payload 0.20.0 → 0.20.3-beta.0

package/dist/auth/operations/access.js

@@ -0,0 +1,103 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const adminInit_1 = require("../../utilities/telemetry/events/adminInit");
+const allOperations = ['create', 'read', 'update', 'delete'];
+async function accessOperation(args) {
+    const { req, req: { user, payload: { config, }, }, } = args;
+    (0, adminInit_1.adminInit)(req);
+    const results = {};
+    const promises = [];
+    const isLoggedIn = !!(user);
+    const userCollectionConfig = (user && user.collection) ? config.collections.find((collection) => collection.slug === user.collection) : null;
+    const createAccessPromise = async (obj, access, operation, disableWhere = false) => {
+        var _a;
+        const updatedObj = obj;
+        const result = await access({ req });
+        if (typeof result === 'object' && !disableWhere) {
+            updatedObj[operation] = {
+                permission: true,
+                where: result,
+            };
+        }
+        else if (((_a = updatedObj[operation]) === null || _a === void 0 ? void 0 : _a.permission) !== false) {
+            updatedObj[operation] = {
+                permission: !!(result),
+            };
+        }
+    };
+    const executeFieldPolicies = (obj, fields, operation) => {
+        const updatedObj = obj;
+        fields.forEach(async (field) => {
+            if (field.name) {
+                if (!updatedObj[field.name])
+                    updatedObj[field.name] = {};
+                if (field.access && typeof field.access[operation] === 'function') {
+                    promises.push(createAccessPromise(updatedObj[field.name], field.access[operation], operation, true));
+                }
+                else {
+                    updatedObj[field.name][operation] = {
+                        permission: isLoggedIn,
+                    };
+                }
+                if (field.fields) {
+                    if (!updatedObj[field.name].fields)
+                        updatedObj[field.name].fields = {};
+                    executeFieldPolicies(updatedObj[field.name].fields, field.fields, operation);
+                }
+            }
+            else if (field.fields) {
+                executeFieldPolicies(updatedObj, field.fields, operation);
+            }
+            else if (field.type === 'tabs') {
+                field.tabs.forEach((tab) => {
+                    executeFieldPolicies(updatedObj, tab.fields, operation);
+                });
+            }
+        });
+    };
+    const executeEntityPolicies = (entity, operations, type) => {
+        if (!results[type])
+            results[type] = {};
+        results[type][entity.slug] = {
+            fields: {},
+        };
+        operations.forEach((operation) => {
+            executeFieldPolicies(results[type][entity.slug].fields, entity.fields, operation);
+            if (typeof entity.access[operation] === 'function') {
+                promises.push(createAccessPromise(results[type][entity.slug], entity.access[operation], operation));
+            }
+            else {
+                results[type][entity.slug][operation] = {
+                    permission: isLoggedIn,
+                };
+            }
+        });
+    };
