payload 3.0.0-beta.7 → 3.0.0-beta.70

package/dist/collections/config/defaults.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/collections/config/defaults.ts"],"sourcesContent":["import defaultAccess from '../../auth/defaultAccess.js'\n\nexport const defaults = {\n  access: {\n    create: defaultAccess,\n    delete: defaultAccess,\n    read: defaultAccess,\n    unlock: defaultAccess,\n    update: defaultAccess,\n  },\n  admin: {\n    components: {},\n    enableRichTextLink: true,\n    enableRichTextRelationship: true,\n    pagination: {\n      defaultLimit: 10,\n      limits: [5, 10, 25, 50, 100],\n    },\n    useAsTitle: 'id',\n  },\n  auth: false,\n  custom: {},\n  endpoints: [],\n  fields: [],\n  hooks: {\n    afterChange: [],\n    afterDelete: [],\n    afterForgotPassword: [],\n    afterLogin: [],\n    afterLogout: [],\n    afterMe: [],\n    afterOperation: [],\n    afterRead: [],\n    afterRefresh: [],\n    beforeChange: [],\n    beforeDelete: [],\n    beforeLogin: [],\n    beforeOperation: [],\n    beforeRead: [],\n    beforeValidate: [],\n  },\n  timestamps: true,\n  upload: false,\n  versions: false,\n}\n\nexport const authDefaults = {\n  cookies: {\n    sameSite: 'Lax',\n    secure: false,\n  },\n  forgotPassword: {},\n  lockTime: 600000, // 10 minutes\n  maxLoginAttempts: 5,\n  tokenExpiration: 7200,\n  verify: false,\n}\n"],"names":["defaultAccess","defaults","access","create","delete","read","unlock","update","admin","components","enableRichTextLink","enableRichTextRelationship","pagination","defaultLimit","limits","useAsTitle","auth","custom","endpoints","fields","hooks","afterChange","afterDelete","afterForgotPassword","afterLogin","afterLogout","afterMe","afterOperation","afterRead","afterRefresh","beforeChange","beforeDelete","beforeLogin","beforeOperation","beforeRead","beforeValidate","timestamps","upload","versions","authDefaults","cookies","sameSite","secure","forgotPassword","lockTime","maxLoginAttempts","tokenExpiration","verify"],"rangeMappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;","mappings":"AAAA,OAAOA,mBAAmB,8BAA6B;AAEvD,OAAO,MAAMC,WAAW;IACtBC,QAAQ;QACNC,QAAQH;QACRI,QAAQJ;QACRK,MAAML;QACNM,QAAQN;QACRO,QAAQP;IACV;IACAQ,OAAO;QACLC,YAAY,CAAC;QACbC,oBAAoB;QACpBC,4BAA4B;QAC5BC,YAAY;YACVC,cAAc;YACdC,QAAQ;gBAAC;gBAAG;gBAAI;gBAAI;gBAAI;aAAI;QAC9B;QACAC,YAAY;IACd;IACAC,MAAM;IACNC,QAAQ,CAAC;IACTC,WAAW,EAAE;IACbC,QAAQ,EAAE;IACVC,OAAO;QACLC,aAAa,EAAE;QACfC,aAAa,EAAE;QACfC,qBAAqB,EAAE;QACvBC,YAAY,EAAE;QACdC,aAAa,EAAE;QACfC,SAAS,EAAE;QACXC,gBAAgB,EAAE;QAClBC,WAAW,EAAE;QACbC,cAAc,EAAE;QAChBC,cAAc,EAAE;QAChBC,cAAc,EAAE;QAChBC,aAAa,EAAE;QACfC,iBAAiB,EAAE;QACnBC,YAAY,EAAE;QACdC,gBAAgB,EAAE;IACpB;IACAC,YAAY;IACZC,QAAQ;IACRC,UAAU;AACZ,EAAC;AAED,OAAO,MAAMC,eAAe;IAC1BC,SAAS;QACPC,UAAU;QACVC,QAAQ;IACV;IACAC,gBAAgB,CAAC;IACjBC,UAAU;IACVC,kBAAkB;IAClBC,iBAAiB;IACjBC,QAAQ;AACV,EAAC"}
+{"version":3,"sources":["../../../src/collections/config/defaults.ts"],"sourcesContent":["import type { IncomingAuthType, LoginWithUsernameOptions } from '../../auth/types.js'\nimport type { CollectionConfig } from './types.js'\n\nimport defaultAccess from '../../auth/defaultAccess.js'\n\nexport const defaults: Partial<CollectionConfig> = {\n  access: {\n    create: defaultAccess,\n    delete: defaultAccess,\n    read: defaultAccess,\n    unlock: defaultAccess,\n    update: defaultAccess,\n  },\n  admin: {\n    components: {},\n    custom: {},\n    enableRichTextLink: true,\n    enableRichTextRelationship: true,\n    pagination: {\n      defaultLimit: 10,\n      limits: [5, 10, 25, 50, 100],\n    },\n    useAsTitle: 'id',\n  },\n  auth: false,\n  custom: {},\n  endpoints: [],\n  fields: [],\n  hooks: {\n    afterChange: [],\n    afterDelete: [],\n    afterForgotPassword: [],\n    afterLogin: [],\n    afterLogout: [],\n    afterMe: [],\n    afterOperation: [],\n    afterRead: [],\n    afterRefresh: [],\n    beforeChange: [],\n    beforeDelete: [],\n    beforeLogin: [],\n    beforeOperation: [],\n    beforeRead: [],\n    beforeValidate: [],\n    me: [],\n    refresh: [],\n  },\n  timestamps: true,\n  upload: false,\n  versions: false,\n}\n\nexport const authDefaults: IncomingAuthType = {\n  cookies: {\n    sameSite: 'Lax',\n    secure: false,\n  },\n  forgotPassword: {},\n  lockTime: 600000, // 10 minutes\n  loginWithUsername: false,\n  maxLoginAttempts: 5,\n  tokenExpiration: 7200,\n  verify: false,\n}\n\nexport const loginWithUsernameDefaults: LoginWithUsernameOptions = {\n  allowEmailLogin: false,\n  requireEmail: false,\n}\n"],"names":["defaultAccess","defaults","access","create","delete","read","unlock","update","admin","components","custom","enableRichTextLink","enableRichTextRelationship","pagination","defaultLimit","limits","useAsTitle","auth","endpoints","fields","hooks","afterChange","afterDelete","afterForgotPassword","afterLogin","afterLogout","afterMe","afterOperation","afterRead","afterRefresh","beforeChange","beforeDelete","beforeLogin","beforeOperation","beforeRead","beforeValidate","me","refresh","timestamps","upload","versions","authDefaults","cookies","sameSite","secure","forgotPassword","lockTime","loginWithUsername","maxLoginAttempts","tokenExpiration","verify","loginWithUsernameDefaults","allowEmailLogin","requireEmail"],"mappings":"AAGA,OAAOA,mBAAmB,8BAA6B;AAEvD,OAAO,MAAMC,WAAsC;IACjDC,QAAQ;QACNC,QAAQH;QACRI,QAAQJ;QACRK,MAAML;QACNM,QAAQN;QACRO,QAAQP;IACV;IACAQ,OAAO;QACLC,YAAY,CAAC;QACbC,QAAQ,CAAC;QACTC,oBAAoB;QACpBC,4BAA4B;QAC5BC,YAAY;YACVC,cAAc;YACdC,QAAQ;gBAAC;gBAAG;gBAAI;gBAAI;gBAAI;aAAI;QAC9B;QACAC,YAAY;IACd;IACAC,MAAM;IACNP,QAAQ,CAAC;IACTQ,WAAW,EAAE;IACbC,QAAQ,EAAE;IACVC,OAAO;QACLC,aAAa,EAAE;QACfC,aAAa,EAAE;QACfC,qBAAqB,EAAE;QACvBC,YAAY,EAAE;QACdC,aAAa,EAAE;QACfC,SAAS,EAAE;QACXC,gBAAgB,EAAE;QAClBC,WAAW,EAAE;QACbC,cAAc,EAAE;QAChBC,cAAc,EAAE;QAChBC,cAAc,EAAE;QAChBC,aAAa,EAAE;QACfC,iBAAiB,EAAE;QACnBC,YAAY,EAAE;QACdC,gBAAgB,EAAE;QAClBC,IAAI,EAAE;QACNC,SAAS,EAAE;IACb;IACAC,YAAY;IACZC,QAAQ;IACRC,UAAU;AACZ,EAAC;AAED,OAAO,MAAMC,eAAiC;IAC5CC,SAAS;QACPC,UAAU;QACVC,QAAQ;IACV;IACAC,gBAAgB,CAAC;IACjBC,UAAU;IACVC,mBAAmB;IACnBC,kBAAkB;IAClBC,iBAAiB;IACjBC,QAAQ;AACV,EAAC;AAED,OAAO,MAAMC,4BAAsD;IACjEC,iBAAiB;IACjBC,cAAc;AAChB,EAAC"}

