payload 1.15.10 → 1.15.12

package/dist/auth/requestHandlers/verifyEmail.js

@@ -0,0 +1,24 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const http_status_1 = __importDefault(require("http-status"));
+const verifyEmail_1 = __importDefault(require("../operations/verifyEmail"));
+async function verifyEmailHandler(req, res, next) {
+    try {
+        await (0, verifyEmail_1.default)({
+            collection: req.collection,
+            token: req.params.token,
+        });
+        return res.status(http_status_1.default.OK)
+            .json({
+            message: 'Email verified successfully.',
+        });
+    }
+    catch (error) {
+        return next(error);
+    }
+}
+exports.default = verifyEmailHandler;
+//# sourceMappingURL=verifyEmail.js.map

package/dist/auth/requestHandlers/verifyEmail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyEmail.js","sourceRoot":"","sources":["../../../src/auth/requestHandlers/verifyEmail.ts"],"names":[],"mappings":";;;;;AACA,8DAAqC;AAErC,4EAAoD;AAEpD,KAAK,UAAU,kBAAkB,CAAC,GAAmB,EAAE,GAAa,EAAE,IAAkB;IACtF,IAAI;QACF,MAAM,IAAA,qBAAW,EAAC;YAChB,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;SACxB,CAAC,CAAC;QAEH,OAAO,GAAG,CAAC,MAAM,CAAC,qBAAU,CAAC,EAAE,CAAC;aAC7B,IAAI,CAAC;YACJ,OAAO,EAAE,8BAA8B;SACxC,CAAC,CAAC;KACN;IAAC,OAAO,KAAK,EAAE;QACd,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;KACpB;AACH,CAAC;AAED,kBAAe,kBAAkB,CAAC"}

package/dist/auth/sendVerificationEmail.d.ts

@@ -0,0 +1,17 @@
+import { Payload } from '../payload';
+import { PayloadRequest } from '../express/types';
+import { SanitizedConfig, EmailOptions } from '../config/types';
+import { Collection } from '../collections/config/types';
+import { User } from './types';
+type Args = {
+    config: SanitizedConfig;
+    collection: Collection;
+    user: User;
+    disableEmail: boolean;
+    req: PayloadRequest;
+    token: string;
+    sendEmail: Payload['sendEmail'];
+    emailOptions: EmailOptions;
+};
+declare function sendVerificationEmail(args: Args): Promise<void>;
+export default sendVerificationEmail;

package/dist/auth/sendVerificationEmail.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+async function sendVerificationEmail(args) {
+    // Verify token from e-mail
+    const { config, emailOptions, sendEmail, collection: { config: collectionConfig, }, user, disableEmail, req, token, } = args;
+    if (!disableEmail) {
+        const serverURL = (config.serverURL !== null && config.serverURL !== '') ? config.serverURL : `${req.protocol}://${req.get('host')}`;
+        const verificationURL = `${serverURL}${config.routes.admin}/${collectionConfig.slug}/verify/${token}`;
+        let html = `${req.t('authentication:newAccountCreated', { interpolation: { escapeValue: false }, serverURL: config.serverURL, verificationURL })}`;
+        const verify = collectionConfig.auth.verify;
+        // Allow config to override email content
+        if (typeof verify.generateEmailHTML === 'function') {
+            html = await verify.generateEmailHTML({
+                req,
+                token,
+                user,
+            });
+        }
+        let subject = req.t('authentication:verifyYourEmail');
+        // Allow config to override email subject
+        if (typeof verify.generateEmailSubject === 'function') {
+            subject = await verify.generateEmailSubject({
+                req,
+                token,
+                user,
+            });
+        }
+        sendEmail({
+            from: `"${emailOptions.fromName}" <${emailOptions.fromAddress}>`,
+            to: user.email,
+            subject,
+            html,
+        });
+    }
+}
+exports.default = sendVerificationEmail;
+//# sourceMappingURL=sendVerificationEmail.js.map