+    if (userCollectionConfig) {
+        results.canAccessAdmin = userCollectionConfig.access.admin ? userCollectionConfig.access.admin(args) : isLoggedIn;
+    }
+    else {
+        results.canAccessAdmin = false;
+    }
+    config.collections.forEach((collection) => {
+        const collectionOperations = [...allOperations];
+        if (collection.auth && (typeof collection.auth.maxLoginAttempts !== 'undefined' && collection.auth.maxLoginAttempts !== 0)) {
+            collectionOperations.push('unlock');
+        }
+        if (collection.versions) {
+            collectionOperations.push('readVersions');
+        }
+        executeEntityPolicies(collection, collectionOperations, 'collections');
+    });
+    config.globals.forEach((global) => {
+        const globalOperations = ['read', 'update'];
+        if (global.versions) {
+            globalOperations.push('readVersions');
+        }
+        executeEntityPolicies(global, globalOperations, 'globals');
+    });
+    await Promise.all(promises);
+    return results;
+}
+exports.default = accessOperation;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiYWNjZXNzLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vc3JjL2F1dGgvb3BlcmF0aW9ucy9hY2Nlc3MudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7QUFFQSwwRUFBNkY7QUFFN0YsTUFBTSxhQUFhLEdBQUcsQ0FBQyxRQUFRLEVBQUUsTUFBTSxFQUFFLFFBQVEsRUFBRSxRQUFRLENBQUMsQ0FBQztBQU03RCxLQUFLLFVBQVUsZUFBZSxDQUFDLElBQWU7SUFDNUMsTUFBTSxFQUNKLEdBQUcsRUFDSCxHQUFHLEVBQUUsRUFDSCxJQUFJLEVBQ0osT0FBTyxFQUFFLEVBQ1AsTUFBTSxHQUNQLEdBQ0YsR0FDRixHQUFHLElBQUksQ0FBQztJQUVULElBQUEscUJBQWtCLEVBQUMsR0FBRyxDQUFDLENBQUM7SUFFeEIsTUFBTSxPQUFPLEdBQUcsRUFBaUIsQ0FBQztJQUNsQyxNQUFNLFFBQVEsR0FBRyxFQUFFLENBQUM7SUFFcEIsTUFBTSxVQUFVLEdBQUcsQ0FBQyxDQUFDLENBQUMsSUFBSSxDQUFDLENBQUM7SUFDNUIsTUFBTSxvQkFBb0IsR0FBRyxDQUFDLElBQUksSUFBSSxJQUFJLENBQUMsVUFBVSxDQUFDLENBQUMsQ0FBQyxDQUFDLE1BQU0sQ0FBQyxXQUFXLENBQUMsSUFBSSxDQUFDLENBQUMsVUFBVSxFQUFFLEVBQUUsQ0FBQyxVQUFVLENBQUMsSUFBSSxLQUFLLElBQUksQ0FBQyxVQUFVLENBQUMsQ0FBQyxDQUFDLENBQUMsSUFBSSxDQUFDO0lBRTdJLE1BQU0sbUJBQW1CLEdBQUcsS0FBSyxFQUFFLEdBQUcsRUFBRSxNQUFNLEVBQUUsU0FBUyxFQUFFLFlBQVksR0FBRyxLQUFLLEVBQUUsRUFBRTs7UUFDakYsTUFBTSxVQUFVLEdBQUcsR0FBRyxDQUFDO1FBQ3ZCLE1BQU0sTUFBTSxHQUFHLE1BQU0sTUFBTSxDQUFDLEVBQUUsR0FBRyxFQUFFLENBQUMsQ0FBQztRQUVyQyxJQUFJLE9BQU8sTUFBTSxLQUFLLFFBQVEsSUFBSSxDQUFDLFlBQVksRUFBRTtZQUMvQyxVQUFVLENBQUMsU0FBUyxDQUFDLEdBQUc7Z0JBQ3RCLFVBQVUsRUFBRSxJQUFJO2dCQUNoQixLQUFLLEVBQUUsTUFBTTthQUNkLENBQUM7U0FDSDthQUFNLElBQUksQ0FBQSxNQUFBLFVBQVUsQ0FBQyxTQUFTLENBQUMsMENBQUUsVUFBVSxNQUFLLEtBQUssRUFBRTtZQUN0RCxVQUFVLENBQUMsU0FBUyxDQUFDLEdBQUc7Z0JBQ3RCLFVBQVUsRUFBRSxDQUFDLENBQUMsQ0FBQyxNQUFNLENBQUM7YUFDdkIsQ0FBQztTQUNIO0lBQ0gsQ0FBQyxDQUFDO0lBRUYsTUFBTSxvQkFBb0IsR0FBRyxDQUFDLEdBQUcsRUFBRSxNQUFNLEVBQUUsU0FBUyxFQUFFLEVBQUU7UUFDdEQsTUFBTSxVQUFVLEdBQUcsR0FBRyxDQUFDO1FBRXZCLE1BQU0sQ0FBQyxPQUFPLENBQUMsS0FBSyxFQUFFLEtBQUssRUFBRSxFQUFFO1lBQzdCLElBQUksS0FBSyxDQUFDLElBQUksRUFBRTtnQkFDZCxJQUFJLENBQUMsVUFBVSxDQUFDLEtBQUssQ0FBQyxJQUFJLENBQUM7b0JBQUUsVUFBVSxDQUFDLEtBQUssQ0FBQyxJQUFJLENBQUMsR0FBRyxFQUFFLENBQUM7Z0JBRXpELElBQUksS0FBSyxDQUFDLE1BQU0sSUFBSSxPQUFPLEtBQUssQ0FBQyxNQUFNLENBQUMsU0FBUyxDQUFDLEtBQUssVUFBVSxFQUFFO29CQUNqRSxRQUFRLENBQUMsSUFBSSxDQUFDLG1CQUFtQixDQUFDLFVBQVUsQ0FBQyxLQUFLLENBQUMsSUFBSSxDQUFDLEVBQUUsS0FBSyxDQUFDLE1BQU0sQ0FBQyxTQUFTLENBQUMsRUFBRSxTQUFTLEVBQUUsSUFBSSxDQUFDLENBQUMsQ0FBQztpQkFDdEc7cUJBQU07b0JBQ0wsVUFBVSxDQUFDLEtBQUssQ0FBQyxJQUFJLENBQUMsQ0FBQyxTQUFTLENBQUMsR0FBRzt3QkFDbEMsVUFBVSxFQUFFLFVBQVU7cUJBQ3ZCLENBQUM7aUJBQ0g7Z0JBRUQsSUFBSSxLQUFLLENBQUMsTUFBTSxFQUFFO29CQUNoQixJQUFJLENBQUMsVUFBVSxDQUFDLEtBQUssQ0FBQyxJQUFJLENBQUMsQ0FBQyxNQUFNO3dCQUFFLFVBQVUsQ0FBQyxLQUFLLENBQUMsSUFBSSxDQUFDLENBQUMsTUFBTSxHQUFHLEVBQUUsQ0FBQztvQkFDdkUsb0JBQW9CLENBQUMsVUFBVSxDQUFDLEtBQUssQ0FBQyxJQUFJLENBQUMsQ0FBQyxNQUFNLEVBQUUsS0FBSyxDQUFDLE1BQU0sRUFBRSxTQUFTLENBQUMsQ0FBQztpQkFDOUU7YUFDRjtpQkFBTSxJQUFJLEtBQUssQ0FBQyxNQUFNLEVBQUU7Z0JBQ3ZCLG9CQUFvQixDQUFDLFVBQVUsRUFBRSxLQUFLLENBQUMsTUFBTSxFQUFFLFNBQVMsQ0FBQyxDQUFDO2FBQzNEO2lCQUFNLElBQUksS0FBSyxDQUFDLElBQUksS0FBSyxNQUFNLEVBQUU7Z0JBQ2hDLEtBQUssQ0FBQyxJQUFJLENBQUMsT0FBTyxDQUFDLENBQUMsR0FBRyxFQUFFLEVBQUU7b0JBQ3pCLG9CQUFvQixDQUFDLFVBQVUsRUFBRSxHQUFHLENBQUMsTUFBTSxFQUFFLFNBQVMsQ0FBQyxDQUFDO2dCQUMxRCxDQUFDLENBQUMsQ0FBQzthQUNKO1FBQ0gsQ0FBQyxDQUFDLENBQUM7SUFDTCxDQUFDLENBQUM7SUFFRixNQUFNLHFCQUFxQixHQUFHLENBQUMsTUFBTSxFQUFFLFVBQVUsRUFBRSxJQUFJLEVBQUUsRUFBRTtRQUN6RCxJQUFJLENBQUMsT0FBTyxDQUFDLElBQUksQ0FBQztZQUFFLE9BQU8sQ0FBQyxJQUFJLENBQUMsR0FBRyxFQUFFLENBQUM7UUFFdkMsT0FBTyxDQUFDLElBQUksQ0FBQyxDQUFDLE1BQU0sQ0FBQyxJQUFJLENBQUMsR0FBRztZQUMzQixNQUFNLEVBQUUsRUFBRTtTQUNYLENBQUM7UUFFRixVQUFVLENBQUMsT0FBTyxDQUFDLENBQUMsU0FBUyxFQUFFLEVBQUU7WUFDL0Isb0JBQW9CLENBQUMsT0FBTyxDQUFDLElBQUksQ0FBQyxDQUFDLE1BQU0sQ0FBQyxJQUFJLENBQUMsQ0FBQyxNQUFNLEVBQUUsTUFBTSxDQUFDLE1BQU0sRUFBRSxTQUFTLENBQUMsQ0FBQztZQUVsRixJQUFJLE9BQU8sTUFBTSxDQUFDLE1BQU0sQ0FBQyxTQUFTLENBQUMsS0FBSyxVQUFVLEVBQUU7Z0JBQ2xELFFBQVEsQ0FBQyxJQUFJLENBQUMsbUJBQW1CLENBQUMsT0FBTyxDQUFDLElBQUksQ0FBQyxDQUFDLE1BQU0sQ0FBQyxJQUFJLENBQUMsRUFBRSxNQUFNLENBQUMsTUFBTSxDQUFDLFNBQVMsQ0FBQyxFQUFFLFNBQVMsQ0FBQyxDQUFDLENBQUM7YUFDckc7aUJBQU07Z0JBQ0wsT0FBTyxDQUFDLElBQUksQ0FBQyxDQUFDLE1BQU0sQ0FBQyxJQUFJLENBQUMsQ0FBQyxTQUFTLENBQUMsR0FBRztvQkFDdEMsVUFBVSxFQUFFLFVBQVU7aUJBQ3ZCLENBQUM7YUFDSDtRQUNILENBQUMsQ0FBQyxDQUFDO0lBQ0wsQ0FBQyxDQUFDO0lBRUYsSUFBSSxvQkFBb0IsRUFBRTtRQUN4QixPQUFPLENBQUMsY0FBYyxHQUFHLG9CQUFvQixDQUFDLE1BQU0sQ0FBQyxLQUFLLENBQUMsQ0FBQyxDQUFDLG9CQUFvQixDQUFDLE1BQU0sQ0FBQyxLQUFLLENBQUMsSUFBSSxDQUFDLENBQUMsQ0FBQyxDQUFDLFVBQVUsQ0FBQztLQUNuSDtTQUFNO1FBQ0wsT0FBTyxDQUFDLGNBQWMsR0FBRyxLQUFLLENBQUM7S0FDaEM7SUFFRCxNQUFNLENBQUMsV0FBVyxDQUFDLE9BQU8sQ0FBQyxDQUFDLFVBQVUsRUFBRSxFQUFFO1FBQ3hDLE1BQU0sb0JBQW9CLEdBQUcsQ0FBQyxHQUFHLGFBQWEsQ0FBQyxDQUFDO1FBRWhELElBQUksVUFBVSxDQUFDLElBQUksSUFBSSxDQUFDLE9BQU8sVUFBVSxDQUFDLElBQUksQ0FBQyxnQkFBZ0IsS0FBSyxXQUFXLElBQUksVUFBVSxDQUFDLElBQUksQ0FBQyxnQkFBZ0IsS0FBSyxDQUFDLENBQUMsRUFBRTtZQUMxSCxvQkFBb0IsQ0FBQyxJQUFJLENBQUMsUUFBUSxDQUFDLENBQUM7U0FDckM7UUFFRCxJQUFJLFVBQVUsQ0FBQyxRQUFRLEVBQUU7WUFDdkIsb0JBQW9CLENBQUMsSUFBSSxDQUFDLGNBQWMsQ0FBQyxDQUFDO1NBQzNDO1FBRUQscUJBQXFCLENBQUMsVUFBVSxFQUFFLG9CQUFvQixFQUFFLGFBQWEsQ0FBQyxDQUFDO0lBQ3pFLENBQUMsQ0FBQyxDQUFDO0lBRUgsTUFBTSxDQUFDLE9BQU8sQ0FBQyxPQUFPLENBQUMsQ0FBQyxNQUFNLEVBQUUsRUFBRTtRQUNoQyxNQUFNLGdCQUFnQixHQUFHLENBQUMsTUFBTSxFQUFFLFFBQVEsQ0FBQyxDQUFDO1FBRTVDLElBQUksTUFBTSxDQUFDLFFBQVEsRUFBRTtZQUNuQixnQkFBZ0IsQ0FBQyxJQUFJLENBQUMsY0FBYyxDQUFDLENBQUM7U0FDdkM7UUFDRCxxQkFBcUIsQ0FBQyxNQUFNLEVBQUUsZ0JBQWdCLEVBQUUsU0FBUyxDQUFDLENBQUM7SUFDN0QsQ0FBQyxDQUFDLENBQUM7SUFFSCxNQUFNLE9BQU8sQ0FBQyxHQUFHLENBQUMsUUFBUSxDQUFDLENBQUM7SUFFNUIsT0FBTyxPQUFPLENBQUM7QUFDakIsQ0FBQztBQUVELGtCQUFlLGVBQWUsQ0FBQyJ9

