payload 0.20.10-beta.0 → 1.0.6

package/dist/init.js

@@ -0,0 +1,115 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.initSync = exports.initAsync = exports.init = void 0;
+/* eslint-disable no-param-reassign */
+const express_1 = __importDefault(require("express"));
+const crypto_1 = __importDefault(require("crypto"));
+const authenticate_1 = __importDefault(require("./express/middleware/authenticate"));
+const connect_1 = __importDefault(require("./mongoose/connect"));
+const middleware_1 = __importDefault(require("./express/middleware"));
+const admin_1 = __importDefault(require("./express/admin"));
+const init_1 = __importDefault(require("./auth/init"));
+const access_1 = __importDefault(require("./auth/requestHandlers/access"));
+const init_2 = __importDefault(require("./collections/init"));
+const init_3 = __importDefault(require("./preferences/init"));
+const init_4 = __importDefault(require("./globals/init"));
+const initPlayground_1 = __importDefault(require("./graphql/initPlayground"));
+const static_1 = __importDefault(require("./express/static"));
+const registerSchema_1 = __importDefault(require("./graphql/registerSchema"));
+const graphQLHandler_1 = __importDefault(require("./graphql/graphQLHandler"));
+const build_1 = __importDefault(require("./email/build"));
+const identifyAPI_1 = __importDefault(require("./express/middleware/identifyAPI"));
+const errorHandler_1 = __importDefault(require("./express/middleware/errorHandler"));
+const sendEmail_1 = __importDefault(require("./email/sendEmail"));
+const serverInit_1 = require("./utilities/telemetry/events/serverInit");
+const load_1 = __importDefault(require("./config/load"));
+const logger_1 = __importDefault(require("./utilities/logger"));
+const init = (payload, options) => {
+    payload.logger.info('Starting Payload...');
+    if (!options.secret) {
+        throw new Error('Error: missing secret key. A secret key is needed to secure Payload.');
+    }
+    if (options.mongoURL !== false && typeof options.mongoURL !== 'string') {
+        throw new Error('Error: missing MongoDB connection URL.');
+    }
+    payload.emailOptions = { ...(options.email) };
+    payload.secret = crypto_1.default
+        .createHash('sha256')
+        .update(options.secret)
+        .digest('hex')
+        .slice(0, 32);
+    payload.local = options.local;
+    payload.config = (0, load_1.default)(payload.logger);
+    // If not initializing locally, scaffold router
+    if (!payload.local) {
+        payload.router = express_1.default.Router();
+        payload.router.use(...(0, middleware_1.default)(payload));
+        (0, init_1.default)(payload);
+    }
+    // Configure email service
+    payload.email = (0, build_1.default)(payload.emailOptions, payload.logger);
+    payload.sendEmail = sendEmail_1.default.bind(payload);
+    // Initialize collections & globals
+    (0, init_2.default)(payload);
+    (0, init_4.default)(payload);
+    if (!payload.config.graphQL.disable) {
+        (0, registerSchema_1.default)(payload);
+    }
+    // If not initializing locally, set up HTTP routing
+    if (!payload.local) {
+        options.express.use((req, res, next) => {
+            req.payload = payload;
+            next();
+        });
+        payload.express = options.express;
+        if (payload.config.rateLimit.trustProxy) {
+            payload.express.set('trust proxy', 1);
+        }
+        (0, admin_1.default)(payload);
+        (0, init_3.default)(payload);
+        payload.router.get('/access', access_1.default);
+        if (!payload.config.graphQL.disable) {
+            payload.router.use(payload.config.routes.graphQL, (0, identifyAPI_1.default)('GraphQL'), (req, res) => (0, graphQLHandler_1.default)(req, res)(req, res));
+            (0, initPlayground_1.default)(payload);
+        }
+        // Bind router to API
+        payload.express.use(payload.config.routes.api, payload.router);
+        // Enable static routes for all collections permitting upload
+        (0, static_1.default)(payload);
+        payload.errorHandler = (0, errorHandler_1.default)(payload.config, payload.logger);
+        payload.router.use(payload.errorHandler);
+        payload.authenticate = (0, authenticate_1.default)(payload.config);
+    }
+    (0, serverInit_1.serverInit)(payload);
+};
+exports.init = init;
+const initAsync = async (payload, options) => {
+    payload.logger = (0, logger_1.default)('payload', options.loggerOptions);
+    payload.mongoURL = options.mongoURL;
+    if (payload.mongoURL) {
+        payload.mongoMemoryServer = await (0, connect_1.default)(payload.mongoURL, options.mongoOptions, payload.logger);
+    }
+    (0, exports.init)(payload, options);
+    if (typeof options.onInit === 'function')
+        await options.onInit(payload);
+    if (typeof payload.config.onInit === 'function')
+        await payload.config.onInit(payload);
+};
+exports.initAsync = initAsync;
+const initSync = (payload, options) => {
+    payload.logger = (0, logger_1.default)('payload', options.loggerOptions);
+    payload.mongoURL = options.mongoURL;
+    if (payload.mongoURL) {
+        (0, connect_1.default)(payload.mongoURL, options.mongoOptions, payload.logger);
+    }
+    (0, exports.init)(payload, options);
+    if (typeof options.onInit === 'function')
+        options.onInit(payload);
+    if (typeof payload.config.onInit === 'function')
+        payload.config.onInit(payload);
+};
+exports.initSync = initSync;
+//# sourceMappingURL=data:application/json;base64,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