package/dist/auth/sendVerificationEmail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sendVerificationEmail.js","sourceRoot":"","sources":["../../src/auth/sendVerificationEmail.ts"],"names":[],"mappings":";;AAkBA,KAAK,UAAU,qBAAqB,CAAC,IAAU;IAC7C,2BAA2B;IAC3B,MAAM,EACJ,MAAM,EACN,YAAY,EACZ,SAAS,EACT,UAAU,EAAE,EACV,MAAM,EAAE,gBAAgB,GACzB,EACD,IAAI,EACJ,YAAY,EACZ,GAAG,EACH,KAAK,GACN,GAAG,IAAI,CAAC;IAET,IAAI,CAAC,YAAY,EAAE;QACjB,MAAM,SAAS,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,IAAI,IAAI,MAAM,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAErI,MAAM,eAAe,GAAG,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,gBAAgB,CAAC,IAAI,WAAW,KAAK,EAAE,CAAC;QAEtG,IAAI,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,kCAAkC,EAAE,EAAE,aAAa,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;QAEnJ,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,MAAsB,CAAC;QAE5D,yCAAyC;QACzC,IAAI,OAAO,MAAM,CAAC,iBAAiB,KAAK,UAAU,EAAE;YAClD,IAAI,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC;gBACpC,GAAG;gBACH,KAAK;gBACL,IAAI;aACL,CAAC,CAAC;SACJ;QAED,IAAI,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC;QAEtD,yCAAyC;QACzC,IAAI,OAAO,MAAM,CAAC,oBAAoB,KAAK,UAAU,EAAE;YACrD,OAAO,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC;gBAC1C,GAAG;gBACH,KAAK;gBACL,IAAI;aACL,CAAC,CAAC;SACJ;QAED,SAAS,CAAC;YACR,IAAI,EAAE,IAAI,YAAY,CAAC,QAAQ,MAAM,YAAY,CAAC,WAAW,GAAG;YAChE,EAAE,EAAE,IAAI,CAAC,KAAK;YACd,OAAO;YACP,IAAI;SACL,CAAC,CAAC;KACJ;AACH,CAAC;AAED,kBAAe,qBAAqB,CAAC"}

package/dist/auth/strategies/apiKey.d.ts

@@ -0,0 +1,7 @@
+import PassportAPIKey from 'passport-headerapikey';
+import { Payload } from '../../payload';
+declare const _default: (payload: Payload, { Model, config }: {
+    Model: any;
+    config: any;
+}) => PassportAPIKey;
+export default _default;

package/dist/auth/strategies/apiKey.js

@@ -0,0 +1,66 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const passport_headerapikey_1 = __importDefault(require("passport-headerapikey"));
+const crypto_1 = __importDefault(require("crypto"));
+const find_1 = __importDefault(require("../../collections/operations/find"));
+exports.default = (payload, { Model, config }) => {
+    const { secret } = payload;
+    const opts = {
+        header: 'Authorization',
+        prefix: `${config.slug} API-Key `,
+    };
+    return new passport_headerapikey_1.default(opts, true, async (apiKey, done, req) => {
+        const apiKeyIndex = crypto_1.default.createHmac('sha1', secret)
+            .update(apiKey)
+            .digest('hex');
+        try {
+            const where = {};
+            if (config.auth.verify) {
+                where.and = [
+                    {
+                        // TODO: Search for index
+                        apiKeyIndex: {
+                            equals: apiKeyIndex,
+                        },
+                    },
+                    {
+                        _verified: {
+                            not_equals: false,
+                        },
+                    },
+                ];
+            }
+            else {
+                where.apiKeyIndex = {
+                    equals: apiKeyIndex,
+                };
+            }
+            const userQuery = await (0, find_1.default)({
+                where,
+                collection: {
+                    Model,
+                    config,
+                },
+                req: req,
+                overrideAccess: true,
+                depth: config.auth.depth,
+            });
+            if (userQuery.docs && userQuery.docs.length > 0) {
+                const user = userQuery.docs[0];
+                user.collection = config.slug;
+                user._strategy = 'api-key';
+                done(null, user);
+            }
+            else {
+                done(null, false);
+            }
+        }
+        catch (err) {
+            done(null, false);
+        }
+    });
+};
+//# sourceMappingURL=apiKey.js.map