package/dist/auth/operations/forgotPassword.d.ts

@@ -0,0 +1,15 @@
+import { PayloadRequest } from '../../express/types';
+import { Collection } from '../../collections/config/types';
+export declare type Arguments = {
+    collection: Collection;
+    data: {
+        email: string;
+        [key: string]: unknown;
+    };
+    disableEmail?: boolean;
+    expiration?: number;
+    req: PayloadRequest;
+};
+export declare type Result = string;
+declare function forgotPassword(incomingArgs: Arguments): Promise<string | null>;
+export default forgotPassword;

package/dist/auth/operations/forgotPassword.js

@@ -0,0 +1,75 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const crypto_1 = __importDefault(require("crypto"));
+const errors_1 = require("../../errors");
+async function forgotPassword(incomingArgs) {
+    if (!Object.prototype.hasOwnProperty.call(incomingArgs.data, 'email')) {
+        throw new errors_1.APIError('Missing email.', 400);
+    }
+    let args = incomingArgs;
+    // /////////////////////////////////////
+    // beforeOperation - Collection
+    // /////////////////////////////////////
+    await args.collection.config.hooks.beforeOperation.reduce(async (priorHook, hook) => {
+        await priorHook;
+        args = (await hook({
+            args,
+            operation: 'forgotPassword',
+        })) || args;
+    }, Promise.resolve());
+    const { collection: { Model, config: collectionConfig, }, data, disableEmail, expiration, req: { payload: { config, sendEmail: email, emailOptions, }, }, req, } = args;
+    // /////////////////////////////////////
+    // Forget password
+    // /////////////////////////////////////
+    let token = crypto_1.default.randomBytes(20);
+    token = token.toString('hex');
+    const user = await Model.findOne({ email: data.email.toLowerCase() });
+    if (!user)
+        return null;
+    user.resetPasswordToken = token;
+    user.resetPasswordExpiration = expiration || Date.now() + 3600000; // 1 hour
+    await user.save();
+    const userJSON = user.toJSON({ virtuals: true });
+    if (!disableEmail) {
+        let html = `You are receiving this because you (or someone else) have requested the reset of the password for your account.
+    Please click on the following link, or paste this into your browser to complete the process:
+    <a href="${config.serverURL}${config.routes.admin}/reset/${token}">
+     ${config.serverURL}${config.routes.admin}/reset/${token}
+    </a>
+    If you did not request this, please ignore this email and your password will remain unchanged.`;
+        if (typeof collectionConfig.auth.forgotPassword.generateEmailHTML === 'function') {
+            html = await collectionConfig.auth.forgotPassword.generateEmailHTML({
+                req,
+                token,
+                user: userJSON,
+            });
+        }
+        let subject = 'Reset your password';
+        if (typeof collectionConfig.auth.forgotPassword.generateEmailSubject === 'function') {
+            subject = await collectionConfig.auth.forgotPassword.generateEmailSubject({
+                req,
+                token,
+                user: userJSON,
+            });
+        }
+        email({
+            from: `"${emailOptions.fromName}" <${emailOptions.fromAddress}>`,
+            to: data.email,
+            subject,
+            html,
+        });
+    }
+    // /////////////////////////////////////
+    // afterForgotPassword - Collection
+    // /////////////////////////////////////
+    await collectionConfig.hooks.afterForgotPassword.reduce(async (priorHook, hook) => {
+        await priorHook;
+        await hook({ args });
+    }, Promise.resolve());
+    return token;
+}
+exports.default = forgotPassword;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/auth/operations/init.d.ts

