.useCompositePrefixes,\n    })\n\n    // Add adapter to each collection option object\n    const collectionsWithAdapter: CloudStoragePluginOptions['collections'] = Object.entries(\n      azureStorageOptions.collections,\n    ).reduce(\n      (acc, [slug, collOptions]) => ({\n        ...acc,\n        [slug]: {\n          ...(collOptions === true ? {} : collOptions),\n          adapter,\n        },\n      }),\n      {} as Record<string, CollectionOptions>,\n    )\n\n    // Set disableLocalStorage: true for collections specified in the plugin options\n    const config = {\n      ...incomingConfig,\n      collections: (incomingConfig.collections || []).map((collection) => {\n        if (!collectionsWithAdapter[collection.slug]) {\n          return collection\n        }\n\n        return {\n          ...collection,\n          upload: {\n            ...(typeof collection.upload === 'object' ? collection.upload : {}),\n            disableLocalStorage: true,\n          },\n        }\n      }),\n    }\n\n    return cloudStoragePlugin({\n      alwaysInsertFields: azureStorageOptions.alwaysInsertFields,\n      collections: collectionsWithAdapter,\n      useCompositePrefixes: azureStorageOptions.useCompositePrefixes,\n    })(config)\n  }\n\nexport { getStorageClientFunc as getStorageClient }\n"],"names":["cloudStoragePlugin","initClientUploads","createAzureAdapter","getGenerateSignedURLHandler","getStorageClient","getStorageClientFunc","azureStorage","azureStorageOptions","incomingConfig","connectionString","containerName","isPluginDisabled","enabled","clientHandler","collections","config","Boolean","clientUploads","extraClientHandlerProps","chunkLargeFiles","serverHandler","access","undefined","useCompositePrefixes","serverHandlerPath","createContainerIfNotExists","createIfNotExists","adapter","allowContainerCreate","baseURL","collectionsWithAdapter","Object","entries","reduce","acc","slug","collOptions","map","collection","upload","disableLocalStorage","alwaysInsertFields"],"mappings":"AAOA,SAASA,kBAAkB,QAAQ,mCAAkC;AACrE,SAASC,iBAAiB,QAAQ,6CAA4C;AAE9E,SAASC,kBAAkB,QAAQ,eAAc;AACjD,SAASC,2BAA2B,QAAQ,yBAAwB;AACpE,SAASC,oBAAoBC,oBAAoB,QAAQ,8BAA6B;AAmGtF,OAAO,MAAMC,eACX,CAACC,sBACD,CAACC;QACC,MAAMJ,mBAAmB,IACvBC,qBAAqB;gBACnBI,kBAAkBF,oBAAoBE,gBAAgB;gBACtDC,eAAeH,oBAAoBG,aAAa;YAClD;QAEF,MAAMC,mBAAmBJ,oBAAoBK,OAAO,KAAK;QAEzDX,kBAAkB;YAChBY,eAAe;YACfC,aAAaP,oBAAoBO,WAAW;YAC5CC,QAAQP;YACRI,SAAS,CAACD,oBAAoBK,QAAQT,oBAAoBU,aAAa;YACvEC,yBAAyB,IAAO,CAAA;oBAC9BC,iBACE,OAAOZ,oBAAoBU,aAAa,KAAK,WACzCD,QAAQT,oBAAoBU,aAAa,CAACE,eAAe,IACzD;gBACR,CAAA;YACAC,eAAejB,4BAA4B;gBACzCkB,QACE,OAAOd,oBAAoBU,aAAa,KAAK,WACzCV,oBAAoBU,aAAa,CAACI,MAAM,GACxCC;gBACNR,aAAaP,oBAAoBO,WAAW;gBAC5CJ,eAAeH,oBAAoBG,aAAa;gBAChDN;gBACAmB,sBAAsBhB,oBAAoBgB,oBAAoB;YAChE;YACAC,mBAAmB;QACrB;QAEA,IAAIb,kBAAkB;YACpB,OAAOH;QACT;QAEA,MAAMiB,6BAA6B;YACjC,KAAKpB,qBAAqB;gBACxBI,kBAAkBF,oBAAoBE,gBAAgB;gBACtDC,eAAeH,oBAAoBG,aAAa;YAClD,GAAGgB,iBAAiB,CAAC;gBACnBL,QAAQ;YACV;QACF;QAEA,MAAMM,UAAUzB,mBAAmB;YACjC0B,sBAAsBrB,oBAAoBqB,oBAAoB;YAC9DC,SAAStB,oBAAoBsB,OAAO;YACpCZ,eAAeV,oBAAoBU,aAAa;YAChDP,eAAeH,oBAAoBG,aAAa;YAChDe;YACArB;YACAmB,sBAAsBhB,oBAAoBgB,oBAAoB;QAChE;QAEA,+CAA+C;QAC/C,MAAMO,yBAAmEC,OAAOC,OAAO,CACrFzB,oBAAoBO,WAAW,EAC/BmB,MAAM,CACN,CAACC,KAAK,CAACC,MAAMC,YAAY,GAAM,CAAA;gBAC7B,GAAGF,GAAG;gBACN,CAACC,KAAK,EAAE;oBACN,GAAIC,gBAAgB,OAAO,CAAC,IAAIA,WAAW;oBAC3CT;gBACF;YACF,CAAA,GACA,CAAC;QAGH,gFAAgF;QAChF,MAAMZ,SAAS;YACb,GAAGP,cAAc;YACjBM,aAAa,AAACN,CAAAA,eAAeM,WAAW,IAAI,EAAE,AAAD,EAAGuB,GAAG,CAAC,CAACC;gBACnD,IAAI,CAACR,sBAAsB,CAACQ,WAAWH,IAAI,CAAC,EAAE;oBAC5C,OAAOG;gBACT;gBAEA,OAAO;oBACL,GAAGA,UAAU;oBACbC,QAAQ;wBACN,GAAI,OAAOD,WAAWC,MAAM,KAAK,WAAWD,WAAWC,MAAM,GAAG,CAAC,CAAC;wBAClEC,qBAAqB;oBACvB;gBACF;YACF;QACF;QAEA,OAAOxC,mBAAmB;YACxByC,oBAAoBlC,oBAAoBkC,kBAAkB;YAC1D3B,aAAagB;YACbP,sBAAsBhB,oBAAoBgB,oBAAoB;QAChE,GAAGR;IACL,EAAC;AAEH,SAASV,wBAAwBD,gBAAgB,GAAE"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@payloadcms/storage-azure",
-  "version": "3.86.0-internal.ac46214",
+  "version": "3.87.0",
   "description": "Payload storage adapter for Azure Blob Storage",
   "homepage": "https://payloadcms.com",
   "repository": {
@@ -39,13 +39,13 @@
   "dependencies": {
     "@azure/abort-controller": "^1.1.0",
     "@azure/storage-blob": "^12.11.0",
-    "@payloadcms/plugin-cloud-storage": "3.86.0-internal.ac46214"
+    "@payloadcms/plugin-cloud-storage": "3.87.0"
   },
   "devDependencies": {
-    "payload": "3.86.0-internal.ac46214"
+    "payload": "3.87.0"
   },
   "peerDependencies": {
-    "payload": "3.86.0-internal.ac46214"
+    "payload": "3.87.0"
   },
   "engines": {
     "node": "^18.20.2 || >=20.9.0"