payload-zitadel-plugin 0.3.4 → 0.3.5

package/README.md

@@ -12,7 +12,7 @@ Thus, the user collection in PayloadCMS becomes just a shadow of the information
 ## Install
 
 ```shell
-pnpm add payload-zitadel-plugin@0.3.4
+pnpm add payload-zitadel-plugin@0.3.5
 ```
 
 ## Configuration

package/dist/components/client/Avatar/index.d.ts

@@ -0,0 +1,4 @@
+import React from 'react';
+import type { ZitadelAvatarProps } from '../../../types.js';
+export declare const Avatar: ({ imageFieldName }: ZitadelAvatarProps) => React.JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/dist/components/client/Avatar/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/components/client/Avatar/index.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,MAAM,OAAO,CAAA;AAKzB,OAAO,KAAK,EAAC,kBAAkB,EAAC,MAAM,mBAAmB,CAAA;AAEzD,eAAO,MAAM,MAAM,uBAAsB,kBAAkB,sBA6B1D,CAAA"}

package/dist/components/client/{Avatar.js → Avatar/index.js}

@@ -1,9 +1,17 @@
 'use client';
 import React from 'react';
+import { usePathname } from 'next/navigation.js';
+import { useAuth, useConfig } from '@payloadcms/ui';
 import { DefaultAccountIcon } from '@payloadcms/ui/graphics/Account/Default';
-import { useAuth } from '@payloadcms/ui';
-export const Avatar = ({ active, imageFieldName })=>{
+import { formatAdminURL } from '@payloadcms/ui/utilities/formatAdminURL';
+export const Avatar = ({ imageFieldName })=>{
+    const { config: { admin: { routes: { account: accountRoute } }, routes: { admin: adminRoute } } } = useConfig();
     const { user } = useAuth();
+    const pathname = usePathname();
+    const isOnAccountPage = pathname === formatAdminURL({
+        adminRoute,
+        path: accountRoute
+    });
     return user && user[imageFieldName] ? /*#__PURE__*/ React.createElement(React.Fragment, null, /*#__PURE__*/ React.createElement("style", null, 'zitadel-avatar:hover { filter: brightness(1.2); }'), /*#__PURE__*/ React.createElement("img", {
         className: "zitadel-avatar",
         src: user[imageFieldName],
@@ -12,13 +20,13 @@ export const Avatar = ({ active, imageFieldName })=>{
         alt: "Profile Picture",
         style: {
             borderRadius: '100%',
-            ...active ? {
+            ...isOnAccountPage ? {
                 filter: 'brightness(.8)'
             } : {}
         }
     })) : /*#__PURE__*/ React.createElement(DefaultAccountIcon, {
-        active: active
+        active: isOnAccountPage
     });
 };
 
-//# sourceMappingURL=Avatar.js.map
+//# sourceMappingURL=index.js.map

package/dist/components/client/Avatar/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/components/client/Avatar/index.tsx"],"sourcesContent":["'use client'\n\nimport React from 'react'\nimport {usePathname} from 'next/navigation.js'\nimport {useAuth, useConfig} from '@payloadcms/ui'\nimport {DefaultAccountIcon} from '@payloadcms/ui/graphics/Account/Default'\nimport {formatAdminURL} from '@payloadcms/ui/utilities/formatAdminURL'\nimport type {ZitadelAvatarProps} from '../../../types.js'\n\nexport const Avatar = ({imageFieldName}: ZitadelAvatarProps) => {\n\n    const {\n        config: {\n            admin: {\n                routes: {account: accountRoute}\n            },\n            routes: {admin: adminRoute}\n        }\n    } = useConfig()\n\n    const {user} = useAuth()\n\n    const pathname = usePathname()\n    const isOnAccountPage = pathname === formatAdminURL({adminRoute, path: accountRoute})\n\n    return (\n        user && user[imageFieldName] ?\n            <>\n                <style>{'zitadel-avatar:hover { filter: brightness(1.2); }'}</style>\n                <img className=\"zitadel-avatar\" src={user[imageFieldName]} height={25} width={25} alt=\"Profile Picture\"\n                     style={{\n                         borderRadius: '100%',\n                         ...(isOnAccountPage ? {filter: 'brightness(.8)'} : {})\n                     }}/>\n            </> :\n            <DefaultAccountIcon active={isOnAccountPage}/>\n    )\n\n}\n"],"names":["React","usePathname","useAuth","useConfig","DefaultAccountIcon","formatAdminURL","Avatar","imageFieldName","config","admin","routes","account","accountRoute","adminRoute","user","pathname","isOnAccountPage","path","style","img","className","src","height","width","alt","borderRadius","filter","active"],"mappings":"AAAA;AAEA,OAAOA,WAAW,QAAO;AACzB,SAAQC,WAAW,QAAO,qBAAoB;AAC9C,SAAQC,OAAO,EAAEC,SAAS,QAAO,iBAAgB;AACjD,SAAQC,kBAAkB,QAAO,0CAAyC;AAC1E,SAAQC,cAAc,QAAO,0CAAyC;AAGtE,OAAO,MAAMC,SAAS,CAAC,EAACC,cAAc,EAAqB;IAEvD,MAAM,EACFC,QAAQ,EACJC,OAAO,EACHC,QAAQ,EAACC,SAASC,YAAY,EAAC,EAClC,EACDF,QAAQ,EAACD,OAAOI,UAAU,EAAC,EAC9B,EACJ,GAAGV;IAEJ,MAAM,EAACW,IAAI,EAAC,GAAGZ;IAEf,MAAMa,WAAWd;IACjB,MAAMe,kBAAkBD,aAAaV,eAAe;QAACQ;QAAYI,MAAML;IAAY;IAEnF,OACIE,QAAQA,IAAI,CAACP,eAAe,iBACxB,wDACI,oBAACW,eAAO,oEACR,oBAACC;QAAIC,WAAU;QAAiBC,KAAKP,IAAI,CAACP,eAAe;QAAEe,QAAQ;QAAIC,OAAO;QAAIC,KAAI;QACjFN,OAAO;YACHO,cAAc;YACd,GAAIT,kBAAkB;gBAACU,QAAQ;YAAgB,IAAI,CAAC,CAAC;QACzD;wBAET,oBAACtB;QAAmBuB,QAAQX;;AAGxC,EAAC"}

package/dist/components/client/index.d.ts

@@ -1,6 +1,2 @@
-export { Avatar } from './Avatar.js';
-export declare const AvatarComponent: {
-    path: string;
-    exportName: string;
-};
+export { Avatar } from './Avatar/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/components/client/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/components/client/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAC,MAAM,EAAC,MAAM,aAAa,CAAA;AAElC,eAAO,MAAM,eAAe;;;CAGD,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/components/client/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,MAAM,EAAC,MAAM,mBAAmB,CAAA"}

package/dist/components/client/index.js

@@ -1,8 +1,3 @@
-import { COMPONENTS_PATH } from '../../constants.js';
-export { Avatar } from './Avatar.js';
-export const AvatarComponent = {
-    path: `${COMPONENTS_PATH}/client`,
-    exportName: 'Avatar'
-};
+export { Avatar } from './Avatar/index.js';
 
 //# sourceMappingURL=index.js.map

package/dist/components/client/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/components/client/index.ts"],"sourcesContent":["import type {CustomComponent} from 'payload'\nimport {COMPONENTS_PATH} from '../../constants.js'\n\nexport {Avatar} from './Avatar.js'\n\nexport const AvatarComponent = {\n    path: `${COMPONENTS_PATH}/client`,\n    exportName: 'Avatar'\n} satisfies CustomComponent"],"names":["COMPONENTS_PATH","Avatar","AvatarComponent","path","exportName"],"mappings":"AACA,SAAQA,eAAe,QAAO,qBAAoB;AAElD,SAAQC,MAAM,QAAO,cAAa;AAElC,OAAO,MAAMC,kBAAkB;IAC3BC,MAAM,GAAGH,gBAAgB,OAAO,CAAC;IACjCI,YAAY;AAChB,EAA2B"}
+{"version":3,"sources":["../../../src/components/client/index.ts"],"sourcesContent":["export {Avatar} from './Avatar/index.js'\n"],"names":["Avatar"],"mappings":"AAAA,SAAQA,MAAM,QAAO,oBAAmB"}

package/dist/components/index.d.ts

@@ -1,3 +1,9 @@
-export { AvatarComponent } from './client/index.js';
-export { LoginButtonComponent } from './server/index.js';
+export declare const AvatarComponent: {
+    path: string;
+    exportName: string;
+};
+export declare const LoginButtonComponent: {
+    path: string;
+    exportName: string;
+};
 //# sourceMappingURL=index.d.ts.map

package/dist/components/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/components/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,eAAe,EAAC,MAAM,mBAAmB,CAAA;AACjD,OAAO,EAAC,oBAAoB,EAAC,MAAM,mBAAmB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/components/index.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,eAAe;;;CAGD,CAAA;AAE3B,eAAO,MAAM,oBAAoB;;;CAGN,CAAA"}

package/dist/components/index.js

@@ -1,4 +1,11 @@
-export { AvatarComponent } from './client/index.js';
-export { LoginButtonComponent } from './server/index.js';
+import { COMPONENTS_PATH } from '../constants.js';
+export const AvatarComponent = {
+    path: `${COMPONENTS_PATH}/client`,
+    exportName: 'Avatar'
+};
+export const LoginButtonComponent = {
+    path: `${COMPONENTS_PATH}/server`,
+    exportName: 'LoginButton'
+};
 