package/docs/admin/overview.mdx

@@ -66,6 +66,10 @@ For example, you may wish to have two Collections that both support `Authenticat
 
 This is totally possible. For the above scenario, by specifying `admin: { user: 'admins' }`, your Payload Admin panel will use `admins`. Any users logged in as `customers` will not be able to log in via the Admin panel.
 
+### Light and dark modes
+
+Users in the admin panel have access to choosing between light mode and dark mode for their editing experience. The setting is managed while logged into the admin UI within the user account page and will be stored with the browser. By default, the operating system preference is detected and used.
+
 ### Restricting user access
 
 If you would like to restrict which users from a single Collection can access the Admin panel, you can use the `admin` access control function. [Click here](/docs/access-control/overview#admin) to learn more.

package/docs/authentication/config.mdx

@@ -12,16 +12,18 @@ To enable Authentication on a collection, define an `auth` property and set it t
 
 ## Options
 
-| Option                 | Description  |
-| ---------------------- | -------------|
-| **`useAPIKey`**        | Payload Authentication provides for API keys to be set on each user within an Authentication-enabled Collection. [More](/docs/authentication/config#api-keys) |
-| **`tokenExpiration`**  | How long (in seconds) to keep the user logged in. JWTs and HTTP-only cookies will both expire at the same time. |
-| **`maxLoginAttempts`** | Only allow a user to attempt logging in X amount of times. Automatically locks out a user from authenticating if this limit is passed. Set to `0` to disable. |
-| **`lockTime`**         | Set the time that a user should be locked out if they fail authentication more times than `maxLoginAttempts` allows for. |
-| **`depth`**            | How many levels deep a `user` document should be populated when creating the JWT and binding the `user` to the express `req`. Defaults to `0` and should only be modified if absolutely necessary, as this will affect performance. |
-| **`cookies`**          | Set cookie options, including `secure`, `sameSite`, and `domain`. For advanced users. |
-| **`forgotPassword`**   | Customize the way that the `forgotPassword` operation functions. [More](/docs/authentication/config#forgot-password) |
-| **`verify`**           | Set to `true` or pass an object with verification options to require users to verify by email before they are allowed to log into your app. [More](/docs/authentication/config#email-verification) |
+| Option                     | Description                                                                                                                                                                                                                         |
+| -------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| **`useAPIKey`**            | Payload Authentication provides for API keys to be set on each user within an Authentication-enabled Collection. [More](/docs/authentication/config#api-keys)                                                                       |
+| **`tokenExpiration`**      | How long (in seconds) to keep the user logged in. JWTs and HTTP-only cookies will both expire at the same time.                                                                                                                     |
+| **`maxLoginAttempts`**     | Only allow a user to attempt logging in X amount of times. Automatically locks out a user from authenticating if this limit is passed. Set to `0` to disable.                                                                       |
+| **`lockTime`**             | Set the time that a user should be locked out if they fail authentication more times than `maxLoginAttempts` allows for.                                                                                                            |
+| **`depth`**                | How many levels deep a `user` document should be populated when creating the JWT and binding the `user` to the express `req`. Defaults to `0` and should only be modified if absolutely necessary, as this will affect performance. |
+| **`cookies`**              | Set cookie options, including `secure`, `sameSite`, and `domain`. For advanced users.                                                                                                                                               |
+| **`forgotPassword`**       | Customize the way that the `forgotPassword` operation functions. [More](/docs/authentication/config#forgot-password)                                                                                                                |
+| **`verify`**               | Set to `true` or pass an object with verification options to require users to verify by email before they are allowed to log into your app. [More](/docs/authentication/config#email-verification)                                  |
+| **`disableLocalStrategy`** | Advanced - disable Payload's built-in local auth strategy. Only use this property if you have replaced Payload's auth mechanisms with your own.                                                                                     |
+| **`strategies`**           | Advanced - an array of PassportJS authentication strategies to extend this collection's authentication with. [More](/docs/authentication/config#strategies)                                                                         |
 