package/dist/collections/config/reservedFieldNames.d.ts

@@ -0,0 +1,15 @@
+import type { Field } from '../../fields/config/types.js';
+import type { CollectionConfig } from '../../index.js';
+/**
+ * Sanitize fields for collections with auth config enabled.
+ *
+ * Should run on top level fields only.
+ */
+export declare const sanitizeAuthFields: (fields: Field[], config: CollectionConfig) => void;
+/**
+ * Sanitize fields for collections with upload config enabled.
+ *
+ * Should run on top level fields only.
+ */
+export declare const sanitizeUploadFields: (fields: Field[], config: CollectionConfig) => void;
+//# sourceMappingURL=reservedFieldNames.d.ts.map

package/dist/collections/config/reservedFieldNames.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reservedFieldNames.d.ts","sourceRoot":"","sources":["../../../src/collections/config/reservedFieldNames.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAA;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAsDtD;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,WAAY,KAAK,EAAE,UAAU,gBAAgB,SAsD3E,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,WAAY,KAAK,EAAE,UAAU,gBAAgB,SA4B7E,CAAA"}

package/dist/collections/config/reservedFieldNames.js

@@ -0,0 +1,104 @@
+import { ReservedFieldName } from '../../errors/ReservedFieldName.js';
+import { fieldAffectsData } from '../../fields/config/types.js';
+// Note for future reference: We've slimmed down the reserved field names but left them in here for reference in case it's needed in the future.
+/**
+ * Reserved field names for collections with auth config enabled
+ */ const reservedBaseAuthFieldNames = [
+    /* 'email',
+  'resetPasswordToken',
+  'resetPasswordExpiration', */ 'salt',
+    'hash'
+];
+/**
+ * Reserved field names for auth collections with verify: true
+ */ const reservedVerifyFieldNames = [];
+/**
+ * Reserved field names for auth collections with useApiKey: true
+ */ const reservedAPIKeyFieldNames = [];
+/**
+ * Reserved field names for collections with upload config enabled
+ */ const reservedBaseUploadFieldNames = [
+    'file'
+];
+/**
+ * Reserved field names for collections with versions enabled
+ */ const reservedVersionsFieldNames = [];
+/**
+ * Sanitize fields for collections with auth config enabled.
+ *
+ * Should run on top level fields only.
+ */ export const sanitizeAuthFields = (fields, config)=>{
+    for(let i = 0; i < fields.length; i++){
+        const field = fields[i];
+        if (fieldAffectsData(field) && field.name) {
+            if (config.auth && typeof config.auth === 'object' && !config.auth.disableLocalStrategy) {
+                const auth = config.auth;
+                if (reservedBaseAuthFieldNames.includes(field.name)) {
+                    throw new ReservedFieldName(field, field.name);
+                }
+                if (auth.verify) {
+                    if (reservedAPIKeyFieldNames.includes(field.name)) {
+                        throw new ReservedFieldName(field, field.name);
+                    }
+                }
+                /* if (auth.maxLoginAttempts) {
+          if (field.name === 'loginAttempts' || field.name === 'lockUntil') {
+            throw new ReservedFieldName(field, field.name)
+          }
+        } */ /* if (auth.loginWithUsername) {
+          if (field.name === 'username') {
+            throw new ReservedFieldName(field, field.name)
+          }
+        } */ if (auth.verify) {
+                    if (reservedVerifyFieldNames.includes(field.name)) {
+                        throw new ReservedFieldName(field, field.name);
+                    }
+                }
+            }
+        }
+        // Handle tabs without a name
+        if (field.type === 'tabs') {
+            for(let j = 0; j < field.tabs.length; j++){
+                const tab = field.tabs[j];
+                if (!('name' in tab)) {
+                    sanitizeAuthFields(tab.fields, config);
+                }
+            }
+        }
+        // Handle presentational fields like rows and collapsibles
+        if (!fieldAffectsData(field) && 'fields' in field && field.fields) {
+            sanitizeAuthFields(field.fields, config);
+        }
+    }
+};
+/**
+ * Sanitize fields for collections with upload config enabled.
+ *
+ * Should run on top level fields only.
+ */ export const sanitizeUploadFields = (fields, config)=>{
+    if (config.upload && typeof config.upload === 'object') {
+        for(let i = 0; i < fields.length; i++){
+            const field = fields[i];
+            if (fieldAffectsData(field) && field.name) {
+                if (reservedBaseUploadFieldNames.includes(field.name)) {
+                    throw new ReservedFieldName(field, field.name);
+                }
+            }
+            // Handle tabs without a name
+            if (field.type === 'tabs') {
+                for(let j = 0; j < field.tabs.length; j++){
+                    const tab = field.tabs[j];
+                    if (!('name' in tab)) {
+                        sanitizeUploadFields(tab.fields, config);
+                    }
+                }
+            }
+            // Handle presentational fields like rows and collapsibles
+            if (!fieldAffectsData(field) && 'fields' in field && field.fields) {
+                sanitizeUploadFields(field.fields, config);
+            }
+        }
+    }
+};
+
+//# sourceMappingURL=reservedFieldNames.js.map