 //# sourceMappingURL=index.js.map

package/dist/components/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/components/index.ts"],"sourcesContent":["export {AvatarComponent} from './client/index.js'\nexport {LoginButtonComponent} from './server/index.js'"],"names":["AvatarComponent","LoginButtonComponent"],"mappings":"AAAA,SAAQA,eAAe,QAAO,oBAAmB;AACjD,SAAQC,oBAAoB,QAAO,oBAAmB"}
+{"version":3,"sources":["../../src/components/index.ts"],"sourcesContent":["import type {CustomComponent} from 'payload'\nimport {COMPONENTS_PATH} from '../constants.js'\n\nexport const AvatarComponent = {\n    path: `${COMPONENTS_PATH}/client`,\n    exportName: 'Avatar'\n} satisfies CustomComponent\n\nexport const LoginButtonComponent = {\n    path: `${COMPONENTS_PATH}/server`,\n    exportName: 'LoginButton'\n} satisfies CustomComponent"],"names":["COMPONENTS_PATH","AvatarComponent","path","exportName","LoginButtonComponent"],"mappings":"AACA,SAAQA,eAAe,QAAO,kBAAiB;AAE/C,OAAO,MAAMC,kBAAkB;IAC3BC,MAAM,GAAGF,gBAAgB,OAAO,CAAC;IACjCG,YAAY;AAChB,EAA2B;AAE3B,OAAO,MAAMC,uBAAuB;IAChCF,MAAM,GAAGF,gBAAgB,OAAO,CAAC;IACjCG,YAAY;AAChB,EAA2B"}

package/dist/components/server/{LoginButton.d.ts → LoginButton/index.d.ts}

@@ -1,4 +1,4 @@
 import React from 'react';
-import type { ZitadelLoginButtonProps } from '../../types.js';
+import type { ZitadelLoginButtonProps } from '../../../types.js';
 export declare const LoginButton: ({ i18n, authorizeURL, label }: ZitadelLoginButtonProps) => Promise<React.JSX.Element>;
-//# sourceMappingURL=LoginButton.d.ts.map
+//# sourceMappingURL=index.d.ts.map

package/dist/components/server/LoginButton/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/components/server/LoginButton/index.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAA;AAEzB,OAAO,KAAK,EAAC,uBAAuB,EAAC,MAAM,mBAAmB,CAAA;AAE9D,eAAO,MAAM,WAAW,kCAAuC,uBAAuB,+BAK5E,CAAA"}

package/dist/components/server/{LoginButton.js → LoginButton/index.js}

@@ -12,4 +12,4 @@ export const LoginButton = async ({ i18n, authorizeURL, label })=>/*#__PURE__*/
         label
     })));
 
-//# sourceMappingURL=LoginButton.js.map
+//# sourceMappingURL=index.js.map

package/dist/components/server/LoginButton/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/components/server/LoginButton/index.tsx"],"sourcesContent":["import React from 'react'\nimport {Button} from '@payloadcms/ui'\nimport type {ZitadelLoginButtonProps} from '../../../types.js'\n\nexport const LoginButton = async ({i18n, authorizeURL, label}: ZitadelLoginButtonProps) =>\n    <div style={{display: 'flex', justifyContent: 'center'}}>\n        <Button el=\"anchor\" url={authorizeURL}>\n            {i18n.t('zitadelPlugin:signIn', {label})}\n        </Button>\n    </div>"],"names":["React","Button","LoginButton","i18n","authorizeURL","label","div","style","display","justifyContent","el","url","t"],"mappings":"AAAA,OAAOA,WAAW,QAAO;AACzB,SAAQC,MAAM,QAAO,iBAAgB;AAGrC,OAAO,MAAMC,cAAc,OAAO,EAACC,IAAI,EAAEC,YAAY,EAAEC,KAAK,EAA0B,iBAClF,oBAACC;QAAIC,OAAO;YAACC,SAAS;YAAQC,gBAAgB;QAAQ;qBAClD,oBAACR;QAAOS,IAAG;QAASC,KAAKP;OACpBD,KAAKS,CAAC,CAAC,wBAAwB;QAACP;IAAK,KAExC"}

package/dist/components/server/index.d.ts

@@ -1,6 +1,2 @@
-export { LoginButton } from './LoginButton.js';
-export declare const LoginButtonComponent: {
-    path: string;
-    exportName: string;
-};
+export { LoginButton } from './LoginButton/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/components/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/components/server/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAC,WAAW,EAAC,MAAM,kBAAkB,CAAA;AAE5C,eAAO,MAAM,oBAAoB;;;CAGN,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/components/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,WAAW,EAAC,MAAM,wBAAwB,CAAA"}

package/dist/components/server/index.js

@@ -1,8 +1,3 @@
-import { COMPONENTS_PATH } from '../../constants.js';
-export { LoginButton } from './LoginButton.js';
-export const LoginButtonComponent = {
-    path: `${COMPONENTS_PATH}/server`,
-    exportName: 'LoginButton'
-};
+export { LoginButton } from './LoginButton/index.js';
 
 //# sourceMappingURL=index.js.map

package/dist/components/server/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/components/server/index.ts"],"sourcesContent":["import type {CustomComponent} from 'payload'\nimport {COMPONENTS_PATH} from '../../constants.js'\n\nexport {LoginButton} from './LoginButton.js'\n\nexport const LoginButtonComponent = {\n    path: `${COMPONENTS_PATH}/server`,\n    exportName: 'LoginButton'\n} satisfies CustomComponent"],"names":["COMPONENTS_PATH","LoginButton","LoginButtonComponent","path","exportName"],"mappings":"AACA,SAAQA,eAAe,QAAO,qBAAoB;AAElD,SAAQC,WAAW,QAAO,mBAAkB;AAE5C,OAAO,MAAMC,uBAAuB;IAChCC,MAAM,GAAGH,gBAAgB,OAAO,CAAC;IACjCI,YAAY;AAChB,EAA2B"}
+{"version":3,"sources":["../../../src/components/server/index.ts"],"sourcesContent":["export {LoginButton} from './LoginButton/index.js'"],"names":["LoginButton"],"mappings":"AAAA,SAAQA,WAAW,QAAO,yBAAwB"}

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAA6C,iBAAiB,EAAC,MAAM,YAAY,CAAA;AAE7F,eAAO,MAAM,aAAa,EAAE,iBAgM3B,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAKR,iBAAiB,EACpB,MAAM,YAAY,CAAA;AAEnB,eAAO,MAAM,aAAa,EAAE,iBAgM3B,CAAA"}