package/dist/auth/strategies/apiKey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiKey.js","sourceRoot":"","sources":["../../../src/auth/strategies/apiKey.ts"],"names":[],"mappings":";;;;;AAAA,kFAAmD;AACnD,oDAA4B;AAG5B,6EAAqD;AAErD,kBAAe,CAAC,OAAgB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAkB,EAAE;IACrE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC3B,MAAM,IAAI,GAAG;QACX,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,WAAW;KAClC,CAAC;IAEF,OAAO,IAAI,+BAAc,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAChE,MAAM,WAAW,GAAG,gBAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC;aAClD,MAAM,CAAC,MAAM,CAAC;aACd,MAAM,CAAC,KAAK,CAAC,CAAC;QAEjB,IAAI;YACF,MAAM,KAAK,GAA2B,EAAE,CAAC;YACzC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE;gBACtB,KAAK,CAAC,GAAG,GAAG;oBACV;wBACE,yBAAyB;wBACzB,WAAW,EAAE;4BACX,MAAM,EAAE,WAAW;yBACpB;qBACF;oBACD;wBACE,SAAS,EAAE;4BACT,UAAU,EAAE,KAAK;yBAClB;qBACF;iBACF,CAAC;aACH;iBAAM;gBACL,KAAK,CAAC,WAAW,GAAG;oBAClB,MAAM,EAAE,WAAW;iBACpB,CAAC;aACH;YACD,MAAM,SAAS,GAAG,MAAM,IAAA,cAAI,EAAC;gBAC3B,KAAK;gBACL,UAAU,EAAE;oBACV,KAAK;oBACL,MAAM;iBACP;gBACD,GAAG,EAAE,GAAqB;gBAC1B,cAAc,EAAE,IAAI;gBACpB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;aACzB,CAAC,CAAC;YAEH,IAAI,SAAS,CAAC,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE;gBAC/C,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAC/B,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;gBAC9B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;gBAC3B,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;aAClB;iBAAM;gBACL,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;aACnB;SACF;QAAC,OAAO,GAAG,EAAE;YACZ,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;SACnB;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}

package/dist/auth/strategies/jwt.d.ts

@@ -0,0 +1,4 @@
+import { Strategy as PassportStrategy } from 'passport-strategy';
+import { Payload } from '../../payload';
+declare const _default: ({ secret, config, collections }: Payload) => PassportStrategy;
+export default _default;

package/dist/auth/strategies/jwt.js

@@ -0,0 +1,44 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const url_1 = __importDefault(require("url"));
+const passport_jwt_1 = __importDefault(require("passport-jwt"));
+const getExtractJWT_1 = __importDefault(require("../getExtractJWT"));
+const JwtStrategy = passport_jwt_1.default.Strategy;
+exports.default = ({ secret, config, collections }) => {
+    const opts = {
+        passReqToCallback: true,
+        jwtFromRequest: (0, getExtractJWT_1.default)(config),
+        secretOrKey: secret,
+    };
+    return new JwtStrategy(opts, async (req, token, done) => {
+        if (req.user) {
+            done(null, req.user);
+        }
+        try {
+            const collection = collections[token.collection];
+            const parsedURL = url_1.default.parse(req.originalUrl);
+            const isGraphQL = parsedURL.pathname === `/api${req.payload.config.routes.graphQL}`;
+            const user = await req.payload.findByID({
+                id: token.id,
+                collection: token.collection,
+                req,
+                depth: isGraphQL ? 0 : collection.config.auth.depth,
+            });
+            if (user && (!collection.config.auth.verify || user._verified)) {
+                user.collection = collection.config.slug;
+                user._strategy = 'local-jwt';
+                done(null, user);
+            }
+            else {
+                done(null, false);
+            }
+        }
+        catch (err) {
+            done(null, false);
+        }
+    });
+};
+//# sourceMappingURL=jwt.js.map

