payload 1.0.25 → 1.0.26

package/dist/auth/operations/local/login.js

@@ -1,36 +1,36 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const login_1 = __importDefault(require("../login"));
-const dataloader_1 = require("../../../collections/dataloader");
-async function localLogin(payload, options) {
-    const { collection: collectionSlug, req: incomingReq = {}, res, depth, locale, fallbackLocale, data, overrideAccess = true, showHiddenFields, } = options;
-    const collection = payload.collections[collectionSlug];
-    const req = {
-        ...incomingReq,
-        payloadAPI: 'local',
-        payload,
-        locale: undefined,
-        fallbackLocale: undefined,
-    };
-    if (!req.payloadDataLoader)
-        req.payloadDataLoader = (0, dataloader_1.getDataLoader)(req);
-    const args = {
-        depth,
-        collection,
-        overrideAccess,
-        showHiddenFields,
-        data,
-        req,
-        res,
-    };
-    if (locale)
-        args.req.locale = locale;
-    if (fallbackLocale)
-        args.req.fallbackLocale = fallbackLocale;
-    return (0, login_1.default)(args);
-}
-exports.default = localLogin;
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const login_1 = __importDefault(require("../login"));
+const dataloader_1 = require("../../../collections/dataloader");
+async function localLogin(payload, options) {
+    const { collection: collectionSlug, req: incomingReq = {}, res, depth, locale, fallbackLocale, data, overrideAccess = true, showHiddenFields, } = options;
+    const collection = payload.collections[collectionSlug];
+    const req = {
+        ...incomingReq,
+        payloadAPI: 'local',
+        payload,
+        locale: undefined,
+        fallbackLocale: undefined,
+    };
+    if (!req.payloadDataLoader)
+        req.payloadDataLoader = (0, dataloader_1.getDataLoader)(req);
+    const args = {
+        depth,
+        collection,
+        overrideAccess,
+        showHiddenFields,
+        data,
+        req,
+        res,
+    };
+    if (locale)
+        args.req.locale = locale;
+    if (fallbackLocale)
+        args.req.fallbackLocale = fallbackLocale;
+    return (0, login_1.default)(args);
+}
+exports.default = localLogin;
 //# sourceMappingURL=data:application/json;base64,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

package/dist/auth/operations/local/resetPassword.d.ts

@@ -1,14 +1,14 @@
-import { Payload } from '../../..';
-import { Result } from '../resetPassword';
-import { PayloadRequest } from '../../../express/types';
-export declare type Options = {
-    collection: string;
-    data: {
-        token: string;
-        password: string;
-    };
-    overrideAccess: boolean;
-    req?: PayloadRequest;
-};
-declare function localResetPassword(payload: Payload, options: Options): Promise<Result>;
-export default localResetPassword;
+import { Payload } from '../../..';
+import { Result } from '../resetPassword';
+import { PayloadRequest } from '../../../express/types';
+export declare type Options = {
+    collection: string;
+    data: {
+        token: string;
+        password: string;
+    };
+    overrideAccess: boolean;
+    req?: PayloadRequest;
+};
+declare function localResetPassword(payload: Payload, options: Options): Promise<Result>;
+export default localResetPassword;