package/dist/collections/config/reservedFieldNames.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/collections/config/reservedFieldNames.ts"],"sourcesContent":["import type { Field } from '../../fields/config/types.js'\nimport type { CollectionConfig } from '../../index.js'\n\nimport { ReservedFieldName } from '../../errors/ReservedFieldName.js'\nimport { fieldAffectsData } from '../../fields/config/types.js'\n\n// Note for future reference: We've slimmed down the reserved field names but left them in here for reference in case it's needed in the future.\n\n/**\n * Reserved field names for collections with auth config enabled\n */\nconst reservedBaseAuthFieldNames = [\n  /* 'email',\n  'resetPasswordToken',\n  'resetPasswordExpiration', */\n  'salt',\n  'hash',\n]\n/**\n * Reserved field names for auth collections with verify: true\n */\nconst reservedVerifyFieldNames = [\n  /* '_verified', '_verificationToken' */\n]\n/**\n * Reserved field names for auth collections with useApiKey: true\n */\nconst reservedAPIKeyFieldNames = [\n  /* 'enableAPIKey', 'apiKeyIndex', 'apiKey' */\n]\n\n/**\n * Reserved field names for collections with upload config enabled\n */\nconst reservedBaseUploadFieldNames = [\n  'file',\n  /* 'mimeType',\n  'thumbnailURL',\n  'width',\n  'height',\n  'filesize',\n  'filename',\n  'url',\n  'focalX',\n  'focalY',\n  'sizes', */\n]\n\n/**\n * Reserved field names for collections with versions enabled\n */\nconst reservedVersionsFieldNames = [\n  /* '__v', '_status' */\n]\n\n/**\n * Sanitize fields for collections with auth config enabled.\n *\n * Should run on top level fields only.\n */\nexport const sanitizeAuthFields = (fields: Field[], config: CollectionConfig) => {\n  for (let i = 0; i < fields.length; i++) {\n    const field = fields[i]\n\n    if (fieldAffectsData(field) && field.name) {\n      if (config.auth && typeof config.auth === 'object' && !config.auth.disableLocalStrategy) {\n        const auth = config.auth\n\n        if (reservedBaseAuthFieldNames.includes(field.name)) {\n          throw new ReservedFieldName(field, field.name)\n        }\n\n        if (auth.verify) {\n          if (reservedAPIKeyFieldNames.includes(field.name)) {\n            throw new ReservedFieldName(field, field.name)\n          }\n        }\n\n        /* if (auth.maxLoginAttempts) {\n          if (field.name === 'loginAttempts' || field.name === 'lockUntil') {\n            throw new ReservedFieldName(field, field.name)\n          }\n        } */\n\n        /* if (auth.loginWithUsername) {\n          if (field.name === 'username') {\n            throw new ReservedFieldName(field, field.name)\n          }\n        } */\n\n        if (auth.verify) {\n          if (reservedVerifyFieldNames.includes(field.name)) {\n            throw new ReservedFieldName(field, field.name)\n          }\n        }\n      }\n    }\n\n    // Handle tabs without a name\n    if (field.type === 'tabs') {\n      for (let j = 0; j < field.tabs.length; j++) {\n        const tab = field.tabs[j]\n\n        if (!('name' in tab)) {\n          sanitizeAuthFields(tab.fields, config)\n        }\n      }\n    }\n\n    // Handle presentational fields like rows and collapsibles\n    if (!fieldAffectsData(field) && 'fields' in field && field.fields) {\n      sanitizeAuthFields(field.fields, config)\n    }\n  }\n}\n\n/**\n * Sanitize fields for collections with upload config enabled.\n *\n * Should run on top level fields only.\n */\nexport const sanitizeUploadFields = (fields: Field[], config: CollectionConfig) => {\n  if (config.upload && typeof config.upload === 'object') {\n    for (let i = 0; i < fields.length; i++) {\n      const field = fields[i]\n\n      if (fieldAffectsData(field) && field.name) {\n        if (reservedBaseUploadFieldNames.includes(field.name)) {\n          throw new ReservedFieldName(field, field.name)\n        }\n      }\n\n      // Handle tabs without a name\n      if (field.type === 'tabs') {\n        for (let j = 0; j < field.tabs.length; j++) {\n          const tab = field.tabs[j]\n\n          if (!('name' in tab)) {\n            sanitizeUploadFields(tab.fields, config)\n          }\n        }\n      }\n\n      // Handle presentational fields like rows and collapsibles\n      if (!fieldAffectsData(field) && 'fields' in field && field.fields) {\n        sanitizeUploadFields(field.fields, config)\n      }\n    }\n  }\n}\n"],"names":["ReservedFieldName","fieldAffectsData","reservedBaseAuthFieldNames","reservedVerifyFieldNames","reservedAPIKeyFieldNames","reservedBaseUploadFieldNames","reservedVersionsFieldNames","sanitizeAuthFields","fields","config","i","length","field","name","auth","disableLocalStrategy","includes","verify","type","j","tabs","tab","sanitizeUploadFields","upload"],"mappings":"AAGA,SAASA,iBAAiB,QAAQ,oCAAmC;AACrE,SAASC,gBAAgB,QAAQ,+BAA8B;AAE/D,gJAAgJ;AAEhJ;;CAEC,GACD,MAAMC,6BAA6B;IACjC;;6BAE2B,GAC3B;IACA;CACD;AACD;;CAEC,GACD,MAAMC,2BAA2B,EAEhC;AACD;;CAEC,GACD,MAAMC,2BAA2B,EAEhC;AAED;;CAEC,GACD,MAAMC,+BAA+B;IACnC;CAWD;AAED;;CAEC,GACD,MAAMC,6BAA6B,EAElC;AAED;;;;CAIC,GACD,OAAO,MAAMC,qBAAqB,CAACC,QAAiBC;IAClD,IAAK,IAAIC,IAAI,GAAGA,IAAIF,OAAOG,MAAM,EAAED,IAAK;QACtC,MAAME,QAAQJ,MAAM,CAACE,EAAE;QAEvB,IAAIT,iBAAiBW,UAAUA,MAAMC,IAAI,EAAE;YACzC,IAAIJ,OAAOK,IAAI,IAAI,OAAOL,OAAOK,IAAI,KAAK,YAAY,CAACL,OAAOK,IAAI,CAACC,oBAAoB,EAAE;gBACvF,MAAMD,OAAOL,OAAOK,IAAI;gBAExB,IAAIZ,2BAA2Bc,QAAQ,CAACJ,MAAMC,IAAI,GAAG;oBACnD,MAAM,IAAIb,kBAAkBY,OAAOA,MAAMC,IAAI;gBAC/C;gBAEA,IAAIC,KAAKG,MAAM,EAAE;oBACf,IAAIb,yBAAyBY,QAAQ,CAACJ,MAAMC,IAAI,GAAG;wBACjD,MAAM,IAAIb,kBAAkBY,OAAOA,MAAMC,IAAI;oBAC/C;gBACF;gBAEA;;;;UAIE,GAEF;;;;UAIE,GAEF,IAAIC,KAAKG,MAAM,EAAE;oBACf,IAAId,yBAAyBa,QAAQ,CAACJ,MAAMC,IAAI,GAAG;wBACjD,MAAM,IAAIb,kBAAkBY,OAAOA,MAAMC,IAAI;oBAC/C;gBACF;YACF;QACF;QAEA,6BAA6B;QAC7B,IAAID,MAAMM,IAAI,KAAK,QAAQ;YACzB,IAAK,IAAIC,IAAI,GAAGA,IAAIP,MAAMQ,IAAI,CAACT,MAAM,EAAEQ,IAAK;gBAC1C,MAAME,MAAMT,MAAMQ,IAAI,CAACD,EAAE;gBAEzB,IAAI,CAAE,CAAA,UAAUE,GAAE,GAAI;oBACpBd,mBAAmBc,IAAIb,MAAM,EAAEC;gBACjC;YACF;QACF;QAEA,0DAA0D;QAC1D,IAAI,CAACR,iBAAiBW,UAAU,YAAYA,SAASA,MAAMJ,MAAM,EAAE;YACjED,mBAAmBK,MAAMJ,MAAM,EAAEC;QACnC;IACF;AACF,EAAC;AAED;;;;CAIC,GACD,OAAO,MAAMa,uBAAuB,CAACd,QAAiBC;IACpD,IAAIA,OAAOc,MAAM,IAAI,OAAOd,OAAOc,MAAM,KAAK,UAAU;QACtD,IAAK,IAAIb,IAAI,GAAGA,IAAIF,OAAOG,MAAM,EAAED,IAAK;YACtC,MAAME,QAAQJ,MAAM,CAACE,EAAE;YAEvB,IAAIT,iBAAiBW,UAAUA,MAAMC,IAAI,EAAE;gBACzC,IAAIR,6BAA6BW,QAAQ,CAACJ,MAAMC,IAAI,GAAG;oBACrD,MAAM,IAAIb,kBAAkBY,OAAOA,MAAMC,IAAI;gBAC/C;YACF;YAEA,6BAA6B;YAC7B,IAAID,MAAMM,IAAI,KAAK,QAAQ;gBACzB,IAAK,IAAIC,IAAI,GAAGA,IAAIP,MAAMQ,IAAI,CAACT,MAAM,EAAEQ,IAAK;oBAC1C,MAAME,MAAMT,MAAMQ,IAAI,CAACD,EAAE;oBAEzB,IAAI,CAAE,CAAA,UAAUE,GAAE,GAAI;wBACpBC,qBAAqBD,IAAIb,MAAM,EAAEC;oBACnC;gBACF;YACF;YAEA,0DAA0D;YAC1D,IAAI,CAACR,iBAAiBW,UAAU,YAAYA,SAASA,MAAMJ,MAAM,EAAE;gBACjEc,qBAAqBV,MAAMJ,MAAM,EAAEC;YACrC;QACF;IACF;AACF,EAAC"}