package/dist/auth/strategies/jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.js","sourceRoot":"","sources":["../../../src/auth/strategies/jwt.ts"],"names":[],"mappings":";;;;;AAAA,8CAAsB;AACtB,gEAA4D;AAG5D,qEAA6C;AAE7C,MAAM,WAAW,GAAG,sBAAW,CAAC,QAAQ,CAAC;AAEzC,kBAAe,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAW,EAAoB,EAAE;IAC5E,MAAM,IAAI,GAAoB;QAC5B,iBAAiB,EAAE,IAAI;QACvB,cAAc,EAAE,IAAA,uBAAa,EAAC,MAAM,CAAC;QACrC,WAAW,EAAE,MAAM;KACpB,CAAC;IAEF,OAAO,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACtD,IAAI,GAAG,CAAC,IAAI,EAAE;YACZ,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;SACtB;QAED,IAAI;YACF,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAEjD,MAAM,SAAS,GAAG,aAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC7C,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,KAAK,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAEpF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC;gBACtC,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,GAAG;gBACH,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK;aACpD,CAAC,CAAC;YAEH,IAAI,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE;gBAC9D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC;gBACzC,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC;gBAC7B,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;aAClB;iBAAM;gBACL,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;aACnB;SACF;QAAC,OAAO,GAAG,EAAE;YACZ,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;SACnB;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}

package/dist/auth/strategies/local/authenticate.d.ts

@@ -0,0 +1,8 @@
+import { TypeWithID } from "../../../collections/config/types";
+type Doc = TypeWithID & Record<string, unknown>;
+type Args = {
+    doc: Doc;
+    password: string;
+};
+export declare const authenticateLocalStrategy: ({ doc, password, }: Args) => Promise<Doc | null>;
+export {};

package/dist/auth/strategies/local/authenticate.js

@@ -0,0 +1,35 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authenticateLocalStrategy = void 0;
+const crypto_1 = __importDefault(require("crypto"));
+const scmp_1 = __importDefault(require("scmp"));
+const authenticateLocalStrategy = async ({ doc, password, }) => {
+    try {
+        const salt = doc.salt;
+        const hash = doc.hash;
+        if (typeof salt === 'string' && typeof hash === 'string') {
+            const res = await new Promise((resolve, reject) => {
+                crypto_1.default.pbkdf2(password, salt, 25000, 512, 'sha256', (e, hashBuffer) => {
+                    if (e)
+                        reject(null);
+                    if ((0, scmp_1.default)(hashBuffer, Buffer.from(hash, 'hex'))) {
+                        resolve(doc);
+                    }
+                    else {
+                        reject(null);
+                    }
+                });
+            });
+            return res;
+        }
+        return null;
+    }
+    catch (err) {
+        return null;
+    }
+};
+exports.authenticateLocalStrategy = authenticateLocalStrategy;
+//# sourceMappingURL=authenticate.js.map

package/dist/auth/strategies/local/authenticate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticate.js","sourceRoot":"","sources":["../../../../src/auth/strategies/local/authenticate.ts"],"names":[],"mappings":";;;;;;AAAA,oDAA2B;AAC3B,gDAAuB;AAWhB,MAAM,yBAAyB,GAAG,KAAK,EAAE,EAC9C,GAAG,EACH,QAAQ,GACH,EAAuB,EAAE;IAC9B,IAAI;QACF,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAA;QACrB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAA;QAErB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE;YACxD,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC5D,gBAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE;oBACpE,IAAI,CAAC;wBAAE,MAAM,CAAC,IAAI,CAAC,CAAA;oBAEnB,IAAI,IAAA,cAAI,EAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE;wBAC9C,OAAO,CAAC,GAAG,CAAC,CAAA;qBACb;yBAAM;wBACL,MAAM,CAAC,IAAI,CAAC,CAAA;qBACb;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAA;YAEF,OAAO,GAAG,CAAA;SACX;QAED,OAAO,IAAI,CAAA;KACZ;IAAC,OAAO,GAAG,EAAE;QACZ,OAAO,IAAI,CAAA;KACZ;AACH,CAAC,CAAA;AA5BY,QAAA,yBAAyB,6BA4BrC"}

package/dist/auth/strategies/local/generatePasswordSaltHash.d.ts

@@ -0,0 +1,8 @@
+type Args = {
+    password: string;
+};
+export declare const generatePasswordSaltHash: ({ password, }: Args) => Promise<{
+    salt: string;
+    hash: string;
+}>;
+export {};