package/dist/auth/operations/local/resetPassword.js

@@ -1,26 +1,26 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const resetPassword_1 = __importDefault(require("../resetPassword"));
-const dataloader_1 = require("../../../collections/dataloader");
-async function localResetPassword(payload, options) {
-    const { collection: collectionSlug, data, overrideAccess, req: incomingReq = {}, } = options;
-    const collection = payload.collections[collectionSlug];
-    const req = {
-        ...incomingReq,
-        payload,
-        payloadAPI: 'local',
-    };
-    if (!req.payloadDataLoader)
-        req.payloadDataLoader = (0, dataloader_1.getDataLoader)(req);
-    return (0, resetPassword_1.default)({
-        collection,
-        data,
-        overrideAccess,
-        req,
-    });
-}
-exports.default = localResetPassword;
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const resetPassword_1 = __importDefault(require("../resetPassword"));
+const dataloader_1 = require("../../../collections/dataloader");
+async function localResetPassword(payload, options) {
+    const { collection: collectionSlug, data, overrideAccess, req: incomingReq = {}, } = options;
+    const collection = payload.collections[collectionSlug];
+    const req = {
+        ...incomingReq,
+        payload,
+        payloadAPI: 'local',
+    };
+    if (!req.payloadDataLoader)
+        req.payloadDataLoader = (0, dataloader_1.getDataLoader)(req);
+    return (0, resetPassword_1.default)({
+        collection,
+        data,
+        overrideAccess,
+        req,
+    });
+}
+exports.default = localResetPassword;
 //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicmVzZXRQYXNzd29yZC5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uLy4uL3NyYy9hdXRoL29wZXJhdGlvbnMvbG9jYWwvcmVzZXRQYXNzd29yZC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7OztBQUNBLHFFQUF5RDtBQUV6RCxnRUFBZ0U7QUFZaEUsS0FBSyxVQUFVLGtCQUFrQixDQUFDLE9BQWdCLEVBQUUsT0FBZ0I7SUFDbEUsTUFBTSxFQUNKLFVBQVUsRUFBRSxjQUFjLEVBQzFCLElBQUksRUFDSixjQUFjLEVBQ2QsR0FBRyxFQUFFLFdBQVcsR0FBRyxFQUFFLEdBQ3RCLEdBQUcsT0FBTyxDQUFDO0lBRVosTUFBTSxVQUFVLEdBQUcsT0FBTyxDQUFDLFdBQVcsQ0FBQyxjQUFjLENBQUMsQ0FBQztJQUV2RCxNQUFNLEdBQUcsR0FBRztRQUNWLEdBQUcsV0FBVztRQUNkLE9BQU87UUFDUCxVQUFVLEVBQUUsT0FBTztLQUNGLENBQUM7SUFFcEIsSUFBSSxDQUFDLEdBQUcsQ0FBQyxpQkFBaUI7UUFBRSxHQUFHLENBQUMsaUJBQWlCLEdBQUcsSUFBQSwwQkFBYSxFQUFDLEdBQUcsQ0FBQyxDQUFDO0lBRXZFLE9BQU8sSUFBQSx1QkFBYSxFQUFDO1FBQ25CLFVBQVU7UUFDVixJQUFJO1FBQ0osY0FBYztRQUNkLEdBQUc7S0FDSixDQUFDLENBQUM7QUFDTCxDQUFDO0FBRUQsa0JBQWUsa0JBQWtCLENBQUMifQ==

package/dist/auth/operations/local/unlock.d.ts

@@ -1,12 +1,12 @@
-import { PayloadRequest } from '../../../express/types';
-import { Payload } from '../../..';
-export declare type Options = {
-    collection: string;
-    data: {
-        email: any;
-    };
-    req?: PayloadRequest;
-    overrideAccess: boolean;
-};
-declare function localUnlock(payload: Payload, options: Options): Promise<boolean>;
-export default localUnlock;
+import { PayloadRequest } from '../../../express/types';
+import { Payload } from '../../..';
+export declare type Options = {
+    collection: string;
+    data: {
+        email: any;
+    };
+    req?: PayloadRequest;
+    overrideAccess: boolean;
+};
+declare function localUnlock(payload: Payload, options: Options): Promise<boolean>;
+export default localUnlock;

package/dist/auth/operations/local/unlock.js

@@ -1,26 +1,26 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const unlock_1 = __importDefault(require("../unlock"));
-const dataloader_1 = require("../../../collections/dataloader");
-async function localUnlock(payload, options) {
-    const { collection: collectionSlug, data, overrideAccess = true, req: incomingReq = {}, } = options;
-    const collection = payload.collections[collectionSlug];
-    const req = {
-        ...incomingReq,
-        payload,
-        payloadAPI: 'local',
-    };
-    if (!req.payloadDataLoader)
-        req.payloadDataLoader = (0, dataloader_1.getDataLoader)(req);
-    return (0, unlock_1.default)({
-        data,
-        collection,
-        overrideAccess,
-        req,
-    });
-}
-exports.default = localUnlock;
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const unlock_1 = __importDefault(require("../unlock"));
+const dataloader_1 = require("../../../collections/dataloader");
+async function localUnlock(payload, options) {
+    const { collection: collectionSlug, data, overrideAccess = true, req: incomingReq = {}, } = options;
+    const collection = payload.collections[collectionSlug];
+    const req = {
+        ...incomingReq,
+        payload,
+        payloadAPI: 'local',
+    };
+    if (!req.payloadDataLoader)
+        req.payloadDataLoader = (0, dataloader_1.getDataLoader)(req);
+    return (0, unlock_1.default)({
+        data,
+        collection,
+        overrideAccess,
+        req,
+    });
+}
+exports.default = localUnlock;
 //# sourceMappingURL=data:application/json;base64,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