 ### API keys
 
@@ -37,7 +39,8 @@ Technically, both of these options will work for third-party integrations but th
 To enable API keys on a collection, set the `useAPIKey` auth option to `true`. From there, a new interface will appear in the Admin panel for each document within the collection that allows you to generate an API key for each user in the Collection.
 
 <Banner type="success">
-  User API keys are encrypted within the database, meaning that if your database is compromised, your API keys will not be.
+  User API keys are encrypted within the database, meaning that if your database
+  is compromised, your API keys will not be.
 </Banner>
 
 ##### Authenticating via API Key
@@ -45,8 +48,9 @@ To enable API keys on a collection, set the `useAPIKey` auth option to `true`. F
 To utilize your API key while interacting with the REST or GraphQL API, add the `Authorization` header.
 
 **For example, using Fetch:**
+
 ```js
-const response = await fetch('http://localhost:3000/api/pages', {
+const response = await fetch("http://localhost:3000/api/pages", {
   headers: {
     Authorization: `${collection.labels.singular} API-Key ${YOUR_API_KEY}`,
   },
@@ -62,8 +66,13 @@ You can customize how the Forgot Password workflow operates with the following o
 Function that accepts one argument, containing `{ req, token, user }`, that allows for overriding the HTML within emails that are sent to users attempting to reset their password. The function should return a string that supports HTML, which can be a full HTML email.
 
 <Banner type="success">
-  <strong>Tip:</strong><br />
-  HTML templating can be used to create custom email templates, inline CSS automatically, and more. You can make a reusable function that standardizes all email sent from Payload, which makes sending custom emails more DRY. Payload doesn't ship with an HTML templating engine, so you are free to choose your own.
+  <strong>Tip:</strong>
+  <br />
+  HTML templating can be used to create custom email templates, inline CSS
+  automatically, and more. You can make a reusable function that standardizes
+  all email sent from Payload, which makes sending custom emails more DRY.
+  Payload doesn't ship with an HTML templating engine, so you are free to choose
+  your own.
 </Banner>
 
 Example:
@@ -99,8 +108,13 @@ Example:
 ```
 
 <Banner type="warning">
-  <strong>Important:</strong><br />
-  If you specify a different URL to send your users to for resetting their password, such as a page on the frontend of your app or similar, you need to handle making the call to the Payload REST or GraphQL reset-password operation yourself on your frontend, using the token that was provided for you. Above, it was passed via query parameter.
+  <strong>Important:</strong>
+  <br />
+  If you specify a different URL to send your users to for resetting their
+  password, such as a page on the frontend of your app or similar, you need to
+  handle making the call to the Payload REST or GraphQL reset-password operation
+  yourself on your frontend, using the token that was provided for you. Above,
+  it was passed via query parameter.
 </Banner>
 