package/dist/auth/strategies/local/generatePasswordSaltHash.js

@@ -0,0 +1,34 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generatePasswordSaltHash = void 0;
+const crypto_1 = __importDefault(require("crypto"));
+const errors_1 = require("../../../errors");
+const defaultPasswordValidator = (password) => {
+    if (!password)
+        return 'No password was given';
+    if (password.length < 3)
+        return 'Password must be at least 3 characters';
+    return true;
+};
+function randomBytes() {
+    return new Promise((resolve, reject) => crypto_1.default.randomBytes(32, (err, saltBuffer) => (err ? reject(err) : resolve(saltBuffer))));
+}
+function pbkdf2Promisified(password, salt) {
+    return new Promise((resolve, reject) => crypto_1.default.pbkdf2(password, salt, 25000, 512, 'sha256', (err, hashRaw) => (err ? reject(err) : resolve(hashRaw))));
+}
+const generatePasswordSaltHash = async ({ password, }) => {
+    const validationResult = defaultPasswordValidator(password);
+    if (typeof validationResult === 'string') {
+        throw new errors_1.ValidationError([{ message: validationResult, field: 'password' }]);
+    }
+    const saltBuffer = await randomBytes();
+    const salt = saltBuffer.toString('hex');
+    const hashRaw = await pbkdf2Promisified(password, salt);
+    const hash = hashRaw.toString('hex');
+    return { salt, hash };
+};
+exports.generatePasswordSaltHash = generatePasswordSaltHash;
+//# sourceMappingURL=generatePasswordSaltHash.js.map

package/dist/auth/strategies/local/generatePasswordSaltHash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generatePasswordSaltHash.js","sourceRoot":"","sources":["../../../../src/auth/strategies/local/generatePasswordSaltHash.ts"],"names":[],"mappings":";;;;;;AAAA,oDAA2B;AAC3B,4CAAiD;AAEjD,MAAM,wBAAwB,GAAG,CAAC,QAAgB,EAAiB,EAAE;IACnE,IAAI,CAAC,QAAQ;QAAE,OAAO,uBAAuB,CAAA;IAC7C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,wCAAwC,CAAA;IAExE,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAED,SAAS,WAAW;IAClB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,gBAAM,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAClI,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB,EAAE,IAAY;IACvD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,gBAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AACzJ,CAAC;AAMM,MAAM,wBAAwB,GAAG,KAAK,EAAE,EAC7C,QAAQ,GACH,EAA2C,EAAE;IAClD,MAAM,gBAAgB,GAAG,wBAAwB,CAAC,QAAQ,CAAC,CAAA;IAE3D,IAAI,OAAO,gBAAgB,KAAK,QAAQ,EAAE;QACxC,MAAM,IAAI,wBAAe,CAAC,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAA;KAC9E;IAED,MAAM,UAAU,GAAG,MAAM,WAAW,EAAE,CAAA;IACtC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAEvC,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IACvD,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAEpC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;AACvB,CAAC,CAAA;AAhBY,QAAA,wBAAwB,4BAgBpC"}

package/dist/auth/strategies/local/incrementLoginAttempts.d.ts

@@ -0,0 +1,9 @@
+import { Payload } from "../../..";
+import { SanitizedCollectionConfig, TypeWithID } from "../../../collections/config/types";
+type Args = {
+    payload: Payload;
+    doc: TypeWithID & Record<string, unknown>;
+    collection: SanitizedCollectionConfig;
+};
+export declare const incrementLoginAttempts: ({ payload, doc, collection, }: Args) => Promise<void>;
+export {};

package/dist/auth/strategies/local/incrementLoginAttempts.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.incrementLoginAttempts = void 0;
+const incrementLoginAttempts = async ({ payload, doc, collection, }) => {
+    const { auth: { maxLoginAttempts, lockTime, } } = collection;
+    if ('lockUntil' in doc && typeof doc.lockUntil === 'string') {
+        const lockUntil = Math.floor(new Date(doc.lockUntil).getTime() / 1000);
+        // Expired lock, restart count at 1
+        if (lockUntil < Date.now()) {
+            await payload.update({
+                collection: collection.slug,
+                id: doc.id,
+                data: {
+                    loginAttempts: 1,
+                    lockUntil: null,
+                }
+            });
+        }
+        return;
+    }
+    const data = {
+        loginAttempts: Number(doc.loginAttempts) + 1,
+    };
+    // Lock the account if at max attempts and not already locked
+    if (typeof doc.loginAttempts === 'number' && doc.loginAttempts + 1 >= maxLoginAttempts) {
+        const lockUntil = new Date((Date.now() + lockTime));
+        data.lockUntil = lockUntil;
+    }
+    await payload.update({
+        collection: collection.slug,
+        id: doc.id,
+        data,
+    });
+};
+exports.incrementLoginAttempts = incrementLoginAttempts;
+//# sourceMappingURL=incrementLoginAttempts.js.map