package/dist/auth/operations/local/verifyEmail.d.ts

@@ -1,7 +1,7 @@
-import { Payload } from '../../../index';
-export declare type Options = {
-    token: string;
-    collection: string;
-};
-declare function localVerifyEmail(payload: Payload, options: Options): Promise<boolean>;
-export default localVerifyEmail;
+import { Payload } from '../../../index';
+export declare type Options = {
+    token: string;
+    collection: string;
+};
+declare function localVerifyEmail(payload: Payload, options: Options): Promise<boolean>;
+export default localVerifyEmail;

package/dist/auth/operations/local/verifyEmail.js

@@ -1,16 +1,16 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const verifyEmail_1 = __importDefault(require("../verifyEmail"));
-async function localVerifyEmail(payload, options) {
-    const { collection: collectionSlug, token, } = options;
-    const collection = payload.collections[collectionSlug];
-    return (0, verifyEmail_1.default)({
-        token,
-        collection,
-    });
-}
-exports.default = localVerifyEmail;
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const verifyEmail_1 = __importDefault(require("../verifyEmail"));
+async function localVerifyEmail(payload, options) {
+    const { collection: collectionSlug, token, } = options;
+    const collection = payload.collections[collectionSlug];
+    return (0, verifyEmail_1.default)({
+        token,
+        collection,
+    });
+}
+exports.default = localVerifyEmail;
 //# sourceMappingURL=data:application/json;base64,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

package/dist/auth/operations/login.d.ts

@@ -1,25 +1,25 @@
-import { Response } from 'express';
-import { PayloadRequest } from '../../express/types';
-import { User } from '../types';
-import { Collection } from '../../collections/config/types';
-export declare type Result = {
-    user?: User;
-    token?: string;
-    exp?: number;
-};
-export declare type Arguments = {
-    collection: Collection;
-    data: {
-        email: string;
-        password: string;
-    };
-    req: PayloadRequest;
-    res?: Response;
-    depth?: number;
-    overrideAccess?: boolean;
-    showHiddenFields?: boolean;
-};
-declare function login<T>(incomingArgs: Arguments): Promise<Result & {
-    user: T;
-}>;
-export default login;
+import { Response } from 'express';
+import { PayloadRequest } from '../../express/types';
+import { User } from '../types';
+import { Collection } from '../../collections/config/types';
+export declare type Result = {
+    user?: User;
+    token?: string;
+    exp?: number;
+};
+export declare type Arguments = {
+    collection: Collection;
+    data: {
+        email: string;
+        password: string;
+    };
+    req: PayloadRequest;
+    res?: Response;
+    depth?: number;
+    overrideAccess?: boolean;
+    showHiddenFields?: boolean;
+};
+declare function login<T>(incomingArgs: Arguments): Promise<Result & {
+    user: T;
+}>;
+export default login;