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import {cookies} from 'next/headers.js'\nimport {NextResponse} from 'next/server.js'\nimport {COOKIES, DEFAULT_CONFIG, ERROR_MESSAGES, ROUTES} from './constants.js'\nimport {authorize, callback} from './handlers/index.js'\nimport {zitadelStrategy} from './strategy.js'\nimport {translations} from './translations.js'\nimport {AvatarComponent, LoginButtonComponent} from './components/index.js'\nimport type {PayloadConfigWithZitadel, ZitadelOnSuccess, ZitadelPluginType} from './types.js'\n\nexport const ZitadelPlugin: ZitadelPluginType = ({\n                                                     fieldsConfig: _fieldsConfig,\n                                                     disableAvatar,\n                                                     disableDefaultLoginButton,\n                                                     strategyName = DEFAULT_CONFIG.strategyName,\n                                                     label = DEFAULT_CONFIG.label,\n                                                     issuerURL,\n                                                     clientId,\n                                                     enableAPI,\n                                                     apiClientId,\n                                                     apiKeyId,\n                                                     apiKey,\n                                                     onSuccess\n                                                 }) => {\n\n    if (!issuerURL)\n        throw new Error(ERROR_MESSAGES.issuerURL)\n    if (!clientId)\n        throw new Error(ERROR_MESSAGES.clientId)\n    if (enableAPI) {\n        if (!apiClientId)\n            throw new Error(ERROR_MESSAGES.apiClientId)\n        if (!apiKeyId)\n            throw new Error(ERROR_MESSAGES.apiKey)\n        if (!apiKey)\n            throw new Error(ERROR_MESSAGES.apiKey)\n    }\n\n    const fieldsConfig = {...DEFAULT_CONFIG.fields, ..._fieldsConfig}\n\n    return (incomingConfig) => {\n\n        const serverURL = incomingConfig.serverURL ?? 'http://localhost'\n\n        const authSlug = incomingConfig.admin?.user ?? 'users'\n\n        const authBaseURL = `${serverURL}/api/${authSlug}`\n        const authorizeURL = authBaseURL + ROUTES.authorize\n        const callbackURL = authBaseURL + ROUTES.callback\n\n        const defaultOnSuccess: ZitadelOnSuccess = (state) =>\n            NextResponse.redirect(serverURL + (state.get('redirect') ?? ''))\n\n        return {\n            ...incomingConfig,\n            admin: {\n                ...incomingConfig.admin,\n                ...disableAvatar ? {} : {\n                    avatar: {\n                        Component: {\n                            ...AvatarComponent,\n                            clientProps: {\n                                imageFieldName: fieldsConfig.image.name\n                            }\n                        }\n                    }\n                },\n                ...disableDefaultLoginButton ? {} : {\n                    components: {\n                        ...incomingConfig.admin?.components,\n                        afterLogin: [\n                            ...incomingConfig.admin?.components?.afterLogin ?? [],\n                            {\n                                ...LoginButtonComponent,\n                                serverProps: {\n                                    authorizeURL,\n                                    label\n                                }\n                            }\n                        ]\n                    }\n                },\n                custom: {\n                    ...incomingConfig.admin?.custom,\n                    zitadel: {\n                        issuerURL,\n                        clientId,\n                        callbackURL,\n                        imageFieldName: fieldsConfig.image.name\n                    }\n                }\n            },\n            collections: (incomingConfig.collections || []).map((collection) => {\n\n                const authConfig = typeof collection.auth == 'boolean' ? {} : collection.auth\n\n                return {\n                    ...collection,\n                    ...collection.slug == authSlug ? {\n                        auth: {\n                            ...authConfig,\n                            disableLocalStrategy: true,\n                            strategies: [\n                                ...authConfig?.strategies ?? [],\n                                zitadelStrategy({\n                                    authSlug,\n                                    fieldsConfig,\n                                    strategyName: strategyName,\n                                    issuerURL: issuerURL as string,\n                                    clientId: clientId as string,\n                                    ...(enableAPI ? {\n                                        enableAPI: true,\n                                        apiClientId: apiClientId!,\n                                        apiKeyId: apiClientId!,\n                                        apiKey: apiKey!\n                                    } : {enableAPI: undefined})\n                                })\n                            ]\n                        },\n                        hooks: {\n                            afterLogout: [async () => (await cookies()).delete(COOKIES.idToken)]\n                        },\n                        endpoints: [\n                            {\n                                path: ROUTES.authorize,\n                                method: 'get',\n                                handler: authorize\n                            },\n                            {\n                                path: ROUTES.callback,\n                                method: 'get',\n                                handler: callback(onSuccess ?? defaultOnSuccess)\n                            }\n                        ],\n                        fields: [\n                            ...collection.fields,\n                            {\n                                ...fieldsConfig.id,\n                                type: 'text',\n                                admin: {\n                                    readOnly: true\n                                },\n                                index: true,\n                                unique: true,\n                                required: true\n                            },\n                            {\n                                ...fieldsConfig.name,\n                                type: 'text',\n                                admin: {\n                                    readOnly: true\n                                }\n                            },\n                            {\n                                ...fieldsConfig.email,\n                                type: 'email',\n                                admin: {\n                                    readOnly: true\n                                }\n                            },\n                            {\n                                ...fieldsConfig.image,\n                                type: 'text',\n                                admin: {\n                                    readOnly: true\n                                }\n                            },\n                            {\n                                ...fieldsConfig.roles,\n                                type: 'array',\n                                admin: {\n                                    readOnly: true\n                                },\n                                fields: [\n                                    {\n                                        ...fieldsConfig.roleFields.name,\n                                        type: 'text'\n                                    }\n                                ]\n                            }\n                        ]\n                    } : {}\n                }\n            }),\n            i18n: {\n                ...incomingConfig.i18n,\n                translations: {\n                    ...incomingConfig.i18n?.translations,\n                    de: {\n                        ...incomingConfig.i18n?.translations?.de,\n                        ...translations.de\n                    },\n                    en: {\n                        ...incomingConfig.i18n?.translations?.en,\n                        ...translations.en\n                    }\n                }\n            }\n        } satisfies PayloadConfigWithZitadel\n\n    }\n\n}"],"names":["cookies","NextResponse","COOKIES","DEFAULT_CONFIG","ERROR_MESSAGES","ROUTES","authorize","callback","zitadelStrategy","translations","AvatarComponent","LoginButtonComponent","ZitadelPlugin","fieldsConfig","_fieldsConfig","disableAvatar","disableDefaultLoginButton","strategyName","label","issuerURL","clientId","enableAPI","apiClientId","apiKeyId","apiKey","onSuccess","Error","fields","incomingConfig","serverURL","authSlug","admin","user","authBaseURL","authorizeURL","callbackURL","defaultOnSuccess","state","redirect","get","avatar","Component","clientProps","imageFieldName","image","name","components","afterLogin","serverProps","custom","zitadel","collections","map","collection","authConfig","auth","slug","disableLocalStrategy","strategies","undefined","hooks","afterLogout","delete","idToken","endpoints","path","method","handler","id","type","readOnly","index","unique","required","email","roles","roleFields","i18n","de","en"],"mappings":"AAAA,SAAQA,OAAO,QAAO,kBAAiB;AACvC,SAAQC,YAAY,QAAO,iBAAgB;AAC3C,SAAQC,OAAO,EAAEC,cAAc,EAAEC,cAAc,EAAEC,MAAM,QAAO,iBAAgB;AAC9E,SAAQC,SAAS,EAAEC,QAAQ,QAAO,sBAAqB;AACvD,SAAQC,eAAe,QAAO,gBAAe;AAC7C,SAAQC,YAAY,QAAO,oBAAmB;AAC9C,SAAQC,eAAe,EAAEC,oBAAoB,QAAO,wBAAuB;AAG3E,OAAO,MAAMC,gBAAmC,CAAC,EACIC,cAAcC,aAAa,EAC3BC,aAAa,EACbC,yBAAyB,EACzBC,eAAed,eAAec,YAAY,EAC1CC,QAAQf,eAAee,KAAK,EAC5BC,SAAS,EACTC,QAAQ,EACRC,SAAS,EACTC,WAAW,EACXC,QAAQ,EACRC,MAAM,EACNC,SAAS,EACZ;IAE9C,IAAI,CAACN,WACD,MAAM,IAAIO,MAAMtB,eAAee,SAAS;IAC5C,IAAI,CAACC,UACD,MAAM,IAAIM,MAAMtB,eAAegB,QAAQ;IAC3C,IAAIC,WAAW;QACX,IAAI,CAACC,aACD,MAAM,IAAII,MAAMtB,eAAekB,WAAW;QAC9C,IAAI,CAACC,UACD,MAAM,IAAIG,MAAMtB,eAAeoB,MAAM;QACzC,IAAI,CAACA,QACD,MAAM,IAAIE,MAAMtB,eAAeoB,MAAM;IAC7C;IAEA,MAAMX,eAAe;QAAC,GAAGV,eAAewB,MAAM;QAAE,GAAGb,aAAa;IAAA;IAEhE,OAAO,CAACc;QAEJ,MAAMC,YAAYD,eAAeC,SAAS,IAAI;QAE9C,MAAMC,WAAWF,eAAeG,KAAK,EAAEC,QAAQ;QAE/C,MAAMC,cAAc,GAAGJ,UAAU,KAAK,EAAEC,UAAU;QAClD,MAAMI,eAAeD,cAAc5B,OAAOC,SAAS;QACnD,MAAM6B,cAAcF,cAAc5B,OAAOE,QAAQ;QAEjD,MAAM6B,mBAAqC,CAACC,QACxCpC,aAAaqC,QAAQ,CAACT,YAAaQ,CAAAA,MAAME,GAAG,CAAC,eAAe,EAAC;QAEjE,OAAO;YACH,GAAGX,cAAc;YACjBG,OAAO;gBACH,GAAGH,eAAeG,KAAK;gBACvB,GAAGhB,gBAAgB,CAAC,IAAI;oBACpByB,QAAQ;wBACJC,WAAW;4BACP,GAAG/B,eAAe;4BAClBgC,aAAa;gCACTC,gBAAgB9B,aAAa+B,KAAK,CAACC,IAAI;4BAC3C;wBACJ;oBACJ;gBACJ,CAAC;gBACD,GAAG7B,4BAA4B,CAAC,IAAI;oBAChC8B,YAAY;wBACR,GAAGlB,eAAeG,KAAK,EAAEe,UAAU;wBACnCC,YAAY;+BACLnB,eAAeG,KAAK,EAAEe,YAAYC,cAAc,EAAE;4BACrD;gCACI,GAAGpC,oBAAoB;gCACvBqC,aAAa;oCACTd;oCACAhB;gCACJ;4BACJ;yBACH;oBACL;gBACJ,CAAC;gBACD+B,QAAQ;oBACJ,GAAGrB,eAAeG,KAAK,EAAEkB,MAAM;oBAC/BC,SAAS;wBACL/B;wBACAC;wBACAe;wBACAQ,gBAAgB9B,aAAa+B,KAAK,CAACC,IAAI;oBAC3C;gBACJ;YACJ;YACAM,aAAa,AAACvB,CAAAA,eAAeuB,WAAW,IAAI,EAAE,AAAD,EAAGC,GAAG,CAAC,CAACC;gBAEjD,MAAMC,aAAa,OAAOD,WAAWE,IAAI,IAAI,YAAY,CAAC,IAAIF,WAAWE,IAAI;gBAE7E,OAAO;oBACH,GAAGF,UAAU;oBACb,GAAGA,WAAWG,IAAI,IAAI1B,WAAW;wBAC7ByB,MAAM;4BACF,GAAGD,UAAU;4BACbG,sBAAsB;4BACtBC,YAAY;mCACLJ,YAAYI,cAAc,EAAE;gCAC/BlD,gBAAgB;oCACZsB;oCACAjB;oCACAI,cAAcA;oCACdE,WAAWA;oCACXC,UAAUA;oCACV,GAAIC,YAAY;wCACZA,WAAW;wCACXC,aAAaA;wCACbC,UAAUD;wCACVE,QAAQA;oCACZ,IAAI;wCAACH,WAAWsC;oCAAS,CAAC;gCAC9B;6BACH;wBACL;wBACAC,OAAO;4BACHC,aAAa;gCAAC,UAAY,AAAC,CAAA,MAAM7D,SAAQ,EAAG8D,MAAM,CAAC5D,QAAQ6D,OAAO;6BAAE;wBACxE;wBACAC,WAAW;4BACP;gCACIC,MAAM5D,OAAOC,SAAS;gCACtB4D,QAAQ;gCACRC,SAAS7D;4BACb;4BACA;gCACI2D,MAAM5D,OAAOE,QAAQ;gCACrB2D,QAAQ;gCACRC,SAAS5D,SAASkB,aAAaW;4BACnC;yBACH;wBACDT,QAAQ;+BACD0B,WAAW1B,MAAM;4BACpB;gCACI,GAAGd,aAAauD,EAAE;gCAClBC,MAAM;gCACNtC,OAAO;oCACHuC,UAAU;gCACd;gCACAC,OAAO;gCACPC,QAAQ;gCACRC,UAAU;4BACd;4BACA;gCACI,GAAG5D,aAAagC,IAAI;gCACpBwB,MAAM;gCACNtC,OAAO;oCACHuC,UAAU;gCACd;4BACJ;4BACA;gCACI,GAAGzD,aAAa6D,KAAK;gCACrBL,MAAM;gCACNtC,OAAO;oCACHuC,UAAU;gCACd;4BACJ;4BACA;gCACI,GAAGzD,aAAa+B,KAAK;gCACrByB,MAAM;gCACNtC,OAAO;oCACHuC,UAAU;gCACd;4BACJ;4BACA;gCACI,GAAGzD,aAAa8D,KAAK;gCACrBN,MAAM;gCACNtC,OAAO;oCACHuC,UAAU;gCACd;gCACA3C,QAAQ;oCACJ;wCACI,GAAGd,aAAa+D,UAAU,CAAC/B,IAAI;wCAC/BwB,MAAM;oCACV;iCACH;4BACL;yBACH;oBACL,IAAI,CAAC,CAAC;gBACV;YACJ;YACAQ,MAAM;gBACF,GAAGjD,eAAeiD,IAAI;gBACtBpE,cAAc;oBACV,GAAGmB,eAAeiD,IAAI,EAAEpE,YAAY;oBACpCqE,IAAI;wBACA,GAAGlD,eAAeiD,IAAI,EAAEpE,cAAcqE,EAAE;wBACxC,GAAGrE,aAAaqE,EAAE;oBACtB;oBACAC,IAAI;wBACA,GAAGnD,eAAeiD,IAAI,EAAEpE,cAAcsE,EAAE;wBACxC,GAAGtE,aAAasE,EAAE;oBACtB;gBACJ;YACJ;QACJ;IAEJ;AAEJ,EAAC"}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import {cookies} from 