package/dist/collections/config/reservedFieldNames.spec.js

@@ -0,0 +1,148 @@
+import { ReservedFieldName } from '../../errors/index.js';
+import { sanitizeCollection } from './sanitize.js';
+describe('reservedFieldNames - collections -', ()=>{
+    const config = {
+        collections: [],
+        globals: []
+    };
+    describe('uploads -', ()=>{
+        const collectionWithUploads = {
+            slug: 'collection-with-uploads',
+            fields: [],
+            upload: true
+        };
+        it('should throw on file', async ()=>{
+            const fields = [
+                {
+                    name: 'file',
+                    type: 'text',
+                    label: 'some-collection'
+                }
+            ];
+            await expect(async ()=>{
+                await sanitizeCollection(// @ts-expect-error
+                {
+                    ...config,
+                    collections: [
+                        {
+                            ...collectionWithUploads,
+                            fields
+                        }
+                    ]
+                }, {
+                    ...collectionWithUploads,
+                    fields
+                });
+            }).rejects.toThrow(ReservedFieldName);
+        });
+        it('should not throw on a custom field', async ()=>{
+            const fields = [
+                {
+                    name: 'customField',
+                    type: 'text',
+                    label: 'some-collection'
+                }
+            ];
+            await expect(async ()=>{
+                await sanitizeCollection(// @ts-expect-error
+                {
+                    ...config,
+                    collections: [
+                        {
+                            ...collectionWithUploads,
+                            fields
+                        }
+                    ]
+                }, {
+                    ...collectionWithUploads,
+                    fields
+                });
+            }).not.toThrow();
+        });
+    });
+    describe('auth -', ()=>{
+        const collectionWithAuth = {
+            slug: 'collection-with-auth',
+            fields: [],
+            auth: {
+                verify: true,
+                useAPIKey: true,
+                loginWithUsername: true
+            }
+        };
+        it('should throw on hash', async ()=>{
+            const fields = [
+                {
+                    name: 'hash',
+                    type: 'text',
+                    label: 'some-collection'
+                }
+            ];
+            await expect(async ()=>{
+                await sanitizeCollection(// @ts-expect-error
+                {
+                    ...config,
+                    collections: [
+                        {
+                            ...collectionWithAuth,
+                            fields
+                        }
+                    ]
+                }, {
+                    ...collectionWithAuth,
+                    fields
+                });
+            }).rejects.toThrow(ReservedFieldName);
+        });
+        it('should throw on salt', async ()=>{
+            const fields = [
+                {
+                    name: 'salt',
+                    type: 'text',
+                    label: 'some-collection'
+                }
+            ];
+            await expect(async ()=>{
+                await sanitizeCollection(// @ts-expect-error
+                {
+                    ...config,
+                    collections: [
+                        {
+                            ...collectionWithAuth,
+                            fields
+                        }
+                    ]
+                }, {
+                    ...collectionWithAuth,
+                    fields
+                });
+            }).rejects.toThrow(ReservedFieldName);
+        });
+        it('should not throw on a custom field', async ()=>{
+            const fields = [
+                {
+                    name: 'customField',
+                    type: 'text',
+                    label: 'some-collection'
+                }
+            ];
+            await expect(async ()=>{
+                await sanitizeCollection(// @ts-expect-error
+                {
+                    ...config,
+                    collections: [
+                        {
+                            ...collectionWithAuth,
+                            fields
+                        }
+                    ]
+                }, {
+                    ...collectionWithAuth,
+                    fields
+                });
+            }).not.toThrow();
+        });
+    });
+});
+
+//# sourceMappingURL=reservedFieldNames.spec.js.map

package/dist/collections/config/reservedFieldNames.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/collections/config/reservedFieldNames.spec.ts"],"sourcesContent":["import type { Config } from '../../config/types.js'\nimport type { CollectionConfig, Field } from '../../index.js'\n\nimport { ReservedFieldName } from '../../errors/index.js'\nimport { sanitizeCollection } from './sanitize.js'\n\ndescribe('reservedFieldNames - collections -', () => {\n  const config = {\n    collections: [],\n    globals: [],\n  } as Partial<Config>\n\n  describe('uploads -', () => {\n    const collectionWithUploads: CollectionConfig = {\n      slug: 'collection-with-uploads',\n      fields: [],\n      upload: true,\n    }\n\n    it('should throw on file', async () => {\n      const fields: Field[] = [\n        {\n          name: 'file',\n          type: 'text',\n          label: 'some-collection',\n        },\n      ]\n      await expect(async () => {\n        await sanitizeCollection(\n          // @ts-expect-error\n          {\n            ...config,\n            collections: [\n              {\n                ...collectionWithUploads,\n                fields,\n              },\n            ],\n          },\n          {\n            ...collectionWithUploads,\n            fields,\n          },\n        )\n      }).rejects.toThrow(ReservedFieldName)\n    })\n\n    it('should not throw on a custom field', async () => {\n      const fields: Field[] = [\n        {\n          name: 'customField',\n          type: 'text',\n          label: 'some-collection',\n        },\n      ]\n      await expect(async () => {\n        await sanitizeCollection(\n          // @ts-expect-error\n          {\n            ...config,\n            collections: [\n              {\n                ...collectionWithUploads,\n                fields,\n              },\n            ],\n          },\n          {\n            ...collectionWithUploads,\n            fields,\n          },\n        )\n      }).not.toThrow()\n    })\n  })\n\n  describe('auth -', () => {\n    const collectionWithAuth: CollectionConfig = {\n      slug: 'collection-with-auth',\n      fields: [],\n      auth: {\n        verify: true,\n        useAPIKey: true,\n        loginWithUsername: true,\n      },\n    }\n\n    it('should throw on hash', async () => {\n      const fields: Field[] = [\n        {\n          name: 'hash',\n          type: 'text',\n          label: 'some-collection',\n        },\n      ]\n      await expect(async () => {\n        await sanitizeCollection(\n          // @ts-expect-error\n          {\n            ...config,\n            collections: [\n              {\n                ...collectionWithAuth,\n                fields,\n              },\n            ],\n          },\n          {\n            ...collectionWithAuth,\n            fields,\n          },\n        )\n      }).rejects.toThrow(ReservedFieldName)\n    })\n\n    it('should throw on salt', async () => {\n      const fields: Field[] = [\n        {\n          name: 'salt',\n          type: 'text',\n          label: 'some-collection',\n        },\n      ]\n      await expect(async () => {\n        await sanitizeCollection(\n          // @ts-expect-error\n          {\n            ...config,\n            collections: [\n              {\n                ...collectionWithAuth,\n                fields,\n              },\n            ],\n          },\n          {\n            ...collectionWithAuth,\n            fields,\n          },\n        )\n      }).rejects.toThrow(ReservedFieldName)\n    })\n\n    it('should not throw on a custom field', async () => {\n      const fields: Field[] = [\n        {\n          name: 'customField',\n          type: 'text',\n          label: 'some-collection',\n        },\n      ]\n      await expect(async () => {\n        await sanitizeCollection(\n          // @ts-expect-error\n          {\n            ...config,\n            collections: [\n              {\n                ...collectionWithAuth,\n                fields,\n              },\n            ],\n          },\n          {\n            ...collectionWithAuth,\n            fields,\n          },\n        )\n      }).not.toThrow()\n    })\n  })\n})\n"],"names":["ReservedFieldName","sanitizeCollection","describe","config","collections","globals","collectionWithUploads","slug","fields","upload","it","name","type","label","expect","rejects","toThrow","not","collectionWithAuth","auth","verify","useAPIKey","loginWithUsername"],"mappings":"AAGA,SAASA,iBAAiB,QAAQ,wBAAuB;AACzD,SAASC,kBAAkB,QAAQ,gBAAe;AAElDC,SAAS,sCAAsC;IAC7C,MAAMC,SAAS;QACbC,aAAa,EAAE;QACfC,SAAS,EAAE;IACb;IAEAH,SAAS,aAAa;QACpB,MAAMI,wBAA0C;YAC9CC,MAAM;YACNC,QAAQ,EAAE;YACVC,QAAQ;QACV;QAEAC,GAAG,wBAAwB;YACzB,MAAMF,SAAkB;gBACtB;oBACEG,MAAM;oBACNC,MAAM;oBACNC,OAAO;gBACT;aACD;YACD,MAAMC,OAAO;gBACX,MAAMb,mBACJ,mBAAmB;gBACnB;oBACE,GAAGE,MAAM;oBACTC,aAAa;wBACX;4BACE,GAAGE,qBAAqB;4BACxBE;wBACF;qBACD;gBACH,GACA;oBACE,GAAGF,qBAAqB;oBACxBE;gBACF;YAEJ,GAAGO,OAAO,CAACC,OAAO,CAAChB;QACrB;QAEAU,GAAG,sCAAsC;YACvC,MAAMF,SAAkB;gBACtB;oBACEG,MAAM;oBACNC,MAAM;oBACNC,OAAO;gBACT;aACD;YACD,MAAMC,OAAO;gBACX,MAAMb,mBACJ,mBAAmB;gBACnB;oBACE,GAAGE,MAAM;oBACTC,aAAa;wBACX;4BACE,GAAGE,qBAAqB;4BACxBE;wBACF;qBACD;gBACH,GACA;oBACE,GAAGF,qBAAqB;oBACxBE;gBACF;YAEJ,GAAGS,GAAG,CAACD,OAAO;QAChB;IACF;IAEAd,SAAS,UAAU;QACjB,MAAMgB,qBAAuC;YAC3CX,MAAM;YACNC,QAAQ,EAAE;YACVW,MAAM;gBACJC,QAAQ;gBACRC,WAAW;gBACXC,mBAAmB;YACrB;QACF;QAEAZ,GAAG,wBAAwB;YACzB,MAAMF,SAAkB;gBACtB;oBACEG,MAAM;oBACNC,MAAM;oBACNC,OAAO;gBACT;aACD;YACD,MAAMC,OAAO;gBACX,MAAMb,mBACJ,mBAAmB;gBACnB;oBACE,GAAGE,MAAM;oBACTC,aAAa;wBACX;4BACE,GAAGc,kBAAkB;4BACrBV;wBACF;qBACD;gBACH,GACA;oBACE,GAAGU,kBAAkB;oBACrBV;gBACF;YAEJ,GAAGO,OAAO,CAACC,OAAO,CAAChB;QACrB;QAEAU,GAAG,wBAAwB;YACzB,MAAMF,SAAkB;gBACtB;oBACEG,MAAM;oBACNC,MAAM;oBACNC,OAAO;gBACT;aACD;YACD,MAAMC,OAAO;gBACX,MAAMb,mBACJ,mBAAmB;gBACnB;oBACE,GAAGE,MAAM;oBACTC,aAAa;wBACX;4BACE,GAAGc,kBAAkB;4BACrBV;wBACF;qBACD;gBACH,GACA;oBACE,GAAGU,kBAAkB;oBACrBV;gBACF;YAEJ,GAAGO,OAAO,CAACC,OAAO,CAAChB;QACrB;QAEAU,GAAG,sCAAsC;YACvC,MAAMF,SAAkB;gBACtB;oBACEG,MAAM;oBACNC,MAAM;oBACNC,OAAO;gBACT;aACD;YACD,MAAMC,OAAO;gBACX,MAAMb,mBACJ,mBAAmB;gBACnB;oBACE,GAAGE,MAAM;oBACTC,aAAa;wBACX;4BACE,GAAGc,kBAAkB;4BACrBV;wBACF;qBACD;gBACH,GACA;oBACE,GAAGU,kBAAkB;oBACrBV;gBACF;YAEJ,GAAGS,GAAG,CAACD,OAAO;QAChB;IACF;AACF"}