package/dist/auth/operations/login.js

@@ -1,141 +1,141 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
-const errors_1 = require("../../errors");
-const getCookieExpiration_1 = __importDefault(require("../../utilities/getCookieExpiration"));
-const isLocked_1 = __importDefault(require("../isLocked"));
-const sanitizeInternalFields_1 = __importDefault(require("../../utilities/sanitizeInternalFields"));
-const types_1 = require("../../fields/config/types");
-const afterRead_1 = require("../../fields/hooks/afterRead");
-const unlock_1 = __importDefault(require("./unlock"));
-async function login(incomingArgs) {
-    let args = incomingArgs;
-    // /////////////////////////////////////
-    // beforeOperation - Collection
-    // /////////////////////////////////////
-    await args.collection.config.hooks.beforeOperation.reduce(async (priorHook, hook) => {
-        await priorHook;
-        args = (await hook({
-            args,
-            operation: 'login',
-        })) || args;
-    }, Promise.resolve());
-    const { collection: { Model, config: collectionConfig, }, data, req: { payload: { secret, config, }, }, req, depth, overrideAccess, showHiddenFields, } = args;
-    // /////////////////////////////////////
-    // Login
-    // /////////////////////////////////////
-    const { email: unsanitizedEmail, password } = data;
-    const email = unsanitizedEmail ? unsanitizedEmail.toLowerCase().trim() : null;
-    // eslint-disable-next-line @typescript-eslint/ban-ts-comment
-    // @ts-ignore Improper typing in library, additional args should be optional
-    const userDoc = await Model.findByUsername(email);
-    if (!userDoc || (args.collection.config.auth.verify && userDoc._verified === false)) {
-        throw new errors_1.AuthenticationError();
-    }
-    if (userDoc && (0, isLocked_1.default)(userDoc.lockUntil)) {
-        throw new errors_1.LockedAuth();
-    }
-    const authResult = await userDoc.authenticate(password);
-    const maxLoginAttemptsEnabled = args.collection.config.auth.maxLoginAttempts > 0;
-    if (!authResult.user) {
-        if (maxLoginAttemptsEnabled)
-            await userDoc.incLoginAttempts();
-        throw new errors_1.AuthenticationError();
-    }
-    if (maxLoginAttemptsEnabled) {
-        await (0, unlock_1.default)({
-            collection: {
-                Model,
-                config: collectionConfig,
-            },
-            req,
-            data,
-            overrideAccess: true,
-        });
-    }
-    let user = userDoc.toJSON({ virtuals: true });
-    user = JSON.parse(JSON.stringify(user));
-    user = (0, sanitizeInternalFields_1.default)(user);
-    const fieldsToSign = collectionConfig.fields.reduce((signedFields, field) => {
-        const result = {
-            ...signedFields,
-        };
-        if (!(0, types_1.fieldAffectsData)(field) && (0, types_1.fieldHasSubFields)(field)) {
-            field.fields.forEach((subField) => {
-                if ((0, types_1.fieldAffectsData)(subField) && subField.saveToJWT) {
-                    result[subField.name] = user[subField.name];
-                }
-            });
-        }
-        if ((0, types_1.fieldAffectsData)(field) && field.saveToJWT) {
-            result[field.name] = user[field.name];
-        }
-        return result;
-    }, {
-        email,
-        id: user.id,
-        collection: collectionConfig.slug,
-    });
-    const token = jsonwebtoken_1.default.sign(fieldsToSign, secret, {
-        expiresIn: collectionConfig.auth.tokenExpiration,
-    });
-    if (args.res) {
-        const cookieOptions = {
-            path: '/',
-            httpOnly: true,
-            expires: (0, getCookieExpiration_1.default)(collectionConfig.auth.tokenExpiration),
-            secure: collectionConfig.auth.cookies.secure,
-            sameSite: collectionConfig.auth.cookies.sameSite,
-            domain: undefined,
-        };
-        if (collectionConfig.auth.cookies.domain)
-            cookieOptions.domain = collectionConfig.auth.cookies.domain;
-        args.res.cookie(`${config.cookiePrefix}-token`, token, cookieOptions);
-    }
-    req.user = user;
-    // /////////////////////////////////////
-    // afterLogin - Collection
-    // /////////////////////////////////////
-    await collectionConfig.hooks.afterLogin.reduce(async (priorHook, hook) => {
-        await priorHook;
-        user = await hook({
-            doc: user,
-            req: args.req,
-            token,
-        }) || user;
-    }, Promise.resolve());
-    // /////////////////////////////////////
-    // afterRead - Fields
-    // /////////////////////////////////////
-    user = await (0, afterRead_1.afterRead)({
-        depth,
-        doc: user,
-        entityConfig: collectionConfig,
-        overrideAccess,
-        req,
-        showHiddenFields,
-    });
-    // /////////////////////////////////////
-    // afterRead - Collection
-    // /////////////////////////////////////
-    await collectionConfig.hooks.afterRead.reduce(async (priorHook, hook) => {
-        await priorHook;
-        user = await hook({
-            req,
-            doc: user,
-        }) || user;
-    }, Promise.resolve());
-    // /////////////////////////////////////
-    // Return results
-    // /////////////////////////////////////
-    return {
-        token,
-        user,
-        exp: jsonwebtoken_1.default.decode(token).exp,
-    };
-}
-exports.default = login;