'next/headers.js'\nimport {NextResponse} from 'next/server.js'\nimport {COOKIES, DEFAULT_CONFIG, ERROR_MESSAGES, ROUTES} from './constants.js'\nimport {authorize, callback} from './handlers/index.js'\nimport {zitadelStrategy} from './strategy.js'\nimport {translations} from './translations.js'\nimport {AvatarComponent, LoginButtonComponent} from './components/index.js'\nimport type {\n    PayloadConfigWithZitadel,\n    ZitadelAvatarProps,\n    ZitadelLoginButtonProps,\n    ZitadelOnSuccess,\n    ZitadelPluginType\n} from './types.js'\n\nexport const ZitadelPlugin: ZitadelPluginType = ({\n                                                     fieldsConfig: _fieldsConfig,\n                                                     disableAvatar,\n                                                     disableDefaultLoginButton,\n                                                     strategyName = DEFAULT_CONFIG.strategyName,\n                                                     label = DEFAULT_CONFIG.label,\n                                                     issuerURL,\n                                                     clientId,\n                                                     enableAPI,\n                                                     apiClientId,\n                                                     apiKeyId,\n                                                     apiKey,\n                                                     onSuccess\n                                                 }) => {\n\n    if (!issuerURL)\n        throw new Error(ERROR_MESSAGES.issuerURL)\n    if (!clientId)\n        throw new Error(ERROR_MESSAGES.clientId)\n    if (enableAPI) {\n        if (!apiClientId)\n            throw new Error(ERROR_MESSAGES.apiClientId)\n        if (!apiKeyId)\n            throw new Error(ERROR_MESSAGES.apiKey)\n        if (!apiKey)\n            throw new Error(ERROR_MESSAGES.apiKey)\n    }\n\n    const fieldsConfig = {...DEFAULT_CONFIG.fields, ..._fieldsConfig}\n\n    return (incomingConfig) => {\n\n        const serverURL = incomingConfig.serverURL ?? 'http://localhost'\n\n        const authSlug = incomingConfig.admin?.user ?? 'users'\n\n        const authBaseURL = `${serverURL}/api/${authSlug}`\n        const authorizeURL = authBaseURL + ROUTES.authorize\n        const callbackURL = authBaseURL + ROUTES.callback\n\n        const defaultOnSuccess: ZitadelOnSuccess = (state) =>\n            NextResponse.redirect(serverURL + (state.get('redirect') ?? ''))\n\n        return {\n            ...incomingConfig,\n            admin: {\n                ...incomingConfig.admin,\n                ...disableAvatar ? {} : {\n                    avatar: {\n                        Component: {\n                            ...AvatarComponent,\n                            clientProps: {\n                                imageFieldName: fieldsConfig.image.name\n                            } satisfies ZitadelAvatarProps\n                        }\n                    }\n                },\n                ...disableDefaultLoginButton ? {} : {\n                    components: {\n                        ...incomingConfig.admin?.components,\n                        afterLogin: [\n                            ...incomingConfig.admin?.components?.afterLogin ?? [],\n                            {\n                                ...LoginButtonComponent,\n                                serverProps: {\n                                    authorizeURL,\n                                    label\n                                } satisfies Pick<ZitadelLoginButtonProps, 'authorizeURL' | 'label'>\n                            }\n                        ]\n                    }\n                },\n                custom: {\n                    ...incomingConfig.admin?.custom,\n                    zitadel: {\n                        issuerURL,\n                        clientId,\n                        callbackURL,\n                        imageFieldName: fieldsConfig.image.name\n                    }\n                }\n            },\n            collections: (incomingConfig.collections || []).map((collection) => {\n\n                const authConfig = typeof collection.auth == 'boolean' ? {} : collection.auth\n\n                return {\n                    ...collection,\n                    ...collection.slug == authSlug ? {\n                        auth: {\n                            ...authConfig,\n                            disableLocalStrategy: true,\n                            strategies: [\n                                ...authConfig?.strategies ?? [],\n                                zitadelStrategy({\n                                    authSlug,\n                                    fieldsConfig,\n                                    strategyName: strategyName,\n                                    issuerURL: issuerURL as string,\n                                    clientId: clientId as string,\n                                    ...(enableAPI ? {\n                                        enableAPI: true,\n                                        apiClientId: apiClientId!,\n                                        apiKeyId: apiClientId!,\n                                        apiKey: apiKey!\n                                    } : {enableAPI: undefined})\n                                })\n                            ]\n                        },\n                        hooks: {\n                            afterLogout: [async () => (await cookies()).delete(COOKIES.idToken)]\n                        },\n                        endpoints: [\n                            {\n                                path: ROUTES.authorize,\n                                method: 'get',\n                                handler: authorize\n                            },\n                            {\n                                path: ROUTES.callback,\n                                method: 'get',\n                                handler: callback(onSuccess ?? defaultOnSuccess)\n                            }\n                        ],\n                        fields: [\n                            ...collection.fields,\n                            {\n                                ...fieldsConfig.id,\n                                type: 'text',\n                                admin: {\n                                    readOnly: true\n                                },\n                                index: true,\n                                unique: true,\n                                required: true\n                            },\n                            {\n                                ...fieldsConfig.name,\n                                type: 'text',\n                                admin: {\n                                    readOnly: true\n                                }\n                            },\n                            {\n                                ...fieldsConfig.email,\n                                type: 'email',\n                                admin: {\n                                    readOnly: true\n                                }\n                            },\n                            {\n                                ...fieldsConfig.image,\n                                type: 'text',\n                                admin: {\n                                    readOnly: true\n                                }\n                            },\n                            {\n                                ...fieldsConfig.roles,\n                                type: 'array',\n                                admin: {\n                                    readOnly: true\n                                },\n                                fields: [\n                                    {\n                                        ...fieldsConfig.roleFields.name,\n                                        type: 'text'\n                                    }\n                                ]\n                            }\n                        ]\n                    } : {}\n                }\n            }),\n            i18n: {\n                ...incomingConfig.i18n,\n                translations: {\n                    ...incomingConfig.i18n?.translations,\n                    de: {\n                        ...incomingConfig.i18n?.translations?.de,\n                        ...translations.de\n                    },\n                    en: {\n                        ...incomingConfig.i18n?.translations?.en,\n                        ...translations.en\n                    }\n                }\n            }\n        } satisfies PayloadConfigWithZitadel\n\n    }\n\n}"],"names":["cookies","NextResponse","COOKIES","DEFAULT_CONFIG","ERROR_MESSAGES","ROUTES","authorize","callback","zitadelStrategy","translations","AvatarComponent","LoginButtonComponent","ZitadelPlugin","fieldsConfig","_fieldsConfig","disableAvatar","disableDefaultLoginButton","strategyName","label","issuerURL","clientId","enableAPI","apiClientId","apiKeyId","apiKey","onSuccess","Error","fields","incomingConfig","serverURL","authSlug","admin","user","authBaseURL","authorizeURL","callbackURL","defaultOnSuccess","state","redirect","get","avatar","Component","clientProps","imageFieldName","image","name","components","afterLogin","serverProps","custom","zitadel","collections","map","collection","authConfig","auth","slug","disableLocalStrategy","strategies","undefined","hooks","afterLogout","delete","idToken","endpoints","path","method","handler","id","type","readOnly","index","unique","required","email","roles","roleFields","i18n","de","en"],"mappings":"AAAA,SAAQA,OAAO,QAAO,kBAAiB;AACvC,SAAQC,YAAY,QAAO,iBAAgB;AAC3C,SAAQC,OAAO,EAAEC,cAAc,EAAEC,cAAc,EAAEC,MAAM,QAAO,iBAAgB;AAC9E,SAAQC,SAAS,EAAEC,QAAQ,QAAO,sBAAqB;AACvD,SAAQC,eAAe,QAAO,gBAAe;AAC7C,SAAQC,YAAY,QAAO,oBAAmB;AAC9C,SAAQC,eAAe,EAAEC,oBAAoB,QAAO,wBAAuB;AAS3E,OAAO,MAAMC,gBAAmC,CAAC,EACIC,cAAcC,aAAa,EAC3BC,aAAa,EACbC,yBAAyB,EACzBC,eAAed,eAAec,YAAY,EAC1CC,QAAQf,eAAee,KAAK,EAC5BC,SAAS,EACTC,QAAQ,EACRC,SAAS,EACTC,WAAW,EACXC,QAAQ,EACRC,MAAM,EACNC,SAAS,EACZ;IAE9C,IAAI,CAACN,WACD,MAAM,IAAIO,MAAMtB,eAAee,SAAS;IAC5C,IAAI,CAACC,UACD,MAAM,IAAIM,MAAMtB,eAAegB,QAAQ;IAC3C,IAAIC,WAAW;QACX,IAAI,CAACC,aACD,MAAM,IAAII,MAAMtB,eAAekB,WAAW;QAC9C,IAAI,CAACC,UACD,MAAM,IAAIG,MAAMtB,eAAeoB,MAAM;QACzC,IAAI,CAACA,QACD,MAAM,IAAIE,MAAMtB,eAAeoB,MAAM;IAC7C;IAEA,MAAMX,eAAe;QAAC,GAAGV,eAAewB,MAAM;QAAE,GAAGb,aAAa;IAAA;IAEhE,OAAO,CAACc;QAEJ,MAAMC,YAAYD,eAAeC,SAAS,IAAI;QAE9C,MAAMC,WAAWF,eAAeG,KAAK,EAAEC,QAAQ;QAE/C,MAAMC,cAAc,GAAGJ,UAAU,KAAK,EAAEC,UAAU;QAClD,MAAMI,eAAeD,cAAc5B,OAAOC,SAAS;QACnD,MAAM6B,cAAcF,cAAc5B,OAAOE,QAAQ;QAEjD,MAAM6B,mBAAqC,CAACC,QACxCpC,aAAaqC,QAAQ,CAACT,YAAaQ,CAAAA,MAAME,GAAG,CAAC,eAAe,EAAC;QAEjE,OAAO;YACH,GAAGX,cAAc;YACjBG,OAAO;gBACH,GAAGH,eAAeG,KAAK;gBACvB,GAAGhB,gBAAgB,CAAC,IAAI;oBACpByB,QAAQ;wBACJC,WAAW;4BACP,GAAG/B,eAAe;4BAClBgC,aAAa;gCACTC,gBAAgB9B,aAAa+B,KAAK,CAACC,IAAI;4BAC3C;wBACJ;oBACJ;gBACJ,CAAC;gBACD,GAAG7B,4BAA4B,CAAC,IAAI;oBAChC8B,YAAY;wBACR,GAAGlB,eAAeG,KAAK,EAAEe,UAAU;wBACnCC,YAAY;+BACLnB,eAAeG,KAAK,EAAEe,YAAYC,cAAc,EAAE;4BACrD;gCACI,GAAGpC,oBAAoB;gCACvBqC,aAAa;oCACTd;oCACAhB;gCACJ;4BACJ;yBACH;oBACL;gBACJ,CAAC;gBACD+B,QAAQ;oBACJ,GAAGrB,eAAeG,KAAK,EAAEkB,MAAM;oBAC/BC,SAAS;wBACL/B;wBACAC;wBACAe;wBACAQ,gBAAgB9B,aAAa+B,KAAK,CAACC,IAAI;oBAC3C;gBACJ;YACJ;YACAM,aAAa,AAACvB,CAAAA,eAAeuB,WAAW,IAAI,EAAE,AAAD,EAAGC,GAAG,CAAC,CAACC;gBAEjD,MAAMC,aAAa,OAAOD,WAAWE,IAAI,IAAI,YAAY,CAAC,IAAIF,WAAWE,IAAI;gBAE7E,OAAO;oBACH,GAAGF,UAAU;oBACb,GAAGA,WAAWG,IAAI,IAAI1B,WAAW;wBAC7ByB,MAAM;4BACF,GAAGD,UAAU;4BACbG,sBAAsB;4BACtBC,YAAY;mCACLJ,YAAYI,cAAc,EAAE;gCAC/BlD,gBAAgB;oCACZsB;oCACAjB;oCACAI,cAAcA;oCACdE,WAAWA;oCACXC,UAAUA;oCACV,GAAIC,YAAY;wCACZA,WAAW;wCACXC,aAAaA;wCACbC,UAAUD;wCACVE,QAAQA;oCACZ,IAAI;wCAACH,WAAWsC;oCAAS,CAAC;gCAC9B;6BACH;wBACL;wBACAC,OAAO;4BACHC,aAAa;gCAAC,UAAY,AAAC,CAAA,MAAM7D,SAAQ,EAAG8D,MAAM,CAAC5D,QAAQ6D,OAAO;6BAAE;wBACxE;wBACAC,WAAW;4BACP;gCACIC,MAAM5D,OAAOC,SAAS;gCACtB4D,QAAQ;gCACRC,SAAS7D;4BACb;4BACA;gCACI2D,MAAM5D,OAAOE,QAAQ;gCACrB2D,QAAQ;gCACRC,SAAS5D,SAASkB,aAAaW;4BACnC;yBACH;wBACDT,QAAQ;+BACD0B,WAAW1B,MAAM;4BACpB;gCACI,GAAGd,aAAauD,EAAE;gCAClBC,MAAM;gCACNtC,OAAO;oCACHuC,UAAU;gCACd;gCACAC,OAAO;gCACPC,QAAQ;gCACRC,UAAU;4BACd;4BACA;gCACI,GAAG5D,aAAagC,IAAI;gCACpBwB,MAAM;gCACNtC,OAAO;oCACHuC,UAAU;gCACd;4BACJ;4BACA;gCACI,GAAGzD,aAAa6D,KAAK;gCACrBL,MAAM;gCACNtC,OAAO;oCACHuC,UAAU;gCACd;4BACJ;4BACA;gCACI,GAAGzD,aAAa+B,KAAK;gCACrByB,MAAM;gCACNtC,OAAO;oCACHuC,UAAU;gCACd;4BACJ;4BACA;gCACI,GAAGzD,aAAa8D,KAAK;gCACrBN,MAAM;gCACNtC,OAAO;oCACHuC,UAAU;gCACd;gCACA3C,QAAQ;oCACJ;wCACI,GAAGd,aAAa+D,UAAU,CAAC/B,IAAI;wCAC/BwB,MAAM;oCACV;iCACH;4BACL;yBACH;oBACL,IAAI,CAAC,CAAC;gBACV;YACJ;YACAQ,MAAM;gBACF,GAAGjD,eAAeiD,IAAI;gBACtBpE,cAAc;oBACV,GAAGmB,eAAeiD,IAAI,EAAEpE,YAAY;oBACpCqE,IAAI;wBACA,GAAGlD,eAAeiD,IAAI,EAAEpE,cAAcqE,EAAE;wBACxC,GAAGrE,aAAaqE,EAAE;oBACtB;oBACAC,IAAI;wBACA,GAAGnD,eAAeiD,IAAI,EAAEpE,cAAcsE,EAAE;wBACxC,GAAGtE,aAAasE,EAAE;oBACtB;gBACJ;YACJ;QACJ;IAEJ;AAEJ,EAAC"}

