payload 1.10.4 → 1.11.0

package/dist/auth/operations/login.js

@@ -1,154 +1,154 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
-const errors_1 = require("../../errors");
-const getCookieExpiration_1 = __importDefault(require("../../utilities/getCookieExpiration"));
-const isLocked_1 = __importDefault(require("../isLocked"));
-const sanitizeInternalFields_1 = __importDefault(require("../../utilities/sanitizeInternalFields"));
-const types_1 = require("../../fields/config/types");
-const afterRead_1 = require("../../fields/hooks/afterRead");
-const unlock_1 = __importDefault(require("./unlock"));
-const incrementLoginAttempts_1 = require("../strategies/local/incrementLoginAttempts");
-const authenticate_1 = require("../strategies/local/authenticate");
-async function login(incomingArgs) {
-    let args = incomingArgs;
-    // /////////////////////////////////////
-    // beforeOperation - Collection
-    // /////////////////////////////////////
-    await args.collection.config.hooks.beforeOperation.reduce(async (priorHook, hook) => {
-        await priorHook;
-        args = (await hook({
-            args,
-            operation: 'login',
-        })) || args;
-    }, Promise.resolve());
-    const { collection: { Model, config: collectionConfig, }, data, req: { payload: { secret, config, }, }, req, depth, overrideAccess, showHiddenFields, } = args;
-    // /////////////////////////////////////
-    // Login
-    // /////////////////////////////////////
-    const { email: unsanitizedEmail, password } = data;
-    const email = unsanitizedEmail ? unsanitizedEmail.toLowerCase().trim() : null;
-    // eslint-disable-next-line @typescript-eslint/ban-ts-comment
-    // @ts-ignore Improper typing in library, additional args should be optional
-    const userDoc = await Model.findOne({ email }).lean();
-    let user = JSON.parse(JSON.stringify(userDoc));
-    if (!userDoc || (args.collection.config.auth.verify && userDoc._verified === false)) {
-        throw new errors_1.AuthenticationError(req.t);
-    }
-    if (userDoc && (0, isLocked_1.default)(userDoc.lockUntil)) {
-        throw new errors_1.LockedAuth(req.t);
-    }
-    const authResult = await (0, authenticate_1.authenticateLocalStrategy)({ password, doc: user });
-    user = (0, sanitizeInternalFields_1.default)(user);
-    const maxLoginAttemptsEnabled = args.collection.config.auth.maxLoginAttempts > 0;
-    if (!authResult) {
-        if (maxLoginAttemptsEnabled) {
-            await (0, incrementLoginAttempts_1.incrementLoginAttempts)({
-                payload: req.payload,
-                doc: user,
-                collection: collectionConfig,
-            });
-        }
-        throw new errors_1.AuthenticationError(req.t);
-    }
-    if (maxLoginAttemptsEnabled) {
-        await (0, unlock_1.default)({
-            collection: {
-                Model,
-                config: collectionConfig,
-            },
-            req,
-            data,
-            overrideAccess: true,
-        });
-    }
-    const fieldsToSign = collectionConfig.fields.reduce((signedFields, field) => {
-        const result = {
-            ...signedFields,
-        };
-        if (!(0, types_1.fieldAffectsData)(field) && (0, types_1.fieldHasSubFields)(field)) {
-            field.fields.forEach((subField) => {
-                if ((0, types_1.fieldAffectsData)(subField) && subField.saveToJWT) {
-                    result[subField.name] = user[subField.name];
-                }
-            });
-        }
-        if ((0, types_1.fieldAffectsData)(field) && field.saveToJWT) {
-            result[field.name] = user[field.name];
-        }
-        return result;
-    }, {
-        email,
-        id: user.id,
-        collection: collectionConfig.slug,
-    });
-    await collectionConfig.hooks.beforeLogin.reduce(async (priorHook, hook) => {
-        await priorHook;
-        user = (await hook({
-            user,
-            req: args.req,
-        })) || user;
-    }, Promise.resolve());