@@ -0,0 +1,7 @@
+import { CollectionModel } from '../../collections/config/types';
+import { PayloadRequest } from '../../express/types';
+declare function init(args: {
+    Model: CollectionModel;
+    req: PayloadRequest;
+}): Promise<boolean>;
+export default init;

package/dist/auth/operations/init.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+async function init(args) {
+    const { Model, } = args;
+    const count = await Model.countDocuments({});
+    return count >= 1;
+}
+exports.default = init;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5pdC5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uL3NyYy9hdXRoL29wZXJhdGlvbnMvaW5pdC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOztBQUdBLEtBQUssVUFBVSxJQUFJLENBQUMsSUFBcUQ7SUFDdkUsTUFBTSxFQUNKLEtBQUssR0FDTixHQUFHLElBQUksQ0FBQztJQUVULE1BQU0sS0FBSyxHQUFHLE1BQU0sS0FBSyxDQUFDLGNBQWMsQ0FBQyxFQUFFLENBQUMsQ0FBQztJQUU3QyxPQUFPLEtBQUssSUFBSSxDQUFDLENBQUM7QUFDcEIsQ0FBQztBQUVELGtCQUFlLElBQUksQ0FBQyJ9

package/dist/auth/operations/local/forgotPassword.d.ts

@@ -0,0 +1,14 @@
+import { PayloadRequest } from '../../../express/types';
+import { Result } from '../forgotPassword';
+import { Payload } from '../../..';
+export declare type Options = {
+    collection: string;
+    data: {
+        email: string;
+    };
+    expiration?: number;
+    disableEmail?: boolean;
+    req?: PayloadRequest;
+};
+declare function localForgotPassword(payload: Payload, options: Options): Promise<Result>;
+export default localForgotPassword;

package/dist/auth/operations/local/forgotPassword.js

@@ -0,0 +1,22 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const forgotPassword_1 = __importDefault(require("../forgotPassword"));
+async function localForgotPassword(payload, options) {
+    const { collection: collectionSlug, data, expiration, disableEmail, req = {}, } = options;
+    const collection = payload.collections[collectionSlug];
+    return (0, forgotPassword_1.default)({
+        data,
+        collection,
+        disableEmail,
+        expiration,
+        req: {
+            ...req,
+            payloadAPI: 'local',
+        },
+    });
+}
+exports.default = localForgotPassword;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZm9yZ290UGFzc3dvcmQuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi9zcmMvYXV0aC9vcGVyYXRpb25zL2xvY2FsL2ZvcmdvdFBhc3N3b3JkLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7Ozs7O0FBQ0EsdUVBQTJEO0FBYTNELEtBQUssVUFBVSxtQkFBbUIsQ0FBQyxPQUFnQixFQUFFLE9BQWdCO0lBQ25FLE1BQU0sRUFDSixVQUFVLEVBQUUsY0FBYyxFQUMxQixJQUFJLEVBQ0osVUFBVSxFQUNWLFlBQVksRUFDWixHQUFHLEdBQUcsRUFBRSxHQUNULEdBQUcsT0FBTyxDQUFDO0lBRVosTUFBTSxVQUFVLEdBQUcsT0FBTyxDQUFDLFdBQVcsQ0FBQyxjQUFjLENBQUMsQ0FBQztJQUV2RCxPQUFPLElBQUEsd0JBQWMsRUFBQztRQUNwQixJQUFJO1FBQ0osVUFBVTtRQUNWLFlBQVk7UUFDWixVQUFVO1FBQ1YsR0FBRyxFQUFFO1lBQ0gsR0FBRyxHQUFHO1lBQ04sVUFBVSxFQUFFLE9BQU87U0FDRjtLQUNwQixDQUFDLENBQUM7QUFDTCxDQUFDO0FBRUQsa0JBQWUsbUJBQW1CLENBQUMifQ==