package/dist/strategy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"strategy.d.ts","sourceRoot":"","sources":["../src/strategy.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAiB,mBAAmB,EAAC,MAAM,YAAY,CAAA;AAEnE,eAAO,MAAM,eAAe,EAAE,mBAkG5B,CAAA"}
+{"version":3,"file":"strategy.d.ts","sourceRoot":"","sources":["../src/strategy.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAiB,mBAAmB,EAAC,MAAM,YAAY,CAAA;AAEnE,eAAO,MAAM,eAAe,EAAE,mBAsG5B,CAAA"}

package/dist/strategy.js

@@ -50,12 +50,16 @@ export const zitadelStrategy = ({ authSlug, fieldsConfig, strategyName, issuerUR
                         }
                     }
                 });
-                id = totalDocs ? docs[0].id : (await payload.create({
-                    collection: authSlug,
-                    data: {
-                        [fieldsConfig.id.name]: idp_id
-                    }
-                })).id;
+                try {
+                    id = totalDocs ? docs[0].id : (await payload.create({
+                        collection: authSlug,
+                        data: {
+                            [fieldsConfig.id.name]: idp_id
+                        }
+                    })).id;
+                } catch (e) {
+                    console.error(e);
+                }
             }
             // update user information if possible
             if (id && id_token) {