-    const token = jsonwebtoken_1.default.sign(fieldsToSign, secret, {
-        expiresIn: collectionConfig.auth.tokenExpiration,
-    });
-    if (args.res) {
-        const cookieOptions = {
-            path: '/',
-            httpOnly: true,
-            expires: (0, getCookieExpiration_1.default)(collectionConfig.auth.tokenExpiration),
-            secure: collectionConfig.auth.cookies.secure,
-            sameSite: collectionConfig.auth.cookies.sameSite,
-            domain: undefined,
-        };
-        if (collectionConfig.auth.cookies.domain)
-            cookieOptions.domain = collectionConfig.auth.cookies.domain;
-        args.res.cookie(`${config.cookiePrefix}-token`, token, cookieOptions);
-    }
-    req.user = user;
-    // /////////////////////////////////////
-    // afterLogin - Collection
-    // /////////////////////////////////////
-    await collectionConfig.hooks.afterLogin.reduce(async (priorHook, hook) => {
-        await priorHook;
-        user = await hook({
-            user,
-            req: args.req,
-            token,
-        }) || user;
-    }, Promise.resolve());
-    // /////////////////////////////////////
-    // afterRead - Fields
-    // /////////////////////////////////////
-    user = await (0, afterRead_1.afterRead)({
-        depth,
-        doc: user,
-        entityConfig: collectionConfig,
-        overrideAccess,
-        req,
-        showHiddenFields,
-    });
-    // /////////////////////////////////////
-    // afterRead - Collection
-    // /////////////////////////////////////
-    await collectionConfig.hooks.afterRead.reduce(async (priorHook, hook) => {
-        await priorHook;
-        user = await hook({
-            req,
-            doc: user,
-        }) || user;
-    }, Promise.resolve());
-    // /////////////////////////////////////
-    // Return results
-    // /////////////////////////////////////
-    return {
-        token,
-        user,
-        exp: jsonwebtoken_1.default.decode(token).exp,
-    };
-}
-exports.default = login;
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+const errors_1 = require("../../errors");
+const getCookieExpiration_1 = __importDefault(require("../../utilities/getCookieExpiration"));
+const isLocked_1 = __importDefault(require("../isLocked"));
+const sanitizeInternalFields_1 = __importDefault(require("../../utilities/sanitizeInternalFields"));
+const types_1 = require("../../fields/config/types");
+const afterRead_1 = require("../../fields/hooks/afterRead");
+const unlock_1 = __importDefault(require("./unlock"));
+const incrementLoginAttempts_1 = require("../strategies/local/incrementLoginAttempts");
+const authenticate_1 = require("../strategies/local/authenticate");
+async function login(incomingArgs) {
+    let args = incomingArgs;
+    // /////////////////////////////////////
+    // beforeOperation - Collection
+    // /////////////////////////////////////
+    await args.collection.config.hooks.beforeOperation.reduce(async (priorHook, hook) => {
+        await priorHook;
+        args = (await hook({
+            args,
+            operation: 'login',
+        })) || args;
+    }, Promise.resolve());
+    const { collection: { Model, config: collectionConfig, }, data, req: { payload: { secret, config, }, }, req, depth, overrideAccess, showHiddenFields, } = args;
+    // /////////////////////////////////////
+    // Login
+    // /////////////////////////////////////
+    const { email: unsanitizedEmail, password } = data;
+    const email = unsanitizedEmail ? unsanitizedEmail.toLowerCase().trim() : null;
+    // eslint-disable-next-line @typescript-eslint/ban-ts-comment
+    // @ts-ignore Improper typing in library, additional args should be optional
+    const userDoc = await Model.findOne({ email }).lean();
+    let user = JSON.parse(JSON.stringify(userDoc));
+    if (!userDoc || (args.collection.config.auth.verify && userDoc._verified === false)) {
+        throw new errors_1.AuthenticationError(req.t);
+    }