package/dist/collections/config/sanitize.d.ts

@@ -1,5 +1,4 @@
-import type { Config } from '../../config/types.js';
+import type { Config, SanitizedConfig } from '../../config/types.js';
 import type { CollectionConfig, SanitizedCollectionConfig } from './types.js';
-declare const sanitizeCollection: (config: Config, collection: CollectionConfig) => SanitizedCollectionConfig;
-export default sanitizeCollection;
+export declare const sanitizeCollection: (config: Config, collection: CollectionConfig, richTextSanitizationPromises?: Array<(config: SanitizedConfig) => Promise<void>>) => Promise<SanitizedCollectionConfig>;
 //# sourceMappingURL=sanitize.d.ts.map

package/dist/collections/config/sanitize.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../../src/collections/config/sanitize.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAA;AAgB7E,QAAA,MAAM,kBAAkB,WACd,MAAM,cACF,gBAAgB,KAC3B,yBA0IF,CAAA;AAED,eAAe,kBAAkB,CAAA"}
+{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../../src/collections/config/sanitize.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAA;AAe7E,eAAO,MAAM,kBAAkB,WACrB,MAAM,cACF,gBAAgB,iCAKG,KAAK,CAAC,CAAC,MAAM,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,KAC/E,OAAO,CAAC,yBAAyB,CAgJnC,CAAA"}

package/dist/collections/config/sanitize.js

@@ -1,23 +1,33 @@
-import merge from 'deepmerge';
-import baseAccountLockFields from '../../auth/baseFields/accountLock.js';
-import baseAPIKeyFields from '../../auth/baseFields/apiKey.js';
-import baseAuthFields from '../../auth/baseFields/auth.js';
-import baseVerificationFields from '../../auth/baseFields/verification.js';
-import TimestampsRequired from '../../errors/TimestampsRequired.js';
+import { getBaseAuthFields } from '../../auth/getAuthFields.js';
+import { TimestampsRequired } from '../../errors/TimestampsRequired.js';
 import { sanitizeFields } from '../../fields/config/sanitize.js';
 import { fieldAffectsData } from '../../fields/config/types.js';
 import mergeBaseFields from '../../fields/mergeBaseFields.js';
 import { getBaseUploadFields } from '../../uploads/getBaseFields.js';
+import { deepMergeWithReactComponents } from '../../utilities/deepMerge.js';
 import { formatLabels } from '../../utilities/formatLabels.js';
-import { isPlainObject } from '../../utilities/isPlainObject.js';
 import baseVersionFields from '../../versions/baseFields.js';
-import { authDefaults, defaults } from './defaults.js';
-const sanitizeCollection = (config, collection)=>{
+import { versionDefaults } from '../../versions/defaults.js';
+import { authDefaults, defaults, loginWithUsernameDefaults } from './defaults.js';
+import { sanitizeAuthFields, sanitizeUploadFields } from './reservedFieldNames.js';
+export const sanitizeCollection = async (config, collection, /**
+   * If this property is set, RichText fields won't be sanitized immediately. Instead, they will be added to this array as promises
+   * so that you can sanitize them together, after the config has been sanitized.
+   */ richTextSanitizationPromises)=>{
     // /////////////////////////////////
     // Make copy of collection config
     // /////////////////////////////////
-    const sanitized = merge(defaults, collection, {
-        isMergeableObject: isPlainObject
+    const sanitized = deepMergeWithReactComponents(defaults, collection);
+    // /////////////////////////////////
+    // Sanitize fields
+    // /////////////////////////////////
+    const validRelationships = config.collections.map((c)=>c.slug) || [];
+    sanitized.fields = await sanitizeFields({
+        collectionConfig: sanitized,
+        config,
+        fields: sanitized.fields,
+        richTextSanitizationPromises,
+        validRelationships
     });
     if (sanitized.timestamps !== false) {
         // add default timestamps fields only as needed
@@ -66,19 +76,25 @@ const sanitizeCollection = (config, collection)=>{
         if (sanitized.versions.drafts) {
             if (sanitized.versions.drafts === true) {
                 sanitized.versions.drafts = {
-                    autosave: false
+                    autosave: false,
+                    validate: false
                 };
             }
             if (sanitized.versions.drafts.autosave === true) {
                 sanitized.versions.drafts.autosave = {
-                    interval: 2000
+                    interval: versionDefaults.autosaveInterval
                 };
             }
+            if (sanitized.versions.drafts.validate === undefined) {
+                sanitized.versions.drafts.validate = false;
+            }
             sanitized.fields = mergeBaseFields(sanitized.fields, baseVersionFields);
         }
     }
     if (sanitized.upload) {
         if (sanitized.upload === true) sanitized.upload = {};
+        // sanitize fields for reserved names
+        sanitizeUploadFields(sanitized.fields, sanitized);
         // disable duplicate for uploads by default
         sanitized.disableDuplicate = sanitized.disableDuplicate || true;
         sanitized.upload.staticDir = sanitized.upload.staticDir || sanitized.slug;
@@ -90,41 +106,24 @@ const sanitizeCollection = (config, collection)=>{
         sanitized.fields = mergeBaseFields(sanitized.fields, uploadFields);
     }
     if (sanitized.auth) {
-        sanitized.auth = merge(authDefaults, typeof sanitized.auth === 'object' ? sanitized.auth : {}, {
-            isMergeableObject: isPlainObject
-        });
-        let authFields = [];
-        if (sanitized.auth.useAPIKey) {
-            authFields = authFields.concat(baseAPIKeyFields);
-        }
-        if (!sanitized.auth.disableLocalStrategy) {
-            authFields = authFields.concat(baseAuthFields);
-            if (sanitized.auth.verify) {
-                if (sanitized.auth.verify === true) sanitized.auth.verify = {};
-                authFields = authFields.concat(baseVerificationFields);
-            }
-            if (sanitized.auth.maxLoginAttempts > 0) {
-                authFields = authFields.concat(baseAccountLockFields);
-            }
+        // sanitize fields for reserved names
+        sanitizeAuthFields(sanitized.fields, sanitized);
+        sanitized.auth = deepMergeWithReactComponents(authDefaults, typeof sanitized.auth === 'object' ? sanitized.auth : {});
+        if (!sanitized.auth.disableLocalStrategy && sanitized.auth.verify === true) {
+            sanitized.auth.verify = {};
         }
         // disable duplicate for auth enabled collections by default
         sanitized.disableDuplicate = sanitized.disableDuplicate || true;
         if (!sanitized.auth.strategies) {
             sanitized.auth.strategies = [];
         }
-        sanitized.fields = mergeBaseFields(sanitized.fields, authFields);
+        sanitized.auth.loginWithUsername = sanitized.auth.loginWithUsername ? {
+            ...loginWithUsernameDefaults,
+            ...typeof sanitized.auth.loginWithUsername === 'boolean' ? {} : sanitized.auth.loginWithUsername
+        } : false;
+        sanitized.fields = mergeBaseFields(sanitized.fields, getBaseAuthFields(sanitized.auth));
     }
-    // /////////////////////////////////
-    // Sanitize fields
-    // /////////////////////////////////
-    const validRelationships = config.collections.map((c)=>c.slug) || [];
-    sanitized.fields = sanitizeFields({
-        config,
-        fields: sanitized.fields,
-        validRelationships
-    });
     return sanitized;
 };
-export default sanitizeCollection;
 