package/dist/strategy.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/strategy.ts"],"sourcesContent":["import {jwtVerify, SignJWT} from 'jose'\nimport {cookies} from 'next/headers.js'\nimport {COOKIES} from './constants.js'\nimport type {ZitadelIdToken, ZitadelStrategyType} from './types.js'\n\nexport const zitadelStrategy: ZitadelStrategyType = ({\n                                                         authSlug,\n                                                         fieldsConfig,\n                                                         strategyName,\n                                                         issuerURL,\n                                                         enableAPI,\n                                                         apiClientId,\n                                                         apiKeyId,\n                                                         apiKey\n                                                     }) => ({\n    name: strategyName,\n    authenticate: async ({headers, payload}) => {\n\n        let id, idp_id, id_token\n\n        const cookieStore = await cookies()\n\n        if (enableAPI) {\n            // in case of incoming API call from the app\n            const authHeader = headers.get('Authorization')\n            if (authHeader?.includes('Bearer')) {\n                const introspect = await fetch(`${issuerURL}/oauth/v2/introspect`, {\n                    method: 'post',\n                    headers: {\n                        'Content-Type': 'application/x-www-form-urlencoded'\n                    },\n                    body: new URLSearchParams({\n                        'client_assertion_type': 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer',\n                        'client_assertion': await new SignJWT()\n                            .setProtectedHeader({alg: 'RS256', kid: apiKeyId})\n                            .setIssuer(apiClientId)\n                            .setAudience(issuerURL)\n                            .setSubject(apiClientId)\n                            .setIssuedAt()\n                            .setExpirationTime('1h')\n                            .sign(new TextEncoder().encode(apiKey)),\n                        'token': authHeader.split(' ')[1]\n                    })\n                })\n                if (introspect.ok) {\n                    const data = await introspect.json()\n                    if (data?.active) {\n                        idp_id = data.sub\n                    }\n                }\n            }\n        }\n\n        // in case of normal browsing\n        if (!idp_id && cookieStore.has(COOKIES.idToken)) {\n            const {payload: jwtPayload} = await jwtVerify<ZitadelIdToken>(cookieStore.get(COOKIES.idToken)?.value ?? '', new TextEncoder().encode(payload.secret))\n            if (jwtPayload.sub) {\n                id_token = jwtPayload\n                idp_id = jwtPayload.sub\n            }\n        }\n\n        // search for associated user; if not found, create one\n        if (idp_id) {\n            const {docs, totalDocs} = await payload.find({\n                collection: authSlug,\n                where: {\n                    [fieldsConfig.id.name]: {\n                        equals: idp_id\n                    }\n                }\n            })\n            id = totalDocs ? docs[0].id : (await payload.create({\n                collection: authSlug,\n                data: {\n                    [fieldsConfig.id.name]: idp_id\n                }\n            })).id\n        }\n\n        // update user information if possible\n        if (id && id_token) {\n            await payload.update({\n                collection: authSlug,\n                id,\n                data: {\n                    [fieldsConfig.name.name]: id_token.name,\n                    [fieldsConfig.email.name]: id_token.email,\n                    [fieldsConfig.image.name]: id_token.picture,\n                    [fieldsConfig.roles.name]: Object.keys(id_token['urn:zitadel:iam:org:project:roles'] ?? {})\n                        .map(key => ({[fieldsConfig.roleFields.name.name]: key}))\n                }\n            })\n        }\n\n        return {\n            user: id ? {\n                collection: authSlug,\n                id\n            } : null\n        }\n\n    }\n})"],"names":["jwtVerify","SignJWT","cookies","COOKIES","zitadelStrategy","authSlug","fieldsConfig","strategyName","issuerURL","enableAPI","apiClientId","apiKeyId","apiKey","name","authenticate","headers","payload","id","idp_id","id_token","cookieStore","authHeader","get","includes","introspect","fetch","method","body","URLSearchParams","setProtectedHeader","alg","kid","setIssuer","setAudience","setSubject","setIssuedAt","setExpirationTime","sign","TextEncoder","encode","split","ok","data","json","active","sub","has","idToken","jwtPayload","value","secret","docs","totalDocs","find","collection","where","equals","create","update","email","image","picture","roles","Object","keys","map","key","roleFields","user"],"mappings":"AAAA,SAAQA,SAAS,EAAEC,OAAO,QAAO,OAAM;AACvC,SAAQC,OAAO,QAAO,kBAAiB;AACvC,SAAQC,OAAO,QAAO,iBAAgB;AAGtC,OAAO,MAAMC,kBAAuC,CAAC,EACIC,QAAQ,EACRC,YAAY,EACZC,YAAY,EACZC,SAAS,EACTC,SAAS,EACTC,WAAW,EACXC,QAAQ,EACRC,MAAM,EACT,GAAM,CAAA;QACxDC,MAAMN;QACNO,cAAc,OAAO,EAACC,OAAO,EAAEC,OAAO,EAAC;YAEnC,IAAIC,IAAIC,QAAQC;YAEhB,MAAMC,cAAc,MAAMlB;YAE1B,IAAIO,WAAW;gBACX,4CAA4C;gBAC5C,MAAMY,aAAaN,QAAQO,GAAG,CAAC;gBAC/B,IAAID,YAAYE,SAAS,WAAW;oBAChC,MAAMC,aAAa,MAAMC,MAAM,GAAGjB,UAAU,oBAAoB,CAAC,EAAE;wBAC/DkB,QAAQ;wBACRX,SAAS;4BACL,gBAAgB;wBACpB;wBACAY,MAAM,IAAIC,gBAAgB;4BACtB,yBAAyB;4BACzB,oBAAoB,MAAM,IAAI3B,UACzB4B,kBAAkB,CAAC;gCAACC,KAAK;gCAASC,KAAKpB;4BAAQ,GAC/CqB,SAAS,CAACtB,aACVuB,WAAW,CAACzB,WACZ0B,UAAU,CAACxB,aACXyB,WAAW,GACXC,iBAAiB,CAAC,MAClBC,IAAI,CAAC,IAAIC,cAAcC,MAAM,CAAC3B;4BACnC,SAASS,WAAWmB,KAAK,CAAC,IAAI,CAAC,EAAE;wBACrC;oBACJ;oBACA,IAAIhB,WAAWiB,EAAE,EAAE;wBACf,MAAMC,OAAO,MAAMlB,WAAWmB,IAAI;wBAClC,IAAID,MAAME,QAAQ;4BACd1B,SAASwB,KAAKG,GAAG;wBACrB;oBACJ;gBACJ;YACJ;YAEA,6BAA6B;YAC7B,IAAI,CAAC3B,UAAUE,YAAY0B,GAAG,CAAC3C,QAAQ4C,OAAO,GAAG;gBAC7C,MAAM,EAAC/B,SAASgC,UAAU,EAAC,GAAG,MAAMhD,UAA0BoB,YAAYE,GAAG,CAACnB,QAAQ4C,OAAO,GAAGE,SAAS,IAAI,IAAIX,cAAcC,MAAM,CAACvB,QAAQkC,MAAM;gBACpJ,IAAIF,WAAWH,GAAG,EAAE;oBAChB1B,WAAW6B;oBACX9B,SAAS8B,WAAWH,GAAG;gBAC3B;YACJ;YAEA,uDAAuD;YACvD,IAAI3B,QAAQ;gBACR,MAAM,EAACiC,IAAI,EAAEC,SAAS,EAAC,GAAG,MAAMpC,QAAQqC,IAAI,CAAC;oBACzCC,YAAYjD;oBACZkD,OAAO;wBACH,CAACjD,aAAaW,EAAE,CAACJ,IAAI,CAAC,EAAE;4BACpB2C,QAAQtC;wBACZ;oBACJ;gBACJ;gBACAD,KAAKmC,YAAYD,IAAI,CAAC,EAAE,CAAClC,EAAE,GAAG,AAAC,CAAA,MAAMD,QAAQyC,MAAM,CAAC;oBAChDH,YAAYjD;oBACZqC,MAAM;wBACF,CAACpC,aAAaW,EAAE,CAACJ,IAAI,CAAC,EAAEK;oBAC5B;gBACJ,EAAC,EAAGD,EAAE;YACV;YAEA,sCAAsC;YACtC,IAAIA,MAAME,UAAU;gBAChB,MAAMH,QAAQ0C,MAAM,CAAC;oBACjBJ,YAAYjD;oBACZY;oBACAyB,MAAM;wBACF,CAACpC,aAAaO,IAAI,CAACA,IAAI,CAAC,EAAEM,SAASN,IAAI;wBACvC,CAACP,aAAaqD,KAAK,CAAC9C,IAAI,CAAC,EAAEM,SAASwC,KAAK;wBACzC,CAACrD,aAAasD,KAAK,CAAC/C,IAAI,CAAC,EAAEM,SAAS0C,OAAO;wBAC3C,CAACvD,aAAawD,KAAK,CAACjD,IAAI,CAAC,EAAEkD,OAAOC,IAAI,CAAC7C,QAAQ,CAAC,oCAAoC,IAAI,CAAC,GACpF8C,GAAG,CAACC,CAAAA,MAAQ,CAAA;gCAAC,CAAC5D,aAAa6D,UAAU,CAACtD,IAAI,CAACA,IAAI,CAAC,EAAEqD;4BAAG,CAAA;oBAC9D;gBACJ;YACJ;YAEA,OAAO;gBACHE,MAAMnD,KAAK;oBACPqC,YAAYjD;oBACZY;gBACJ,IAAI;YACR;QAEJ;IACJ,CAAA,EAAE"}
+{"version":3,"sources":["../src/strategy.ts"],"sourcesContent":["import {jwtVerify, SignJWT} from 'jose'\nimport {cookies} from 'next/headers.js'\nimport {COOKIES} from './constants.js'\nimport type {ZitadelIdToken, ZitadelStrategyType} from './types.js'\n\nexport const zitadelStrategy: ZitadelStrategyType = ({\n                                                         authSlug,\n                                                         fieldsConfig,\n                                                         strategyName,\n                                                         issuerURL,\n                                                         enableAPI,\n                                                         apiClientId,\n                                                         apiKeyId,\n                                                         apiKey\n                                                     }) => ({\n    name: strategyName,\n    authenticate: async ({headers, payload}) => {\n\n        let id, idp_id, id_token\n\n        const cookieStore = await cookies()\n\n        if (enableAPI) {\n            // in case of incoming API call from the app\n            const authHeader = headers.get('Authorization')\n            if (authHeader?.includes('Bearer')) {\n                const introspect = await fetch(`${issuerURL}/oauth/v2/introspect`, {\n                    method: 'post',\n                    headers: {\n                        'Content-Type': 'application/x-www-form-urlencoded'\n                    },\n                    body: new URLSearchParams({\n                        'client_assertion_type': 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer',\n                        'client_assertion': await new SignJWT()\n                            .setProtectedHeader({alg: 'RS256', kid: apiKeyId})\n                            .setIssuer(apiClientId)\n                            .setAudience(issuerURL)\n                            .setSubject(apiClientId)\n                            .setIssuedAt()\n                            .setExpirationTime('1h')\n                            .sign(new TextEncoder().encode(apiKey)),\n                        'token': authHeader.split(' ')[1]\n                    })\n                })\n                if (introspect.ok) {\n                    const data = await introspect.json()\n                    if (data?.active) {\n                        idp_id = data.sub\n                    }\n                }\n            }\n        }\n\n        // in case of normal browsing\n        if (!idp_id && cookieStore.has(COOKIES.idToken)) {\n            const {payload: jwtPayload} = await jwtVerify<ZitadelIdToken>(cookieStore.get(COOKIES.idToken)?.value ?? '', new TextEncoder().encode(payload.secret))\n            if (jwtPayload.sub) {\n                id_token = jwtPayload\n                idp_id = jwtPayload.sub\n            }\n        }\n\n        // search for associated user; if not found, create one\n        if (idp_id) {\n            const {docs, totalDocs} = await payload.find({\n                collection: authSlug,\n                where: {\n                    [fieldsConfig.id.name]: {\n                        equals: idp_id\n                    }\n                }\n            })\n            try {\n                id = totalDocs ? docs[0].id : (await payload.create({\n                    collection: authSlug,\n                    data: {\n                        [fieldsConfig.id.name]: idp_id\n                    }\n                })).id\n            } catch (e) {\n                console.error(e)\n            }\n        }\n\n        // update user information if possible\n        if (id && id_token) {\n            await payload.update({\n                collection: authSlug,\n                id,\n                data: {\n                    [fieldsConfig.name.name]: id_token.name,\n                    [fieldsConfig.email.name]: id_token.email,\n                    [fieldsConfig.image.name]: id_token.picture,\n                    [fieldsConfig.roles.name]: Object.keys(id_token['urn:zitadel:iam:org:project:roles'] ?? {})\n                        .map(key => ({[fieldsConfig.roleFields.name.name]: key}))\n                }\n            })\n        }\n\n        return {\n            user: id ? {\n                collection: authSlug,\n                id\n            } : null\n        }\n\n    }\n})"],"names":["jwtVerify","SignJWT","cookies","COOKIES","zitadelStrategy","authSlug","fieldsConfig","strategyName","issuerURL","enableAPI","apiClientId","apiKeyId","apiKey","name","authenticate","headers","payload","id","idp_id","id_token","cookieStore","authHeader","get","includes","introspect","fetch","method","body","URLSearchParams","setProtectedHeader","alg","kid","setIssuer","setAudience","setSubject","setIssuedAt","setExpirationTime","sign","TextEncoder","encode","split","ok","data","json","active","sub","has","idToken","jwtPayload","value","secret","docs","totalDocs","find","collection","where","equals","create","e","console","error","update","email","image","picture","roles","Object","keys","map","key","roleFields","user"],"mappings":"AAAA,SAAQA,SAAS,EAAEC,OAAO,QAAO,OAAM;AACvC,SAAQC,OAAO,QAAO,kBAAiB;AACvC,SAAQC,OAAO,QAAO,iBAAgB;AAGtC,OAAO,MAAMC,kBAAuC,CAAC,EACIC,QAAQ,EACRC,YAAY,EACZC,YAAY,EACZC,SAAS,EACTC,SAAS,EACTC,WAAW,EACXC,QAAQ,EACRC,MAAM,EACT,GAAM,CAAA;QACxDC,MAAMN;QACNO,cAAc,OAAO,EAACC,OAAO,EAAEC,OAAO,EAAC;YAEnC,IAAIC,IAAIC,QAAQC;YAEhB,MAAMC,cAAc,MAAMlB;YAE1B,IAAIO,WAAW;gBACX,4CAA4C;gBAC5C,MAAMY,aAAaN,QAAQO,GAAG,CAAC;gBAC/B,IAAID,YAAYE,SAAS,WAAW;oBAChC,MAAMC,aAAa,MAAMC,MAAM,GAAGjB,UAAU,oBAAoB,CAAC,EAAE;wBAC/DkB,QAAQ;wBACRX,SAAS;4BACL,gBAAgB;wBACpB;wBACAY,MAAM,IAAIC,gBAAgB;4BACtB,yBAAyB;4BACzB,oBAAoB,MAAM,IAAI3B,UACzB4B,kBAAkB,CAAC;gCAACC,KAAK;gCAASC,KAAKpB;4BAAQ,GAC/CqB,SAAS,CAACtB,aACVuB,WAAW,CAACzB,WACZ0B,UAAU,CAACxB,aACXyB,WAAW,GACXC,iBAAiB,CAAC,MAClBC,IAAI,CAAC,IAAIC,cAAcC,MAAM,CAAC3B;4BACnC,SAASS,WAAWmB,KAAK,CAAC,IAAI,CAAC,EAAE;wBACrC;oBACJ;oBACA,IAAIhB,WAAWiB,EAAE,EAAE;wBACf,MAAMC,OAAO,MAAMlB,WAAWmB,IAAI;wBAClC,IAAID,MAAME,QAAQ;4BACd1B,SAASwB,KAAKG,GAAG;wBACrB;oBACJ;gBACJ;YACJ;YAEA,6BAA6B;YAC7B,IAAI,CAAC3B,UAAUE,YAAY0B,GAAG,CAAC3C,QAAQ4C,OAAO,GAAG;gBAC7C,MAAM,EAAC/B,SAASgC,UAAU,EAAC,GAAG,MAAMhD,UAA0BoB,YAAYE,GAAG,CAACnB,QAAQ4C,OAAO,GAAGE,SAAS,IAAI,IAAIX,cAAcC,MAAM,CAACvB,QAAQkC,MAAM;gBACpJ,IAAIF,WAAWH,GAAG,EAAE;oBAChB1B,WAAW6B;oBACX9B,SAAS8B,WAAWH,GAAG;gBAC3B;YACJ;YAEA,uDAAuD;YACvD,IAAI3B,QAAQ;gBACR,MAAM,EAACiC,IAAI,EAAEC,SAAS,EAAC,GAAG,MAAMpC,QAAQqC,IAAI,CAAC;oBACzCC,YAAYjD;oBACZkD,OAAO;wBACH,CAACjD,aAAaW,EAAE,CAACJ,IAAI,CAAC,EAAE;4BACpB2C,QAAQtC;wBACZ;oBACJ;gBACJ;gBACA,IAAI;oBACAD,KAAKmC,YAAYD,IAAI,CAAC,EAAE,CAAClC,EAAE,GAAG,AAAC,CAAA,MAAMD,QAAQyC,MAAM,CAAC;wBAChDH,YAAYjD;wBACZqC,MAAM;4BACF,CAACpC,aAAaW,EAAE,CAACJ,IAAI,CAAC,EAAEK;wBAC5B;oBACJ,EAAC,EAAGD,EAAE;gBACV,EAAE,OAAOyC,GAAG;oBACRC,QAAQC,KAAK,CAACF;gBAClB;YACJ;YAEA,sCAAsC;YACtC,IAAIzC,MAAME,UAAU;gBAChB,MAAMH,QAAQ6C,MAAM,CAAC;oBACjBP,YAAYjD;oBACZY;oBACAyB,MAAM;wBACF,CAACpC,aAAaO,IAAI,CAACA,IAAI,CAAC,EAAEM,SAASN,IAAI;wBACvC,CAACP,aAAawD,KAAK,CAACjD,IAAI,CAAC,EAAEM,SAAS2C,KAAK;wBACzC,CAACxD,aAAayD,KAAK,CAAClD,IAAI,CAAC,EAAEM,SAAS6C,OAAO;wBAC3C,CAAC1D,aAAa2D,KAAK,CAACpD,IAAI,CAAC,EAAEqD,OAAOC,IAAI,CAAChD,QAAQ,CAAC,oCAAoC,IAAI,CAAC,GACpFiD,GAAG,CAACC,CAAAA,MAAQ,CAAA;gCAAC,CAAC/D,aAAagE,UAAU,CAACzD,IAAI,CAACA,IAAI,CAAC,EAAEwD;4BAAG,CAAA;oBAC9D;gBACJ;YACJ;YAEA,OAAO;gBACHE,MAAMtD,KAAK;oBACPqC,YAAYjD;oBACZY;gBACJ,IAAI;YACR;QAEJ;IACJ,CAAA,EAAE"}