package/dist/auth/operations/local/index.d.ts

@@ -0,0 +1,13 @@
+import login from './login';
+import forgotPassword from './forgotPassword';
+import resetPassword from './resetPassword';
+import unlock from './unlock';
+import verifyEmail from './verifyEmail';
+declare const _default: {
+    login: typeof login;
+    forgotPassword: typeof forgotPassword;
+    resetPassword: typeof resetPassword;
+    unlock: typeof unlock;
+    verifyEmail: typeof verifyEmail;
+};
+export default _default;

package/dist/auth/operations/local/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const login_1 = __importDefault(require("./login"));
+const forgotPassword_1 = __importDefault(require("./forgotPassword"));
+const resetPassword_1 = __importDefault(require("./resetPassword"));
+const unlock_1 = __importDefault(require("./unlock"));
+const verifyEmail_1 = __importDefault(require("./verifyEmail"));
+exports.default = {
+    login: login_1.default,
+    forgotPassword: forgotPassword_1.default,
+    resetPassword: resetPassword_1.default,
+    unlock: unlock_1.default,
+    verifyEmail: verifyEmail_1.default,
+};
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi9zcmMvYXV0aC9vcGVyYXRpb25zL2xvY2FsL2luZGV4LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7Ozs7O0FBQUEsb0RBQTRCO0FBQzVCLHNFQUE4QztBQUM5QyxvRUFBNEM7QUFDNUMsc0RBQThCO0FBQzlCLGdFQUF3QztBQUV4QyxrQkFBZTtJQUNiLEtBQUssRUFBTCxlQUFLO0lBQ0wsY0FBYyxFQUFkLHdCQUFjO0lBQ2QsYUFBYSxFQUFiLHVCQUFhO0lBQ2IsTUFBTSxFQUFOLGdCQUFNO0lBQ04sV0FBVyxFQUFYLHFCQUFXO0NBQ1osQ0FBQyJ9

package/dist/auth/operations/local/login.d.ts

@@ -0,0 +1,23 @@
+import { Response } from 'express';
+import { Result } from '../login';
+import { PayloadRequest } from '../../../express/types';
+import { TypeWithID } from '../../../collections/config/types';
+import { Payload } from '../../..';
+export declare type Options = {
+    collection: string;
+    data: {
+        email: string;
+        password: string;
+    };
+    req?: PayloadRequest;
+    res?: Response;
+    depth?: number;
+    locale?: string;
+    fallbackLocale?: string;
+    overrideAccess?: boolean;
+    showHiddenFields?: boolean;
+};
+declare function localLogin<T extends TypeWithID = any>(payload: Payload, options: Options): Promise<Result & {
+    user: T;
+}>;
+export default localLogin;

package/dist/auth/operations/local/login.js

@@ -0,0 +1,32 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const login_1 = __importDefault(require("../login"));
+async function localLogin(payload, options) {
+    const { collection: collectionSlug, req = {}, res, depth, locale, fallbackLocale, data, overrideAccess = true, showHiddenFields, } = options;
+    const collection = payload.collections[collectionSlug];
+    const args = {
+        depth,
+        collection,
+        overrideAccess,
+        showHiddenFields,
+        data,
+        req: {
+            ...req,
+            payloadAPI: 'local',
+            payload,
+            locale: undefined,
+            fallbackLocale: undefined,
+        },
+        res,
+    };
+    if (locale)
+        args.req.locale = locale;
+    if (fallbackLocale)
+        args.req.fallbackLocale = fallbackLocale;
+    return (0, login_1.default)(args);
+}
+exports.default = localLogin;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/auth/operations/local/resetPassword.d.ts

@@ -0,0 +1,14 @@
+import { Payload } from '../../..';
+import { Result } from '../resetPassword';
+import { PayloadRequest } from '../../../express/types';
+export declare type Options = {
+    collection: string;
+    data: {
+        token: string;
+        password: string;
+    };
+    overrideAccess: boolean;
+    req?: PayloadRequest;
+};
+declare function localResetPassword(payload: Payload, options: Options): Promise<Result>;
+export default localResetPassword;

package/dist/auth/operations/local/resetPassword.js

@@ -0,0 +1,22 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const resetPassword_1 = __importDefault(require("../resetPassword"));
+async function localResetPassword(payload, options) {
+    const { collection: collectionSlug, data, overrideAccess, req, } = options;
+    const collection = payload.collections[collectionSlug];
+    return (0, resetPassword_1.default)({
+        collection,
+        data,
+        overrideAccess,
+        req: {
+            ...req,
+            payload,
+            payloadAPI: 'local',
+        },
+    });
+}
+exports.default = localResetPassword;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicmVzZXRQYXNzd29yZC5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uLy4uL3NyYy9hdXRoL29wZXJhdGlvbnMvbG9jYWwvcmVzZXRQYXNzd29yZC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7OztBQUNBLHFFQUF5RDtBQWF6RCxLQUFLLFVBQVUsa0JBQWtCLENBQUMsT0FBZ0IsRUFBRSxPQUFnQjtJQUNsRSxNQUFNLEVBQ0osVUFBVSxFQUFFLGNBQWMsRUFDMUIsSUFBSSxFQUNKLGNBQWMsRUFDZCxHQUFHLEdBQ0osR0FBRyxPQUFPLENBQUM7SUFFWixNQUFNLFVBQVUsR0FBRyxPQUFPLENBQUMsV0FBVyxDQUFDLGNBQWMsQ0FBQyxDQUFDO0lBRXZELE9BQU8sSUFBQSx1QkFBYSxFQUFDO1FBQ25CLFVBQVU7UUFDVixJQUFJO1FBQ0osY0FBYztRQUNkLEdBQUcsRUFBRTtZQUNILEdBQUcsR0FBRztZQUNOLE9BQU87WUFDUCxVQUFVLEVBQUUsT0FBTztTQUNGO0tBQ3BCLENBQUMsQ0FBQztBQUNMLENBQUM7QUFFRCxrQkFBZSxrQkFBa0IsQ0FBQyJ9