 //# sourceMappingURL=sanitize.js.map

package/dist/collections/config/sanitize.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/collections/config/sanitize.ts"],"sourcesContent":["import merge from 'deepmerge'\n\nimport type { Config } from '../../config/types.js'\nimport type { CollectionConfig, SanitizedCollectionConfig } from './types.js'\n\nimport baseAccountLockFields from '../../auth/baseFields/accountLock.js'\nimport baseAPIKeyFields from '../../auth/baseFields/apiKey.js'\nimport baseAuthFields from '../../auth/baseFields/auth.js'\nimport baseVerificationFields from '../../auth/baseFields/verification.js'\nimport TimestampsRequired from '../../errors/TimestampsRequired.js'\nimport { sanitizeFields } from '../../fields/config/sanitize.js'\nimport { fieldAffectsData } from '../../fields/config/types.js'\nimport mergeBaseFields from '../../fields/mergeBaseFields.js'\nimport { getBaseUploadFields } from '../../uploads/getBaseFields.js'\nimport { formatLabels } from '../../utilities/formatLabels.js'\nimport { isPlainObject } from '../../utilities/isPlainObject.js'\nimport baseVersionFields from '../../versions/baseFields.js'\nimport { authDefaults, defaults } from './defaults.js'\n\nconst sanitizeCollection = (\n  config: Config,\n  collection: CollectionConfig,\n): SanitizedCollectionConfig => {\n  // /////////////////////////////////\n  // Make copy of collection config\n  // /////////////////////////////////\n\n  const sanitized: CollectionConfig = merge(defaults, collection, {\n    isMergeableObject: isPlainObject,\n  })\n\n  if (sanitized.timestamps !== false) {\n    // add default timestamps fields only as needed\n    let hasUpdatedAt = null\n    let hasCreatedAt = null\n    sanitized.fields.some((field) => {\n      if (fieldAffectsData(field)) {\n        if (field.name === 'updatedAt') hasUpdatedAt = true\n        if (field.name === 'createdAt') hasCreatedAt = true\n      }\n      return hasCreatedAt && hasUpdatedAt\n    })\n    if (!hasUpdatedAt) {\n      sanitized.fields.push({\n        name: 'updatedAt',\n        type: 'date',\n        admin: {\n          disableBulkEdit: true,\n          hidden: true,\n        },\n        label: ({ t }) => t('general:updatedAt'),\n      })\n    }\n    if (!hasCreatedAt) {\n      sanitized.fields.push({\n        name: 'createdAt',\n        admin: {\n          disableBulkEdit: true,\n          hidden: true,\n        },\n        // The default sort for list view is createdAt. Thus, enabling indexing by default, is a major performance improvement, especially for large or a large amount of collections.\n        type: 'date',\n        index: true,\n        label: ({ t }) => t('general:createdAt'),\n      })\n    }\n  }\n\n  sanitized.labels = sanitized.labels || formatLabels(sanitized.slug)\n\n  if (sanitized.versions) {\n    if (sanitized.versions === true) sanitized.versions = { drafts: false }\n\n    if (sanitized.timestamps === false) {\n      throw new TimestampsRequired(collection)\n    }\n\n    if (sanitized.versions.drafts) {\n      if (sanitized.versions.drafts === true) {\n        sanitized.versions.drafts = {\n          autosave: false,\n        }\n      }\n\n      if (sanitized.versions.drafts.autosave === true) {\n        sanitized.versions.drafts.autosave = {\n          interval: 2000,\n        }\n      }\n\n      sanitized.fields = mergeBaseFields(sanitized.fields, baseVersionFields)\n    }\n  }\n\n  if (sanitized.upload) {\n    if (sanitized.upload === true) sanitized.upload = {}\n\n    // disable duplicate for uploads by default\n    sanitized.disableDuplicate = sanitized.disableDuplicate || true\n\n    sanitized.upload.staticDir = sanitized.upload.staticDir || sanitized.slug\n    sanitized.admin.useAsTitle =\n      sanitized.admin.useAsTitle && sanitized.admin.useAsTitle !== 'id'\n        ? sanitized.admin.useAsTitle\n        : 'filename'\n\n    const uploadFields = getBaseUploadFields({\n      collection: sanitized,\n      config,\n    })\n\n    sanitized.fields = mergeBaseFields(sanitized.fields, uploadFields)\n  }\n\n  if (sanitized.auth) {\n    sanitized.auth = merge(authDefaults, typeof sanitized.auth === 'object' ? sanitized.auth : {}, {\n      isMergeableObject: isPlainObject,\n    })\n\n    let authFields = []\n\n    if (sanitized.auth.useAPIKey) {\n      authFields = authFields.concat(baseAPIKeyFields)\n    }\n\n    if (!sanitized.auth.disableLocalStrategy) {\n      authFields = authFields.concat(baseAuthFields)\n\n      if (sanitized.auth.verify) {\n        if (sanitized.auth.verify === true) sanitized.auth.verify = {}\n        authFields = authFields.concat(baseVerificationFields)\n      }\n\n      if (sanitized.auth.maxLoginAttempts > 0) {\n        authFields = authFields.concat(baseAccountLockFields)\n      }\n    }\n\n    // disable duplicate for auth enabled collections by default\n    sanitized.disableDuplicate = sanitized.disableDuplicate || true\n\n    if (!sanitized.auth.strategies) {\n      sanitized.auth.strategies = []\n    }\n\n    sanitized.fields = mergeBaseFields(sanitized.fields, authFields)\n  }\n\n  // /////////////////////////////////\n  // Sanitize fields\n  // /////////////////////////////////\n\n  const validRelationships = config.collections.map((c) => c.slug) || []\n  sanitized.fields = sanitizeFields({\n    config,\n    fields: sanitized.fields,\n    validRelationships,\n  })\n\n  return sanitized as SanitizedCollectionConfig\n}\n\nexport default