package/dist/types.d.ts

@@ -56,7 +56,6 @@ export type ZitadelIdToken = Partial<{
     'urn:zitadel:iam:org:project:roles'?: Record<string, Record<string, string>>;
 }>;
 export type ZitadelAvatarProps = {
-    active: boolean;
     imageFieldName: string;
 };
 export type ZitadelLoginButtonProps = ServerProps & {

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,YAAY,EAAC,MAAM,gBAAgB,CAAA;AAChD,OAAO,KAAK,EAAC,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,WAAW,EAAC,MAAM,SAAS,CAAA;AAC/E,OAAO,KAAK,EAAC,UAAU,EAAE,kBAAkB,EAAC,MAAM,0BAA0B,CAAA;AAC5E,OAAO,EAAC,YAAY,EAAC,MAAM,mBAAmB,CAAA;AAE9C,MAAM,MAAM,kBAAkB,GAAG;IAC7B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC1C,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG;IAC9B,EAAE,EAAE,kBAAkB,CAAC;IACvB,IAAI,EAAE,kBAAkB,CAAA;IACxB,KAAK,EAAE,kBAAkB,CAAC;IAC1B,KAAK,EAAE,kBAAkB,CAAC;IAC1B,KAAK,EAAE,kBAAkB,GAAG;QACxB,MAAM,EAAE;YACJ,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC1C,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;SAC1C,CAAA;KACJ,CAAA;IACD,UAAU,EAAE;QACR,IAAI,EAAE,kBAAkB,CAAA;KAC3B,CAAA;CACJ,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG,OAAO,CAAC;IACrC,YAAY,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC3C,aAAa,EAAE,IAAI,CAAA;IACnB,yBAAyB,EAAE,IAAI,CAAA;IAC/B,uBAAuB,EAAE,MAAM,CAAA;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,gBAAgB,CAAA;CAC9B,CAAC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;AAElC,MAAM,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,kBAAkB,KAAK,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAA;AAEzF,MAAM,MAAM,eAAe,GAAG;IAC1B,SAAS,EAAE,IAAI,CAAA;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAA;CACjB,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;CACnB,GAAG,CAAC,eAAe,GAAG;IACnB,SAAS,CAAC,EAAE,SAAS,CAAA;CACxB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC,CAAA;AAE7B,MAAM,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,oBAAoB,GAAG;IAC7D,YAAY,EAAE,mBAAmB,CAAA;CACpC,KAAK,YAAY,CAAA;AAElB,MAAM,MAAM,cAAc,GAAG,OAAO,CAAC;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,mCAAmC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CAC/E,CAAC,CAAA;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC7B,MAAM,EAAE,OAAO,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;CAC1B,CAAA;AAED,MAAM,MAAM,uBAAuB,GAAG,WAAW,GAAG;IAChD,IAAI,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,EAAE,EAAE,kBAAkB,CAAC,OAAO,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;IACrF,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAA;CAChB,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,eAAe,KAAK,YAAY,CAAA;AAEvE,MAAM,MAAM,0BAA0B,GAAG;IACrC,OAAO,EAAE;QACL,SAAS,EAAE,MAAM,CAAA;QACjB,QAAQ,EAAE,MAAM,CAAA;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,cAAc,EAAE,MAAM,CAAA;KACzB,CAAA;CACJ,CAAA;AAED,MAAM,MAAM,wBAAwB,GAAG,CAAC,MAAM,GAAG,eAAe,CAAC,GAAG;IAChE,KAAK,EAAE;QACH,MAAM,EAAE,0BAA0B,CAAA;KACrC,CAAA;CACJ,CAAA"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,YAAY,EAAC,MAAM,gBAAgB,CAAA;AAChD,OAAO,KAAK,EAAC,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,WAAW,EAAC,MAAM,SAAS,CAAA;AAC/E,OAAO,KAAK,EAAC,UAAU,EAAE,kBAAkB,EAAC,MAAM,0BAA0B,CAAA;AAC5E,OAAO,EAAC,YAAY,EAAC,MAAM,mBAAmB,CAAA;AAE9C,MAAM,MAAM,kBAAkB,GAAG;IAC7B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC1C,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG;IAC9B,EAAE,EAAE,kBAAkB,CAAC;IACvB,IAAI,EAAE,kBAAkB,CAAA;IACxB,KAAK,EAAE,kBAAkB,CAAC;IAC1B,KAAK,EAAE,kBAAkB,CAAC;IAC1B,KAAK,EAAE,kBAAkB,GAAG;QACxB,MAAM,EAAE;YACJ,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC1C,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;SAC1C,CAAA;KACJ,CAAA;IACD,UAAU,EAAE;QACR,IAAI,EAAE,kBAAkB,CAAA;KAC3B,CAAA;CACJ,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG,OAAO,CAAC;IACrC,YAAY,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC3C,aAAa,EAAE,IAAI,CAAA;IACnB,yBAAyB,EAAE,IAAI,CAAA;IAC/B,uBAAuB,EAAE,MAAM,CAAA;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,gBAAgB,CAAA;CAC9B,CAAC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;AAElC,MAAM,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,kBAAkB,KAAK,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAA;AAEzF,MAAM,MAAM,eAAe,GAAG;IAC1B,SAAS,EAAE,IAAI,CAAA;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAA;CACjB,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;CACnB,GAAG,CAAC,eAAe,GAAG;IACnB,SAAS,CAAC,EAAE,SAAS,CAAA;CACxB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC,CAAA;AAE7B,MAAM,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,oBAAoB,GAAG;IAC7D,YAAY,EAAE,mBAAmB,CAAA;CACpC,KAAK,YAAY,CAAA;AAElB,MAAM,MAAM,cAAc,GAAG,OAAO,CAAC;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,mCAAmC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CAC/E,CAAC,CAAA;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC7B,cAAc,EAAE,MAAM,CAAC;CAC1B,CAAA;AAED,MAAM,MAAM,uBAAuB,GAAG,WAAW,GAAG;IAChD,IAAI,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,EAAE,EAAE,kBAAkB,CAAC,OAAO,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;IACrF,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAA;CAChB,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,eAAe,KAAK,YAAY,CAAA;AAEvE,MAAM,MAAM,0BAA0B,GAAG;IACrC,OAAO,EAAE;QACL,SAAS,EAAE,MAAM,CAAA;QACjB,QAAQ,EAAE,MAAM,CAAA;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,cAAc,EAAE,MAAM,CAAA;KACzB,CAAA;CACJ,CAAA;AAED,MAAM,MAAM,wBAAwB,GAAG,CAAC,MAAM,GAAG,eAAe,CAAC,GAAG;IAChE,KAAK,EAAE;QACH,MAAM,EAAE,0BAA0B,CAAA;KACrC,CAAA;CACJ,CAAA"}