package/dist/auth/strategies/local/incrementLoginAttempts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"incrementLoginAttempts.js","sourceRoot":"","sources":["../../../../src/auth/strategies/local/incrementLoginAttempts.ts"],"names":[],"mappings":";;;AASO,MAAM,sBAAsB,GAAG,KAAK,EAAE,EAC3C,OAAO,EACP,GAAG,EACH,UAAU,GACL,EAAiB,EAAE;IACxB,MAAM,EACJ,IAAI,EAAE,EACJ,gBAAgB,EAChB,QAAQ,GACT,EACF,GAAG,UAAU,CAAA;IAEd,IAAI,WAAW,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,EAAE;QAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAA;QAEtE,mCAAmC;QACnC,IAAI,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE;YAC1B,MAAM,OAAO,CAAC,MAAM,CAAC;gBACnB,UAAU,EAAE,UAAU,CAAC,IAAI;gBAC3B,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,IAAI,EAAE;oBACJ,aAAa,EAAE,CAAC;oBAChB,SAAS,EAAE,IAAI;iBAChB;aACF,CAAC,CAAA;SACH;QAED,OAAM;KACP;IAED,MAAM,IAAI,GAA4B;QACpC,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC;KAC7C,CAAA;IAED,6DAA6D;IAC7D,IAAI,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,IAAI,GAAG,CAAC,aAAa,GAAG,CAAC,IAAI,gBAAgB,EAAE;QACtF,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAA;QACnD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;KAC3B;IAGD,MAAM,OAAO,CAAC,MAAM,CAAC;QACnB,UAAU,EAAE,UAAU,CAAC,IAAI;QAC3B,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI;KACL,CAAC,CAAA;AACJ,CAAC,CAAA;AA9CY,QAAA,sBAAsB,0BA8ClC"}

package/dist/auth/strategies/local/register.d.ts

@@ -0,0 +1,10 @@
+import { Payload } from '../../..';
+import { SanitizedCollectionConfig } from '../../../collections/config/types';
+type Args = {
+    collection: SanitizedCollectionConfig;
+    doc: Record<string, unknown>;
+    password: string;
+    payload: Payload;
+};
+export declare const registerLocalStrategy: ({ collection, doc, password, payload, }: Args) => Promise<Record<string, unknown>>;
+export {};

package/dist/auth/strategies/local/register.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerLocalStrategy = void 0;
+const errors_1 = require("../../../errors");
+const generatePasswordSaltHash_1 = require("./generatePasswordSaltHash");
+const registerLocalStrategy = async ({ collection, doc, password, payload, }) => {
+    const existingUser = await payload.find({
+        collection: collection.slug,
+        depth: 0,
+        where: {
+            email: {
+                equals: doc.email,
+            }
+        }
+    });
+    if (existingUser.docs.length > 0) {
+        throw new errors_1.ValidationError([{ message: 'A user with the given email is already registered', field: 'email' }]);
+    }
+    const { salt, hash } = await (0, generatePasswordSaltHash_1.generatePasswordSaltHash)({ password });
+    const result = await payload.collections[collection.slug].Model.create({
+        ...doc,
+        salt,
+        hash
+    });
+    return result;
+};
+exports.registerLocalStrategy = registerLocalStrategy;
+//# sourceMappingURL=register.js.map

package/dist/auth/strategies/local/register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.js","sourceRoot":"","sources":["../../../../src/auth/strategies/local/register.ts"],"names":[],"mappings":";;;AAAA,4CAAiD;AAGjD,yEAAsE;AAS/D,MAAM,qBAAqB,GAAG,KAAK,EAAE,EAC1C,UAAU,EACV,GAAG,EACH,QAAQ,EACR,OAAO,GACF,EAAoC,EAAE;IAC3C,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;QACtC,UAAU,EAAE,UAAU,CAAC,IAAI;QAC3B,KAAK,EAAE,CAAC;QACR,KAAK,EAAE;YACL,KAAK,EAAE;gBACL,MAAM,EAAE,GAAG,CAAC,KAAK;aAClB;SACF;KACF,CAAC,CAAA;IAEF,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE;QAChC,MAAM,IAAI,wBAAe,CAAC,CAAC,EAAE,OAAO,EAAE,mDAAmD,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAA;KAC9G;IAED,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,IAAA,mDAAwB,EAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;IAEnE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;QACrE,GAAG,GAAG;QACN,IAAI;QACJ,IAAI;KACL,CAAC,CAAA;IAEF,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AA7BY,QAAA,qBAAqB,yBA6BjC"}