sanitizeCollection\n"],"names":["merge","baseAccountLockFields","baseAPIKeyFields","baseAuthFields","baseVerificationFields","TimestampsRequired","sanitizeFields","fieldAffectsData","mergeBaseFields","getBaseUploadFields","formatLabels","isPlainObject","baseVersionFields","authDefaults","defaults","sanitizeCollection","config","collection","sanitized","isMergeableObject","timestamps","hasUpdatedAt","hasCreatedAt","fields","some","field","name","push","type","admin","disableBulkEdit","hidden","label","t","index","labels","slug","versions","drafts","autosave","interval","upload","disableDuplicate","staticDir","useAsTitle","uploadFields","auth","authFields","useAPIKey","concat","disableLocalStrategy","verify","maxLoginAttempts","strategies","validRelationships","collections","map","c"],"rangeMappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;","mappings":"AAAA,OAAOA,WAAW,YAAW;AAK7B,OAAOC,2BAA2B,uCAAsC;AACxE,OAAOC,sBAAsB,kCAAiC;AAC9D,OAAOC,oBAAoB,gCAA+B;AAC1D,OAAOC,4BAA4B,wCAAuC;AAC1E,OAAOC,wBAAwB,qCAAoC;AACnE,SAASC,cAAc,QAAQ,kCAAiC;AAChE,SAASC,gBAAgB,QAAQ,+BAA8B;AAC/D,OAAOC,qBAAqB,kCAAiC;AAC7D,SAASC,mBAAmB,QAAQ,iCAAgC;AACpE,SAASC,YAAY,QAAQ,kCAAiC;AAC9D,SAASC,aAAa,QAAQ,mCAAkC;AAChE,OAAOC,uBAAuB,+BAA8B;AAC5D,SAASC,YAAY,EAAEC,QAAQ,QAAQ,gBAAe;AAEtD,MAAMC,qBAAqB,CACzBC,QACAC;IAEA,oCAAoC;IACpC,iCAAiC;IACjC,oCAAoC;IAEpC,MAAMC,YAA8BlB,MAAMc,UAAUG,YAAY;QAC9DE,mBAAmBR;IACrB;IAEA,IAAIO,UAAUE,UAAU,KAAK,OAAO;QAClC,+CAA+C;QAC/C,IAAIC,eAAe;QACnB,IAAIC,eAAe;QACnBJ,UAAUK,MAAM,CAACC,IAAI,CAAC,CAACC;YACrB,IAAIlB,iBAAiBkB,QAAQ;gBAC3B,IAAIA,MAAMC,IAAI,KAAK,aAAaL,eAAe;gBAC/C,IAAII,MAAMC,IAAI,KAAK,aAAaJ,eAAe;YACjD;YACA,OAAOA,gBAAgBD;QACzB;QACA,IAAI,CAACA,cAAc;YACjBH,UAAUK,MAAM,CAACI,IAAI,CAAC;gBACpBD,MAAM;gBACNE,MAAM;gBACNC,OAAO;oBACLC,iBAAiB;oBACjBC,QAAQ;gBACV;gBACAC,OAAO,CAAC,EAAEC,CAAC,EAAE,GAAKA,EAAE;YACtB;QACF;QACA,IAAI,CAACX,cAAc;YACjBJ,UAAUK,MAAM,CAACI,IAAI,CAAC;gBACpBD,MAAM;gBACNG,OAAO;oBACLC,iBAAiB;oBACjBC,QAAQ;gBACV;gBACA,8KAA8K;gBAC9KH,MAAM;gBACNM,OAAO;gBACPF,OAAO,CAAC,EAAEC,CAAC,EAAE,GAAKA,EAAE;YACtB;QACF;IACF;IAEAf,UAAUiB,MAAM,GAAGjB,UAAUiB,MAAM,IAAIzB,aAAaQ,UAAUkB,IAAI;IAElE,IAAIlB,UAAUmB,QAAQ,EAAE;QACtB,IAAInB,UAAUmB,QAAQ,KAAK,MAAMnB,UAAUmB,QAAQ,GAAG;YAAEC,QAAQ;QAAM;QAEtE,IAAIpB,UAAUE,UAAU,KAAK,OAAO;YAClC,MAAM,IAAIf,mBAAmBY;QAC/B;QAEA,IAAIC,UAAUmB,QAAQ,CAACC,MAAM,EAAE;YAC7B,IAAIpB,UAAUmB,QAAQ,CAACC,MAAM,KAAK,MAAM;gBACtCpB,UAAUmB,QAAQ,CAACC,MAAM,GAAG;oBAC1BC,UAAU;gBACZ;YACF;YAEA,IAAIrB,UAAUmB,QAAQ,CAACC,MAAM,CAACC,QAAQ,KAAK,MAAM;gBAC/CrB,UAAUmB,QAAQ,CAACC,MAAM,CAACC,QAAQ,GAAG;oBACnCC,UAAU;gBACZ;YACF;YAEAtB,UAAUK,MAAM,GAAGf,gBAAgBU,UAAUK,MAAM,EAAEX;QACvD;IACF;IAEA,IAAIM,UAAUuB,MAAM,EAAE;QACpB,IAAIvB,UAAUuB,MAAM,KAAK,MAAMvB,UAAUuB,MAAM,GAAG,CAAC;QAEnD,2CAA2C;QAC3CvB,UAAUwB,gBAAgB,GAAGxB,UAAUwB,gBAAgB,IAAI;QAE3DxB,UAAUuB,MAAM,CAACE,SAAS,GAAGzB,UAAUuB,MAAM,CAACE,SAAS,IAAIzB,UAAUkB,IAAI;QACzElB,UAAUW,KAAK,CAACe,UAAU,GACxB1B,UAAUW,KAAK,CAACe,UAAU,IAAI1B,UAAUW,KAAK,CAACe,UAAU,KAAK,OACzD1B,UAAUW,KAAK,CAACe,UAAU,GAC1B;QAEN,MAAMC,eAAepC,oBAAoB;YACvCQ,YAAYC;YACZF;QACF;QAEAE,UAAUK,MAAM,GAAGf,gBAAgBU,UAAUK,MAAM,EAAEsB;IACvD;IAEA,IAAI3B,UAAU4B,IAAI,EAAE;QAClB5B,UAAU4B,IAAI,GAAG9C,MAAMa,cAAc,OAAOK,UAAU4B,IAAI,KAAK,WAAW5B,UAAU4B,IAAI,GAAG,CAAC,GAAG;YAC7F3B,mBAAmBR;QACrB;QAEA,IAAIoC,aAAa,EAAE;QAEnB,IAAI7B,UAAU4B,IAAI,CAACE,SAAS,EAAE;YAC5BD,aAAaA,WAAWE,MAAM,CAAC/C;QACjC;QAEA,IAAI,CAACgB,UAAU4B,IAAI,CAACI,oBAAoB,EAAE;YACxCH,aAAaA,WAAWE,MAAM,CAAC9C;YAE/B,IAAIe,UAAU4B,IAAI,CAACK,MAAM,EAAE;gBACzB,IAAIjC,UAAU4B,IAAI,CAACK,MAAM,KAAK,MAAMjC,UAAU4B,IAAI,CAACK,MAAM,GAAG,CAAC;gBAC7DJ,aAAaA,WAAWE,MAAM,CAAC7C;YACjC;YAEA,IAAIc,UAAU4B,IAAI,CAACM,gBAAgB,GAAG,GAAG;gBACvCL,aAAaA,WAAWE,MAAM,CAAChD;YACjC;QACF;QAEA,4DAA4D;QAC5DiB,UAAUwB,gBAAgB,GAAGxB,UAAUwB,gBAAgB,IAAI;QAE3D,IAAI,CAACxB,UAAU4B,IAAI,CAACO,UAAU,EAAE;YAC9BnC,UAAU4B,IAAI,CAACO,UAAU,GAAG,EAAE;QAChC;QAEAnC,UAAUK,MAAM,GAAGf,gBAAgBU,UAAUK,MAAM,EAAEwB;IACvD;IAEA,oCAAoC;IACpC,kBAAkB;IAClB,oCAAoC;IAEpC,MAAMO,qBAAqBtC,OAAOuC,WAAW,CAACC,GAAG,CAAC,CAACC,IAAMA,EAAErB,IAAI,KAAK,EAAE;IACtElB,UAAUK,MAAM,GAAGjB,eAAe;QAChCU;QACAO,QAAQL,UAAUK,MAAM;QACxB+B;IACF;IAEA,OAAOpC;AACT;AAEA,eAAeH,mBAAkB"}
+{"version":3,"sources":["../../../src/collections/config/sanitize.ts"],"sourcesContent":["import type { Config, SanitizedConfig } from '../../config/types.js'\nimport type { CollectionConfig, SanitizedCollectionConfig } from './types.js'\n\nimport { getBaseAuthFields } from '../../auth/getAuthFields.js'\nimport { TimestampsRequired } from '../../errors/TimestampsRequired.js'\nimport { sanitizeFields } from '../../fields/config/sanitize.js'\nimport { fieldAffectsData } from '../../fields/config/types.js'\nimport mergeBaseFields from '../../fields/mergeBaseFields.js'\nimport { getBaseUploadFields } from '../../uploads/getBaseFields.js'\nimport { deepMergeWithReactComponents } from '../../utilities/deepMerge.js'\nimport { formatLabels } from '../../utilities/formatLabels.js'\nimport baseVersionFields from '../../versions/baseFields.js'\nimport { versionDefaults } from '../../versions/defaults.js'\nimport { authDefaults, defaults, loginWithUsernameDefaults } from './defaults.js'\nimport { sanitizeAuthFields, sanitizeUploadFields } from './reservedFieldNames.js'\n\nexport const sanitizeCollection = async (\n  config: Config,\n  collection: CollectionConfig,\n  /**\n   * If this property is set, RichText fields won't be sanitized immediately. Instead, they will be added to this array as promises\n   * so that you can sanitize them together, after the config has been sanitized.\n   */\n  richTextSanitizationPromises?: Array<(config: SanitizedConfig) => Promise<void>>,\n): Promise<SanitizedCollectionConfig> => {\n  // /////////////////////////////////\n  // Make copy of collection config\n  // /////////////////////////////////\n\n  const sanitized: CollectionConfig = deepMergeWithReactComponents(defaults, collection)\n\n  // /////////////////////////////////\n  // Sanitize fields\n  // /////////////////////////////////\n\n  const validRelationships = config.collections.map((c) => c.slug) || []\n  sanitized.fields = await sanitizeFields({\n    collectionConfig: sanitized,\n    config,\n    fields: sanitized.fields,\n    richTextSanitizationPromises,\n    validRelationships,\n  })\n\n  if (sanitized.timestamps !