+    if (userDoc && (0, isLocked_1.default)(userDoc.lockUntil)) {
+        throw new errors_1.LockedAuth(req.t);
+    }
+    const authResult = await (0, authenticate_1.authenticateLocalStrategy)({ password, doc: user });
+    user = (0, sanitizeInternalFields_1.default)(user);
+    const maxLoginAttemptsEnabled = args.collection.config.auth.maxLoginAttempts > 0;
+    if (!authResult) {
+        if (maxLoginAttemptsEnabled) {
+            await (0, incrementLoginAttempts_1.incrementLoginAttempts)({
+                payload: req.payload,
+                doc: user,
+                collection: collectionConfig,
+            });
+        }
+        throw new errors_1.AuthenticationError(req.t);
+    }
+    if (maxLoginAttemptsEnabled) {
+        await (0, unlock_1.default)({
+            collection: {
+                Model,
+                config: collectionConfig,
+            },
+            req,
+            data,
+            overrideAccess: true,
+        });
+    }
+    const fieldsToSign = collectionConfig.fields.reduce((signedFields, field) => {
+        const result = {
+            ...signedFields,
+        };
+        if (!(0, types_1.fieldAffectsData)(field) && (0, types_1.fieldHasSubFields)(field)) {
+            field.fields.forEach((subField) => {
+                if ((0, types_1.fieldAffectsData)(subField) && subField.saveToJWT) {
+                    result[subField.name] = user[subField.name];
+                }
+            });
+        }
+        if ((0, types_1.fieldAffectsData)(field) && field.saveToJWT) {
+            result[field.name] = user[field.name];
+        }
+        return result;
+    }, {
+        email,
+        id: user.id,
+        collection: collectionConfig.slug,
+    });
+    await collectionConfig.hooks.beforeLogin.reduce(async (priorHook, hook) => {
+        await priorHook;
+        user = (await hook({
+            user,
+            req: args.req,
+        })) || user;
+    }, Promise.resolve());
+    const token = jsonwebtoken_1.default.sign(fieldsToSign, secret, {
+        expiresIn: collectionConfig.auth.tokenExpiration,
+    });
+    if (args.res) {
+        const cookieOptions = {
+            path: '/',
+            httpOnly: true,
+            expires: (0, getCookieExpiration_1.default)(collectionConfig.auth.tokenExpiration),
+            secure: collectionConfig.auth.cookies.secure,
+            sameSite: collectionConfig.auth.cookies.sameSite,
+            domain: undefined,
+        };
+        if (collectionConfig.auth.cookies.domain)
+            cookieOptions.domain = collectionConfig.auth.cookies.domain;
+        args.res.cookie(`${config.cookiePrefix}-token`, token, cookieOptions);
+    }
+    req.user = user;
+    // /////////////////////////////////////
+    // afterLogin - Collection
+    // /////////////////////////////////////
+    await collectionConfig.hooks.afterLogin.reduce(async (priorHook, hook) => {
+        await priorHook;
+        user = await hook({
+            user,
+            req: args.req,
+            token,
+        }) || user;
+    }, Promise.resolve());
+    // /////////////////////////////////////
+    // afterRead - Fields
+    // /////////////////////////////////////
+    user = await (0, afterRead_1.afterRead)({
+        depth,
+        doc: user,
+        entityConfig: collectionConfig,
+        overrideAccess,
+        req,
+        showHiddenFields,
+    });
+    // /////////////////////////////////////
+    // afterRead - Collection
+    // /////////////////////////////////////
+    await collectionConfig.hooks.afterRead.reduce(async (priorHook, hook) => {
+        await priorHook;
+        user = await hook({
+            req,
+            doc: user,
+        }) || user;
+    }, Promise.resolve());
+    // /////////////////////////////////////
+    // Return results
+    // /////////////////////////////////////
+    return {
+        token,
+        user,
+        exp: jsonwebtoken_1.default.decode(token).exp,
+    };
+}
+exports.default = login;
 //# sourceMappingURL=login.js.map