package/dist/auth/operations/local/unlock.d.ts

@@ -0,0 +1,12 @@
+import { PayloadRequest } from '../../../express/types';
+import { Payload } from '../../..';
+export declare type Options = {
+    collection: string;
+    data: {
+        email: any;
+    };
+    req?: PayloadRequest;
+    overrideAccess: boolean;
+};
+declare function localUnlock(payload: Payload, options: Options): Promise<boolean>;
+export default localUnlock;

package/dist/auth/operations/local/unlock.js

@@ -0,0 +1,22 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const unlock_1 = __importDefault(require("../unlock"));
+async function localUnlock(payload, options) {
+    const { collection: collectionSlug, data, overrideAccess = true, req, } = options;
+    const collection = payload.collections[collectionSlug];
+    return (0, unlock_1.default)({
+        data,
+        collection,
+        overrideAccess,
+        req: {
+            ...req,
+            payload,
+            payloadAPI: 'local',
+        },
+    });
+}
+exports.default = localUnlock;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/auth/operations/local/verifyEmail.d.ts

@@ -0,0 +1,7 @@
+import { Payload } from '../../../index';
+export declare type Options = {
+    token: string;
+    collection: string;
+};
+declare function localVerifyEmail(payload: Payload, options: Options): Promise<boolean>;
+export default localVerifyEmail;

package/dist/auth/operations/local/verifyEmail.js

@@ -0,0 +1,16 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const verifyEmail_1 = __importDefault(require("../verifyEmail"));
+async function localVerifyEmail(payload, options) {
+    const { collection: collectionSlug, token, } = options;
+    const collection = payload.collections[collectionSlug];
+    return (0, verifyEmail_1.default)({
+        token,
+        collection,
+    });
+}
+exports.default = localVerifyEmail;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidmVyaWZ5RW1haWwuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi9zcmMvYXV0aC9vcGVyYXRpb25zL2xvY2FsL3ZlcmlmeUVtYWlsLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7Ozs7O0FBQ0EsaUVBQXlDO0FBT3pDLEtBQUssVUFBVSxnQkFBZ0IsQ0FBQyxPQUFnQixFQUFFLE9BQWdCO0lBQ2hFLE1BQU0sRUFDSixVQUFVLEVBQUUsY0FBYyxFQUMxQixLQUFLLEdBQ04sR0FBRyxPQUFPLENBQUM7SUFFWixNQUFNLFVBQVUsR0FBRyxPQUFPLENBQUMsV0FBVyxDQUFDLGNBQWMsQ0FBQyxDQUFDO0lBRXZELE9BQU8sSUFBQSxxQkFBVyxFQUFDO1FBQ2pCLEtBQUs7UUFDTCxVQUFVO0tBQ1gsQ0FBQyxDQUFDO0FBQ0wsQ0FBQztBQUVELGtCQUFlLGdCQUFnQixDQUFDIn0=

package/dist/auth/operations/login.d.ts

@@ -0,0 +1,25 @@
+import { Response } from 'express';
+import { PayloadRequest } from '../../express/types';
+import { User } from '../types';
+import { Collection } from '../../collections/config/types';
+export declare type Result = {
+    user?: User;
+    token?: string;
+    exp?: number;
+};
+export declare type Arguments = {
+    collection: Collection;
+    data: {
+        email: string;
+        password: string;
+    };
+    req: PayloadRequest;
+    res?: Response;
+    depth?: number;
+    overrideAccess?: boolean;
+    showHiddenFields?: boolean;
+};
+declare function login<T>(incomingArgs: Arguments): Promise<Result & {
+    user: T;
+}>;
+export default login;