package/dist/auth/strategies/local/resetLoginAttempts.d.ts

@@ -0,0 +1,9 @@
+import { Payload } from "../../..";
+import { SanitizedCollectionConfig, TypeWithID } from "../../../collections/config/types";
+type Args = {
+    payload: Payload;
+    doc: TypeWithID & Record<string, unknown>;
+    collection: SanitizedCollectionConfig;
+};
+export declare const resetLoginAttempts: ({ payload, doc, collection, }: Args) => Promise<void>;
+export {};

package/dist/auth/strategies/local/resetLoginAttempts.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resetLoginAttempts = void 0;
+const resetLoginAttempts = async ({ payload, doc, collection, }) => {
+    await payload.update({
+        collection: collection.slug,
+        id: doc.id,
+        data: {
+            loginAttempts: 0,
+            lockUntil: null,
+        },
+    });
+};
+exports.resetLoginAttempts = resetLoginAttempts;
+//# sourceMappingURL=resetLoginAttempts.js.map

package/dist/auth/strategies/local/resetLoginAttempts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resetLoginAttempts.js","sourceRoot":"","sources":["../../../../src/auth/strategies/local/resetLoginAttempts.ts"],"names":[],"mappings":";;;AASO,MAAM,kBAAkB,GAAG,KAAK,EAAE,EACvC,OAAO,EACP,GAAG,EACH,UAAU,GACL,EAAiB,EAAE;IACxB,MAAM,OAAO,CAAC,MAAM,CAAC;QACnB,UAAU,EAAE,UAAU,CAAC,IAAI;QAC3B,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE;YACJ,aAAa,EAAE,CAAC;YAChB,SAAS,EAAE,IAAI;SAChB;KACF,CAAC,CAAA;AACJ,CAAC,CAAA;AAbY,QAAA,kBAAkB,sBAa9B"}