package/dist/auth/operations/logout.d.ts

@@ -1,10 +1,10 @@
-import { Response } from 'express';
-import { PayloadRequest } from '../../express/types';
-import { Collection } from '../../collections/config/types';
-export type Arguments = {
-    req: PayloadRequest;
-    res: Response;
-    collection: Collection;
-};
-declare function logout(incomingArgs: Arguments): Promise<string>;
-export default logout;
+import { Response } from 'express';
+import { PayloadRequest } from '../../express/types';
+import { Collection } from '../../collections/config/types';
+export type Arguments = {
+    req: PayloadRequest;
+    res: Response;
+    collection: Collection;
+};
+declare function logout(incomingArgs: Arguments): Promise<string>;
+export default logout;

package/dist/auth/operations/logout.js

@@ -1,35 +1,35 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const http_status_1 = __importDefault(require("http-status"));
-const errors_1 = require("../../errors");
-async function logout(incomingArgs) {
-    let args = incomingArgs;
-    const { res, req: { payload: { config, }, user, }, req, collection: { config: collectionConfig, }, collection, } = incomingArgs;
-    if (!user)
-        throw new errors_1.APIError('No User', http_status_1.default.BAD_REQUEST);
-    if (user.collection !== collectionConfig.slug)
-        throw new errors_1.APIError('Incorrect collection', http_status_1.default.FORBIDDEN);
-    const cookieOptions = {
-        path: '/',
-        httpOnly: true,
-        secure: collectionConfig.auth.cookies.secure,
-        sameSite: collectionConfig.auth.cookies.sameSite,
-        domain: undefined,
-    };
-    if (collectionConfig.auth.cookies.domain)
-        cookieOptions.domain = collectionConfig.auth.cookies.domain;
-    await collection.config.hooks.afterLogout.reduce(async (priorHook, hook) => {
-        await priorHook;
-        args = (await hook({
-            req,
-            res,
-        })) || args;
-    }, Promise.resolve());
-    res.clearCookie(`${config.cookiePrefix}-token`, cookieOptions);
-    return req.t('authentication:loggedOutSuccessfully');
-}
-exports.default = logout;
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const http_status_1 = __importDefault(require("http-status"));
+const errors_1 = require("../../errors");
+async function logout(incomingArgs) {
+    let args = incomingArgs;
+    const { res, req: { payload: { config, }, user, }, req, collection: { config: collectionConfig, }, collection, } = incomingArgs;
+    if (!user)
+        throw new errors_1.APIError('No User', http_status_1.default.BAD_REQUEST);
+    if (user.collection !== collectionConfig.slug)
+        throw new errors_1.APIError('Incorrect collection', http_status_1.default.FORBIDDEN);
+    const cookieOptions = {
+        path: '/',
+        httpOnly: true,
+        secure: collectionConfig.auth.cookies.secure,
+        sameSite: collectionConfig.auth.cookies.sameSite,
+        domain: undefined,
+    };
+    if (collectionConfig.auth.cookies.domain)
+        cookieOptions.domain = collectionConfig.auth.cookies.domain;
+    await collection.config.hooks.afterLogout.reduce(async (priorHook, hook) => {
+        await priorHook;
+        args = (await hook({
+            req,
+            res,
+        })) || args;
+    }, Promise.resolve());
+    res.clearCookie(`${config.cookiePrefix}-token`, cookieOptions);
+    return req.t('authentication:loggedOutSuccessfully');
+}
+exports.default = logout;
 //# sourceMappingURL=logout.js.map