package/dist/auth/operations/login.js

@@ -0,0 +1,141 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+const errors_1 = require("../../errors");
+const getCookieExpiration_1 = __importDefault(require("../../utilities/getCookieExpiration"));
+const isLocked_1 = __importDefault(require("../isLocked"));
+const sanitizeInternalFields_1 = __importDefault(require("../../utilities/sanitizeInternalFields"));
+const types_1 = require("../../fields/config/types");
+const afterRead_1 = require("../../fields/hooks/afterRead");
+const unlock_1 = __importDefault(require("./unlock"));
+async function login(incomingArgs) {
+    let args = incomingArgs;
+    // /////////////////////////////////////
+    // beforeOperation - Collection
+    // /////////////////////////////////////
+    await args.collection.config.hooks.beforeOperation.reduce(async (priorHook, hook) => {
+        await priorHook;
+        args = (await hook({
+            args,
+            operation: 'login',
+        })) || args;
+    }, Promise.resolve());
+    const { collection: { Model, config: collectionConfig, }, data, req: { payload: { secret, config, }, }, req, depth, overrideAccess, showHiddenFields, } = args;
+    // /////////////////////////////////////
+    // Login
+    // /////////////////////////////////////
+    const { email: unsanitizedEmail, password } = data;
+    const email = unsanitizedEmail ? unsanitizedEmail.toLowerCase() : null;
+    // eslint-disable-next-line @typescript-eslint/ban-ts-comment
+    // @ts-ignore Improper typing in library, additional args should be optional
+    const userDoc = await Model.findByUsername(email);
+    if (!userDoc || (args.collection.config.auth.verify && userDoc._verified === false)) {
+        throw new errors_1.AuthenticationError();
+    }
+    if (userDoc && (0, isLocked_1.default)(userDoc.lockUntil)) {
+        throw new errors_1.LockedAuth();
+    }
+    const authResult = await userDoc.authenticate(password);
+    const maxLoginAttemptsEnabled = args.collection.config.auth.maxLoginAttempts > 0;
+    if (!authResult.user) {
+        if (maxLoginAttemptsEnabled)
+            await userDoc.incLoginAttempts();
+        throw new errors_1.AuthenticationError();
+    }
+    if (maxLoginAttemptsEnabled) {
+        await (0, unlock_1.default)({
+            collection: {
+                Model,
+                config: collectionConfig,
+            },
+            req,
+            data,
+            overrideAccess: true,
+        });
+    }
+    let user = userDoc.toJSON({ virtuals: true });
+    user = JSON.parse(JSON.stringify(user));
+    user = (0, sanitizeInternalFields_1.default)(user);
+    const fieldsToSign = collectionConfig.fields.reduce((signedFields, field) => {
+        const result = {
+            ...signedFields,
+        };
+        if (!(0, types_1.fieldAffectsData)(field) && (0, types_1.fieldHasSubFields)(field)) {
+            field.fields.forEach((subField) => {
+                if ((0, types_1.fieldAffectsData)(subField) && subField.saveToJWT) {
+                    result[subField.name] = user[subField.name];
+                }
+            });
+        }
+        if ((0, types_1.fieldAffectsData)(field) && field.saveToJWT) {
+            result[field.name] = user[field.name];
+        }
+        return result;
+    }, {
+        email,
+        id: user.id,
+        collection: collectionConfig.slug,
+    });
+    const token = jsonwebtoken_1.default.sign(fieldsToSign, secret, {
+        expiresIn: collectionConfig.auth.tokenExpiration,
+    });
+    if (args.res) {
+        const cookieOptions = {
+            path: '/',
+            httpOnly: true,
+            expires: (0, getCookieExpiration_1.default)(collectionConfig.auth.tokenExpiration),
+            secure: collectionConfig.auth.cookies.secure,
+            sameSite: collectionConfig.auth.cookies.sameSite,
+            domain: undefined,
+        };
+        if (collectionConfig.auth.cookies.domain)
+            cookieOptions.domain = collectionConfig.auth.cookies.domain;
+        args.res.cookie(`${config.cookiePrefix}-token`, token, cookieOptions);
+    }
+    req.user = user;
+    // /////////////////////////////////////
+    // afterLogin - Collection
+    // /////////////////////////////////////
+    await collectionConfig.hooks.afterLogin.reduce(async (priorHook, hook) => {
+        await priorHook;
+        user = await hook({
+            doc: user,
+            req: args.req,
+            token,
+        }) || user;
+    }, Promise.resolve());
+    // /////////////////////////////////////
+    // afterRead - Fields
+    // /////////////////////////////////////
+    user = await (0, afterRead_1.afterRead)({
+        depth,
+        doc: user,
+        entityConfig: collectionConfig,
+        overrideAccess,
+        req,
+        showHiddenFields,
+    });
+    // /////////////////////////////////////
+    // afterRead - Collection
+    // /////////////////////////////////////
+    await collectionConfig.hooks.afterRead.reduce(async (priorHook, hook) => {
+        await priorHook;
+        user = await hook({
+            req,
+            doc: user,
+        }) || user;
+    }, Promise.resolve());
+    // /////////////////////////////////////
+    // Return results
+    // /////////////////////////////////////
+    return {
+        token,
+        user,
+        exp: jsonwebtoken_1.default.decode(token).exp,
+    };
+}
+exports.default = login;
+//# sourceMappingURL=data:application/json;base64,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