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/types.ts"],"sourcesContent":["import type {NextResponse} from 'next/server.js'\nimport type {AuthStrategy, Config, SanitizedConfig, ServerProps} from 'payload'\nimport type {I18nClient, NestedKeysStripped} from '@payloadcms/translations'\nimport {translations} from './translations.js'\n\nexport type ZitadelFieldConfig = {\n    hidden?: boolean,\n    name: string,\n    label: string | Record<string, string>,\n}\n\nexport type ZitadelFieldsConfig = {\n    id: ZitadelFieldConfig,\n    name: ZitadelFieldConfig\n    email: ZitadelFieldConfig,\n    image: ZitadelFieldConfig,\n    roles: ZitadelFieldConfig & {\n        labels: {\n            singular: string | Record<string, string>,\n            plural: string | Record<string, string>\n        }\n    }\n    roleFields: {\n        name: ZitadelFieldConfig\n    }\n}\n\nexport type ZitadelPluginProps = Partial<{\n    fieldsConfig: Partial<ZitadelFieldsConfig>,\n    disableAvatar: true\n    disableDefaultLoginButton: true\n    defaultLoginButtonTitle: string\n    label: string\n    onSuccess: ZitadelOnSuccess\n}> & Partial<ZitadelStrategyProps>\n\nexport type ZitadelPluginType = (props: ZitadelPluginProps) => (config: Config) => Config\n\nexport type ZitadelAPIProps = {\n    enableAPI: true\n    apiClientId: string,\n    apiKeyId: string,\n    apiKey: string\n}\n\nexport type ZitadelStrategyProps = {\n    strategyName: string,\n    issuerURL: string,\n    clientId: string\n    authSlug: string\n} & (ZitadelAPIProps | {\n    enableAPI?: undefined\n} & Partial<ZitadelAPIProps>)\n\nexport type ZitadelStrategyType = (props: ZitadelStrategyProps & {\n    fieldsConfig: ZitadelFieldsConfig\n}) => AuthStrategy\n\nexport type ZitadelIdToken = Partial<{\n    sub: string,\n    name: string,\n    email: string,\n    picture: string,\n    'urn:zitadel:iam:org:project:roles'?: Record<string, Record<string, string>>\n}>\n\nexport type ZitadelAvatarProps = {\n    active: boolean,\n    imageFieldName: string,\n}\n\nexport type ZitadelLoginButtonProps = ServerProps & {\n    i18n: I18nClient<typeof translations.en, NestedKeysStripped<typeof translations.en>>,\n    authorizeURL: string,\n    label: string\n}\n\nexport type ZitadelOnSuccess = (state: URLSearchParams) => NextResponse\n\nexport type ZitadelCustomConfigSegment = {\n    zitadel: {\n        issuerURL: string\n        clientId: string\n        callbackURL: string,\n        imageFieldName: string\n    }\n}\n\nexport type PayloadConfigWithZitadel = (Config | SanitizedConfig) & {\n    admin: {\n        custom: ZitadelCustomConfigSegment\n    }\n}"],"names":[],"mappings":"AAwFA,WAIC"}
+{"version":3,"sources":["../src/types.ts"],"sourcesContent":["import type {NextResponse} from 'next/server.js'\nimport type {AuthStrategy, Config, SanitizedConfig, ServerProps} from 'payload'\nimport type {I18nClient, NestedKeysStripped} from '@payloadcms/translations'\nimport {translations} from './translations.js'\n\nexport type ZitadelFieldConfig = {\n    hidden?: boolean,\n    name: string,\n    label: string | Record<string, string>,\n}\n\nexport type ZitadelFieldsConfig = {\n    id: ZitadelFieldConfig,\n    name: ZitadelFieldConfig\n    email: ZitadelFieldConfig,\n    image: ZitadelFieldConfig,\n    roles: ZitadelFieldConfig & {\n        labels: {\n            singular: string | Record<string, string>,\n            plural: string | Record<string, string>\n        }\n    }\n    roleFields: {\n        name: ZitadelFieldConfig\n    }\n}\n\nexport type ZitadelPluginProps = Partial<{\n    fieldsConfig: Partial<ZitadelFieldsConfig>,\n    disableAvatar: true\n    disableDefaultLoginButton: true\n    defaultLoginButtonTitle: string\n    label: string\n    onSuccess: ZitadelOnSuccess\n}> & Partial<ZitadelStrategyProps>\n\nexport type ZitadelPluginType = (props: ZitadelPluginProps) => (config: Config) => Config\n\nexport type ZitadelAPIProps = {\n    enableAPI: true\n    apiClientId: string,\n    apiKeyId: string,\n    apiKey: string\n}\n\nexport type ZitadelStrategyProps = {\n    strategyName: string,\n    issuerURL: string,\n    clientId: string\n    authSlug: string\n} & (ZitadelAPIProps | {\n    enableAPI?: undefined\n} & Partial<ZitadelAPIProps>)\n\nexport type ZitadelStrategyType = (props: ZitadelStrategyProps & {\n    fieldsConfig: ZitadelFieldsConfig\n}) => AuthStrategy\n\nexport type ZitadelIdToken = Partial<{\n    sub: string,\n    name: string,\n    email: string,\n    picture: string,\n    'urn:zitadel:iam:org:project:roles'?: Record<string, Record<string, string>>\n}>\n\nexport type ZitadelAvatarProps = {\n    imageFieldName: string,\n}\n\nexport type ZitadelLoginButtonProps = ServerProps & {\n    i18n: I18nClient<typeof translations.en, NestedKeysStripped<typeof translations.en>>,\n    authorizeURL: string,\n    label: string\n}\n\nexport type ZitadelOnSuccess = (state: URLSearchParams) => NextResponse\n\nexport type ZitadelCustomConfigSegment = {\n    zitadel: {\n        issuerURL: string\n        clientId: string\n        callbackURL: string,\n        imageFieldName: string\n    }\n}\n\nexport type PayloadConfigWithZitadel = (Config | SanitizedConfig) & {\n    admin: {\n        custom: ZitadelCustomConfigSegment\n    }\n}"],"names":[],"mappings":"AAuFA,WAIC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "payload-zitadel-plugin",
-  "version": "0.3.4",
+  "version": "0.3.5",
   "description": "plugin for Payload CMS, which enables authentication via Zitadel IdP",
   "type": "module",
   "license": "MIT",

package/dist/components/client/Avatar.d.ts

@@ -1,4 +0,0 @@
-import React from 'react';
-import type { ZitadelAvatarProps } from '../../types.js';
-export declare const Avatar: ({ active, imageFieldName }: ZitadelAvatarProps) => React.JSX.Element;
-//# sourceMappingURL=Avatar.d.ts.map

package/dist/components/client/Avatar.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"Avatar.d.ts","sourceRoot":"","sources":["../../../src/components/client/Avatar.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,MAAM,OAAO,CAAA;AAGzB,OAAO,KAAK,EAAC,kBAAkB,EAAC,MAAM,gBAAgB,CAAA;AAEtD,eAAO,MAAM,MAAM,+BAA8B,kBAAkB,sBAiBlE,CAAA"}

package/dist/components/client/Avatar.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/components/client/Avatar.tsx"],"sourcesContent":["'use client'\n\nimport React from 'react'\nimport {DefaultAccountIcon} from '@payloadcms/ui/graphics/Account/Default'\nimport {useAuth} from '@payloadcms/ui'\nimport type {ZitadelAvatarProps} from '../../types.js'\n\nexport const Avatar = ({active, imageFieldName}: ZitadelAvatarProps) => {\n\n    const {user} = useAuth()\n\n    return (\n        user && user[imageFieldName] ?\n            <>\n                <style>{'zitadel-avatar:hover { filter: brightness(1.2); }'}</style>\n                <img className=\"zitadel-avatar\" src={user[imageFieldName]} height={25} width={25} alt=\"Profile Picture\"\n                     style={{\n                         borderRadius: '100%',\n                         ...(active ? {filter: 'brightness(.8)'} : {})\n                     }}/>\n            </> :\n            <DefaultAccountIcon active={active}/>\n    )\n\n}\n"],"names":["React","DefaultAccountIcon","useAuth","Avatar","active","imageFieldName","user","style","img","className","src","height","width","alt","borderRadius","filter"],"mappings":"AAAA;AAEA,OAAOA,WAAW,QAAO;AACzB,SAAQC,kBAAkB,QAAO,0CAAyC;AAC1E,SAAQC,OAAO,QAAO,iBAAgB;AAGtC,OAAO,MAAMC,SAAS,CAAC,EAACC,MAAM,EAAEC,cAAc,EAAqB;IAE/D,MAAM,EAACC,IAAI,EAAC,GAAGJ;IAEf,OACII,QAAQA,IAAI,CAACD,eAAe,iBACxB,wDACI,oBAACE,eAAO,oEACR,oBAACC;QAAIC,WAAU;QAAiBC,KAAKJ,IAAI,CAACD,eAAe;QAAEM,QAAQ;QAAIC,OAAO;QAAIC,KAAI;QACjFN,OAAO;YACHO,cAAc;YACd,GAAIV,SAAS;gBAACW,QAAQ;YAAgB,IAAI,CAAC,CAAC;QAChD;wBAET,oBAACd;QAAmBG,QAAQA;;AAGxC,EAAC"}

package/dist/components/server/LoginButton.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"LoginButton.d.ts","sourceRoot":"","sources":["../../../src/components/server/LoginButton.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAA;AAEzB,OAAO,KAAK,EAAC,uBAAuB,EAAC,MAAM,gBAAgB,CAAA;AAE3D,eAAO,MAAM,WAAW,kCAAuC,uBAAuB,+BAK5E,CAAA"}

package/dist/components/server/LoginButton.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/components/server/LoginButton.tsx"],"sourcesContent":["import React from 'react'\nimport {Button} from '@payloadcms/ui'\nimport type {ZitadelLoginButtonProps} from '../../types.js'\n\nexport const LoginButton = async ({i18n, authorizeURL, label}: ZitadelLoginButtonProps) =>\n    <div style={{display: 'flex', justifyContent: 'center'}}>\n        <Button el=\"anchor\" url={authorizeURL}>\n            {i18n.t('zitadelPlugin:signIn', {label})}\n        </Button>\n    </div>"],"names":["React","Button","LoginButton","i18n","authorizeURL","label","div","style","display","justifyContent","el","url","t"],"mappings":"AAAA,OAAOA,WAAW,QAAO;AACzB,SAAQC,MAAM,QAAO,iBAAgB;AAGrC,OAAO,MAAMC,cAAc,OAAO,EAACC,IAAI,EAAEC,YAAY,EAAEC,KAAK,EAA0B,iBAClF,oBAACC;QAAIC,OAAO;YAACC,SAAS;YAAQC,gBAAgB;QAAQ;qBAClD,oBAACR;QAAOS,IAAG;QAASC,KAAKP;OACpBD,KAAKS,CAAC,CAAC,wBAAwB;QAACP;IAAK,KAExC"}