package/dist/auth/types.d.ts

@@ -0,0 +1,129 @@
+import { Strategy } from 'passport';
+import { DeepRequired } from 'ts-essentials';
+import { PayloadRequest } from '../express/types';
+import { Where, PayloadMongooseDocument } from '../types';
+import { Payload } from '../payload';
+export type Permission = {
+    permission: boolean;
+    where?: Record<string, unknown>;
+};
+export type FieldPermissions = {
+    create: {
+        permission: boolean;
+    };
+    read: {
+        permission: boolean;
+    };
+    update: {
+        permission: boolean;
+    };
+    fields?: {
+        [fieldName: string]: FieldPermissions;
+    };
+    blocks?: {
+        [blockSlug: string]: {
+            fields: {
+                [fieldName: string]: FieldPermissions;
+            };
+        };
+    };
+};
+export type CollectionPermission = {
+    create: Permission;
+    read: Permission;
+    update: Permission;
+    delete: Permission;
+    readVersions?: Permission;
+    fields: {
+        [fieldName: string]: FieldPermissions;
+    };
+};
+export type GlobalPermission = {
+    read: Permission;
+    update: Permission;
+    readVersions?: Permission;
+    fields: {
+        [fieldName: string]: FieldPermissions;
+    };
+};
+export type Permissions = {
+    canAccessAdmin: boolean;
+    collections: {
+        [collectionSlug: string]: CollectionPermission;
+    };
+    globals?: {
+        [globalSlug: string]: GlobalPermission;
+    };
+};
+export type User = {
+    id: string;
+    email: string;
+    collection: string;
+    [key: string]: unknown;
+};
+export interface UserDocument extends PayloadMongooseDocument {
+    setPassword: (pass: string) => Promise<void>;
+    authenticate: (pass: string) => Promise<void>;
+    resetPasswordExpiration: number;
+    email: string;
+    _verified?: boolean;
+}
+type GenerateVerifyEmailHTML = (args: {
+    req: PayloadRequest;
+    token: string;
+    user: any;
+}) => Promise<string> | string;
+type GenerateVerifyEmailSubject = (args: {
+    req: PayloadRequest;
+    token: string;
+    user: any;
+}) => Promise<string> | string;
+type GenerateForgotPasswordEmailHTML = (args?: {
+    req?: PayloadRequest;
+    token?: string;
+    user?: unknown;
+}) => Promise<string> | string;
+type GenerateForgotPasswordEmailSubject = (args?: {
+    req?: PayloadRequest;
+    token?: string;
+    user?: any;
+}) => Promise<string> | string;
+type AuthStrategy = ((ctx: Payload) => Strategy) | Strategy;
+export interface IncomingAuthType {
+    tokenExpiration?: number;
+    verify?: boolean | {
+        generateEmailHTML?: GenerateVerifyEmailHTML;
+        generateEmailSubject?: GenerateVerifyEmailSubject;
+    };
+    maxLoginAttempts?: number;
+    lockTime?: number;
+    useAPIKey?: boolean;
+    depth?: number;
+    cookies?: {
+        secure?: boolean;
+        sameSite?: boolean | 'none' | 'strict' | 'lax';
+        domain?: string;
+    };
+    forgotPassword?: {
+        generateEmailHTML?: GenerateForgotPasswordEmailHTML;
+        generateEmailSubject?: GenerateForgotPasswordEmailSubject;
+    };
+    disableLocalStrategy?: true;
+    strategies?: {
+        name?: string;
+        strategy: AuthStrategy;
+    }[];
+}
+export type VerifyConfig = {
+    generateEmailHTML?: GenerateVerifyEmailHTML;
+    generateEmailSubject?: GenerateVerifyEmailSubject;
+};
+export interface Auth extends Omit<DeepRequired<IncomingAuthType>, 'verify' | 'forgotPassword'> {
+    verify?: VerifyConfig | boolean;
+    forgotPassword?: {
+        generateEmailHTML?: GenerateForgotPasswordEmailHTML;
+        generateEmailSubject?: GenerateForgotPasswordEmailSubject;
+    };
+}
+export declare function hasWhereAccessResult(result: boolean | Where): result is Where;
+export {};

package/dist/auth/types.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.hasWhereAccessResult = void 0;
+function hasWhereAccessResult(result) {
+    return result && typeof result === 'object';
+}
+exports.hasWhereAccessResult = hasWhereAccessResult;
+//# sourceMappingURL=types.js.map

package/dist/auth/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":";;;AA+HA,SAAgB,oBAAoB,CAAC,MAAuB;IAC1D,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC;AAC9C,CAAC;AAFD,oDAEC"}

package/dist/bin/build.d.ts

@@ -0,0 +1 @@
+export declare const build: () => Promise<void>;

package/dist/bin/build.js

@@ -0,0 +1,17 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.build = void 0;
+const load_1 = __importDefault(require("../config/load"));
+const build = async () => {
+    const config = await (0, load_1.default)(); // Will throw its own error if it fails
+    await config.admin.bundler.build(config);
+};
+exports.build = build;
+// when build.js is launched directly
+if (module.id === require.main.id) {
+    (0, exports.build)();
+}
+//# sourceMappingURL=build.js.map

package/dist/bin/build.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.js","sourceRoot":"","sources":["../../src/bin/build.ts"],"names":[],"mappings":";;;;;;AAAA,0DAAwC;AAEjC,MAAM,KAAK,GAAG,KAAK,IAAmB,EAAE;IAC7C,MAAM,MAAM,GAAG,MAAM,IAAA,cAAU,GAAE,CAAC,CAAC,uCAAuC;IAE1E,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC3C,CAAC,CAAC;AAJW,QAAA,KAAK,SAIhB;AAEF,qCAAqC;AACrC,IAAI,MAAM,CAAC,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE;IACjC,IAAA,aAAK,GAAE,CAAC;CACT"}

package/dist/bin/generateGraphQLSchema.d.ts

@@ -0,0 +1 @@
+export declare function generateGraphQLSchema(): Promise<void>;