 **`generateEmailSubject`**
@@ -153,8 +167,13 @@ Example:
 ```
 
 <Banner type="warning">
-  <strong>Important:</strong><br />
-  If you specify a different URL to send your users to for email verification, such as a page on the frontend of your app or similar, you need to handle making the call to the Payload REST or GraphQL verification operation yourself on your frontend, using the token that was provided for you. Above, it was passed via query parameter.
+  <strong>Important:</strong>
+  <br />
+  If you specify a different URL to send your users to for email verification,
+  such as a page on the frontend of your app or similar, you need to handle
+  making the call to the Payload REST or GraphQL verification operation yourself
+  on your frontend, using the token that was provided for you. Above, it was
+  passed via query parameter.
 </Banner>
 
 **`generateEmailSubject`**
@@ -177,3 +196,15 @@ Example:
   }
 }
 ```
+
+### Strategies
+
+As of Payload `1.0.0`, you can add additional authentication strategies to Payload easily by passing them to your collection's `auth.strategies` array.
+
+Behind the scenes, Payload uses PassportJS to power its local authentication strategy, so most strategies listed on the PassportJS website will work seamlessly. Combined with adding custom components to the admin panel's `Login` view, you can create advanced authentication strategies directly within Payload.
+
+<Banner type="warning">
+  This is an advanced feature, so only attempt this if you are an experienced
+  developer. Otherwise, just let Payload's built-in authentication handle user
+  auth for you.
+</Banner>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "payload",
-  "version": "0.20.10-beta.0",
+  "version": "1.0.6",
   "description": "Node, React and MongoDB Headless CMS and Application Framework",
   "license": "MIT",
   "author": {
@@ -32,20 +32,15 @@
     "build:components": "webpack --config dist/webpack/components.config.js",
     "build": "yarn copyfiles && yarn build:tsc && yarn build:components",
     "build:watch": "nodemon --watch 'src/**' --ext 'ts,tsx' --exec 'yarn build:tsc'",
-    "demo:build:analyze": "cross-env PAYLOAD_CONFIG_PATH=demo/payload.config.ts PAYLOAD_ANALYZE_BUNDLE=true node dist/bin/build",
-    "demo:build": "cross-env PAYLOAD_CONFIG_PATH=demo/payload.config.ts node dist/bin/build",
-    "demo:generate:types": "cross-env PAYLOAD_CONFIG_PATH=demo/payload.config.ts node dist/bin/generateTypes",
-    "demo:generate:graphqlschema": "cross-env PAYLOAD_CONFIG_PATH=demo/payload.config.ts node dist/bin/generateGraphQLSchema",
-    "demo:serve": "cross-env PAYLOAD_CONFIG_PATH=demo/payload.config.ts NODE_ENV=production nodemon",
     "dev": "nodemon",
-    "dev:generatetypes": "node ./test/generateTypes.js",
+    "dev:generate-types": "node ./test/generateTypes.js",
     "pretest": "yarn build",
     "test": "yarn test:int && yarn test:components",
-    "test:int": "cross-env NODE_ENV=test DISABLE_LOGGING=true jest --forceExit --detectOpenHandles",
-    "test:e2e": "cross-env NODE_ENV=test DISABLE_LOGGING=true playwright test",
-    "test:e2e:headed": "cross-env NODE_ENV=test DISABLE_LOGGING=true playwright test --headed",
-    "test:e2e:debug": "cross-env PWDEBUG=1 NODE_ENV=test DISABLE_LOGGING=true playwright test",
-    "test:components": "cross-env PAYLOAD_CONFIG_PATH=demo/payload.config.ts NODE_ENV=test jest --config=jest.components.config.js",
+    "test:int": "cross-env DISABLE_LOGGING=true jest --forceExit --detectOpenHandles",
+    "test:e2e": "cross-env DISABLE_LOGGING=true playwright test",
+    "test:e2e:headed": "cross-env DISABLE_LOGGING=true playwright test --headed",
+    "test:e2e:debug": "cross-env PWDEBUG=1 DISABLE_LOGGING=true playwright test",
+    "test:components": "cross-env jest --config=jest.components.config.js",
     "clean": "rimraf dist",
     "release": "release-it",
     "release:patch": "release-it patch",

package/dist/collections/graphql/resolvers/resolvers.spec.d.ts

@@ -1 +0,0 @@
-export {};