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+const errors_1 = require("../../errors");
+const getCookieExpiration_1 = __importDefault(require("../../utilities/getCookieExpiration"));
+const isLocked_1 = __importDefault(require("../isLocked"));
+const sanitizeInternalFields_1 = __importDefault(require("../../utilities/sanitizeInternalFields"));
+const types_1 = require("../../fields/config/types");
+const afterRead_1 = require("../../fields/hooks/afterRead");
+const unlock_1 = __importDefault(require("./unlock"));
+async function login(incomingArgs) {
+    let args = incomingArgs;
+    // /////////////////////////////////////
+    // beforeOperation - Collection
+    // /////////////////////////////////////
+    await args.collection.config.hooks.beforeOperation.reduce(async (priorHook, hook) => {
+        await priorHook;
+        args = (await hook({
+            args,
+            operation: 'login',
+        })) || args;
+    }, Promise.resolve());
+    const { collection: { Model, config: collectionConfig, }, data, req: { payload: { secret, config, }, }, req, depth, overrideAccess, showHiddenFields, } = args;
+    // /////////////////////////////////////
+    // Login
+    // /////////////////////////////////////
+    const { email: unsanitizedEmail, password } = data;
+    const email = unsanitizedEmail ? unsanitizedEmail.toLowerCase().trim() : null;
+    // eslint-disable-next-line @typescript-eslint/ban-ts-comment
+    // @ts-ignore Improper typing in library, additional args should be optional
+    const userDoc = await Model.findByUsername(email);
+    if (!userDoc || (args.collection.config.auth.verify && userDoc._verified === false)) {
+        throw new errors_1.AuthenticationError();
+    }
+    if (userDoc && (0, isLocked_1.default)(userDoc.lockUntil)) {
+        throw new errors_1.LockedAuth();
+    }
+    const authResult = await userDoc.authenticate(password);
+    const maxLoginAttemptsEnabled = args.collection.config.auth.maxLoginAttempts > 0;
+    if (!authResult.user) {
+        if (maxLoginAttemptsEnabled)
+            await userDoc.incLoginAttempts();
+        throw new errors_1.AuthenticationError();
+    }
+    if (maxLoginAttemptsEnabled) {
+        await (0, unlock_1.default)({
+            collection: {
+                Model,
+                config: collectionConfig,
+            },
+            req,
+            data,
+            overrideAccess: true,
+        });
+    }
+    let user = userDoc.toJSON({ virtuals: true });
+    user = JSON.parse(JSON.stringify(user));
+    user = (0, sanitizeInternalFields_1.default)(user);
+    const fieldsToSign = collectionConfig.fields.reduce((signedFields, field) => {
+        const result = {
+            ...signedFields,
+        };
+        if (!(0, types_1.fieldAffectsData)(field) && (0, types_1.fieldHasSubFields)(field)) {
+            field.fields.forEach((subField) => {
+                if ((0, types_1.fieldAffectsData)(subField) && subField.saveToJWT) {
+                    result[subField.name] = user[subField.name];
+                }
+            });
+        }
+        if ((0, types_1.fieldAffectsData)(field) && field.saveToJWT) {
+            result[field.name] = user[field.name];
+        }
+        return result;
+    }, {
+        email,
+        id: user.id,
+        collection: collectionConfig.slug,
+    });
+    const token = jsonwebtoken_1.default.sign(fieldsToSign, secret, {
+        expiresIn: collectionConfig.auth.tokenExpiration,
+    });
+    if (args.res) {
+        const cookieOptions = {
+            path: '/',
+            httpOnly: true,
+            expires: (0, getCookieExpiration_1.default)(collectionConfig.auth.tokenExpiration),
+            secure: collectionConfig.auth.cookies.secure,
+            sameSite: collectionConfig.auth.cookies.sameSite,
+            domain: undefined,
+        };
+        if (collectionConfig.auth.cookies.domain)
+            cookieOptions.domain = collectionConfig.auth.cookies.domain;
+        args.res.cookie(`${config.cookiePrefix}-token`, token, cookieOptions);
+    }
+    req.user = user;
+    // /////////////////////////////////////
+    // afterLogin - Collection
+    // /////////////////////////////////////
+    await collectionConfig.hooks.afterLogin.reduce(async (priorHook, hook) => {
+        await priorHook;
+        user = await hook({
+            doc: user,
+            req: args.req,
+            token,
+        }) || user;
+    }, Promise.resolve());
+    // /////////////////////////////////////
+    // afterRead - Fields
+    // /////////////////////////////////////
+    user = await (0, afterRead_1.afterRead)({
+        depth,
+        doc: user,
+        entityConfig: collectionConfig,
+        overrideAccess,
+        req,
+        showHiddenFields,
+    });
+    // /////////////////////////////////////
+    // afterRead - Collection
+    // /////////////////////////////////////
+    await collectionConfig.hooks.afterRead.reduce(async (priorHook, hook) => {
+        await priorHook;
+        user = await hook({
+            req,
+            doc: user,
+        }) || user;
+    }, Promise.resolve());
+    // /////////////////////////////////////
+    // Return results
+    // /////////////////////////////////////
+    return {
+        token,
+        user,
+        exp: jsonwebtoken_1.default.decode(token).exp,
+    };
+}
+exports.default = login;
 //# sourceMappingURL=data:application/json;base64,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