package/dist/auth/operations/me.d.ts

@@ -1,15 +1,15 @@
-import { PayloadRequest } from '../../express/types';
-import { User } from '../types';
-import { Collection } from '../../collections/config/types';
-export type Result = {
-    user?: User;
-    collection?: string;
-    token?: string;
-    exp?: number;
-};
-export type Arguments = {
-    req: PayloadRequest;
-    collection: Collection;
-};
-declare function me({ req, collection, }: Arguments): Promise<Result>;
-export default me;
+import { PayloadRequest } from '../../express/types';
+import { User } from '../types';
+import { Collection } from '../../collections/config/types';
+export type Result = {
+    user?: User;
+    collection?: string;
+    token?: string;
+    exp?: number;
+};
+export type Arguments = {
+    req: PayloadRequest;
+    collection: Collection;
+};
+declare function me({ req, collection, }: Arguments): Promise<Result>;
+export default me;

package/dist/auth/operations/me.js

@@ -1,46 +1,46 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
-const getExtractJWT_1 = __importDefault(require("../getExtractJWT"));
-async function me({ req, collection, }) {
-    const extractJWT = (0, getExtractJWT_1.default)(req.payload.config);
-    let response = {
-        user: null,
-    };
-    if (req.user) {
-        const user = { ...req.user };
-        if (user.collection !== collection.config.slug) {
-            return {
-                user: null,
-            };
-        }
-        delete user.collection;
-        response = {
-            user,
-            collection: req.user.collection,
-        };
-        const token = extractJWT(req);
-        if (token) {
-            response.token = token;
-            const decoded = jsonwebtoken_1.default.decode(token);
-            if (decoded)
-                response.exp = decoded.exp;
-        }
-    }
-    // /////////////////////////////////////
-    // After Me - Collection
-    // /////////////////////////////////////
-    await collection.config.hooks.afterMe.reduce(async (priorHook, hook) => {
-        await priorHook;
-        response = await hook({
-            req,
-            response,
-        }) || response;
-    }, Promise.resolve());
-    return response;
-}
-exports.default = me;
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+const getExtractJWT_1 = __importDefault(require("../getExtractJWT"));
+async function me({ req, collection, }) {
+    const extractJWT = (0, getExtractJWT_1.default)(req.payload.config);
+    let response = {
+        user: null,
+    };
+    if (req.user) {
+        const user = { ...req.user };
+        if (user.collection !== collection.config.slug) {
+            return {
+                user: null,
+            };
+        }
+        delete user.collection;
+        response = {
+            user,
+            collection: req.user.collection,
+        };
+        const token = extractJWT(req);
+        if (token) {
+            response.token = token;
+            const decoded = jsonwebtoken_1.default.decode(token);
+            if (decoded)
+                response.exp = decoded.exp;
+        }
+    }
+    // /////////////////////////////////////
+    // After Me - Collection
+    // /////////////////////////////////////
+    await collection.config.hooks.afterMe.reduce(async (priorHook, hook) => {
+        await priorHook;
+        response = await hook({
+            req,
+            response,
+        }) || response;
+    }, Promise.resolve());
+    return response;
+}
+exports.default = me;
 //# sourceMappingURL=me.js.map

package/dist/auth/operations/refresh.d.ts

@@ -1,17 +1,17 @@
-import { Response } from 'express';
-import { Collection } from '../../collections/config/types';
-import { Document } from '../../types';
-import { PayloadRequest } from '../../express/types';
-export type Result = {
-    exp: number;
-    user: Document;
-    refreshedToken: string;
-};
-export type Arguments = {
-    collection: Collection;
-    token: string;
-    req: PayloadRequest;
-    res?: Response;
-};
-declare function refresh(incomingArgs: Arguments): Promise<Result>;
-export default refresh;
+import { Response } from 'express';
+import { Collection } from '../../collections/config/types';
+import { Document } from '../../types';
+import { PayloadRequest } from '../../express/types';
+export type Result = {
+    exp: number;
+    user: Document;
+    refreshedToken: string;
+};
+export type Arguments = {
+    collection: Collection;
+    token: string;
+    req: PayloadRequest;
+    res?: Response;
+};
+declare function refresh(incomingArgs: Arguments): Promise<Result>;
+export default refresh;