== false) {\n    // add default timestamps fields only as needed\n    let hasUpdatedAt = null\n    let hasCreatedAt = null\n    sanitized.fields.some((field) => {\n      if (fieldAffectsData(field)) {\n        if (field.name === 'updatedAt') hasUpdatedAt = true\n        if (field.name === 'createdAt') hasCreatedAt = true\n      }\n      return hasCreatedAt && hasUpdatedAt\n    })\n    if (!hasUpdatedAt) {\n      sanitized.fields.push({\n        name: 'updatedAt',\n        type: 'date',\n        admin: {\n          disableBulkEdit: true,\n          hidden: true,\n        },\n        label: ({ t }) => t('general:updatedAt'),\n      })\n    }\n    if (!hasCreatedAt) {\n      sanitized.fields.push({\n        name: 'createdAt',\n        admin: {\n          disableBulkEdit: true,\n          hidden: true,\n        },\n        // The default sort for list view is createdAt. Thus, enabling indexing by default, is a major performance improvement, especially for large or a large amount of collections.\n        type: 'date',\n        index: true,\n        label: ({ t }) => t('general:createdAt'),\n      })\n    }\n  }\n\n  sanitized.labels = sanitized.labels || formatLabels(sanitized.slug)\n\n  if (sanitized.versions) {\n    if (sanitized.versions === true) sanitized.versions = { drafts: false }\n\n    if (sanitized.timestamps === false) {\n      throw new TimestampsRequired(collection)\n    }\n\n    if (sanitized.versions.drafts) {\n      if (sanitized.versions.drafts === true) {\n        sanitized.versions.drafts = {\n          autosave: false,\n          validate: false,\n        }\n      }\n\n      if (sanitized.versions.drafts.autosave === true) {\n        sanitized.versions.drafts.autosave = {\n          interval: versionDefaults.autosaveInterval,\n        }\n      }\n\n      if (sanitized.versions.drafts.validate === undefined) {\n        sanitized.versions.drafts.validate = false\n      }\n\n      sanitized.fields = mergeBaseFields(sanitized.fields, baseVersionFields)\n    }\n  }\n\n  if (sanitized.upload) {\n    if (sanitized.upload === true) sanitized.upload = {}\n\n    // sanitize fields for reserved names\n    sanitizeUploadFields(sanitized.fields, sanitized)\n\n    // disable duplicate for uploads by default\n    sanitized.disableDuplicate = sanitized.disableDuplicate || true\n\n    sanitized.upload.staticDir = sanitized.upload.staticDir || sanitized.slug\n    sanitized.admin.useAsTitle =\n      sanitized.admin.useAsTitle && sanitized.admin.useAsTitle !== 'id'\n        ? sanitized.admin.useAsTitle\n        : 'filename'\n\n    const uploadFields = getBaseUploadFields({\n      collection: sanitized,\n      config,\n    })\n\n    sanitized.fields = mergeBaseFields(sanitized.fields, uploadFields)\n  }\n\n  if (sanitized.auth) {\n    // sanitize fields for reserved names\n    sanitizeAuthFields(sanitized.fields, sanitized)\n\n    sanitized.auth = deepMergeWithReactComponents(\n      authDefaults,\n      typeof sanitized.auth === 'object' ? sanitized.auth : {},\n    )\n\n    if (!sanitized.auth.disableLocalStrategy && sanitized.auth.verify === true) {\n      sanitized.auth.verify = {}\n    }\n\n    // disable duplicate for auth enabled collections by default\n    sanitized.disableDuplicate = sanitized.disableDuplicate || true\n\n    if (!sanitized.auth.strategies) {\n      sanitized.auth.strategies = []\n    }\n\n    sanitized.auth.loginWithUsername = sanitized.auth.loginWithUsername\n      ? {\n          ...loginWithUsernameDefaults,\n          ...(typeof sanitized.auth.loginWithUsername === 'boolean'\n            ? {}\n            : sanitized.auth.loginWithUsername),\n        }\n      : false\n\n    sanitized.fields = mergeBaseFields(sanitized.fields, getBaseAuthFields(sanitized.auth))\n  }\n\n  return sanitized as SanitizedCollectionConfig\n}\n"],"names":["getBaseAuthFields","TimestampsRequired","sanitizeFields","fieldAffectsData","mergeBaseFields","getBaseUploadFields","deepMergeWithReactComponents","formatLabels","baseVersionFields","versionDefaults","authDefaults","defaults","loginWithUsernameDefaults","sanitizeAuthFields","sanitizeUploadFields","sanitizeCollection","config","collection","richTextSanitizationPromises","sanitized","validRelationships","collections","map","c","slug","fields","collectionConfig","timestamps","hasUpdatedAt","hasCreatedAt","some","field","name","push","type","admin","disableBulkEdit","hidden","label","t","index","labels","versions","drafts","autosave","validate","interval","autosaveInterval","undefined","upload","disableDuplicate","staticDir","useAsTitle","uploadFields","auth","disableLocalStrategy","verify","strategies","loginWithUsername"],"mappings":"AAGA,SAASA,iBAAiB,QAAQ,8BAA6B;AAC/D,SAASC,kBAAkB,QAAQ,qCAAoC;AACvE,SAASC,cAAc,QAAQ,kCAAiC;AAChE,SAASC,gBAAgB,QAAQ,+BAA8B;AAC/D,OAAOC,qBAAqB,kCAAiC;AAC7D,SAASC,mBAAmB,QAAQ,iCAAgC;AACpE,SAASC,4BAA4B,QAAQ,+BAA8B;AAC3E,SAASC,YAAY,QAAQ,kCAAiC;AAC9D,OAAOC,uBAAuB,+BAA8B;AAC5D,SAASC,eAAe,QAAQ,6BAA4B;AAC5D,SAASC,YAAY,EAAEC,QAAQ,EAAEC,yBAAyB,QAAQ,gBAAe;AACjF,SAASC,kBAAkB,EAAEC,oBAAoB,QAAQ,0BAAyB;AAElF,OAAO,MAAMC,qBAAqB,OAChCC,QACAC,YACA;;;GAGC,GACDC;IAEA,oCAAoC;IACpC,iCAAiC;IACjC,oCAAoC;IAEpC,MAAMC,YAA8Bb,6BAA6BK,UAAUM;IAE3E,oCAAoC;IACpC,kBAAkB;IAClB,oCAAoC;IAEpC,MAAMG,qBAAqBJ,OAAOK,WAAW,CAACC,GAAG,CAAC,CAACC,IAAMA,EAAEC,IAAI,KAAK,EAAE;IACtEL,UAAUM,MAAM,GAAG,MAAMvB,eAAe;QACtCwB,kBAAkBP;QAClBH;QACAS,QAAQN,UAAUM,MAAM;QACxBP;QACAE;IACF;IAEA,IAAID,UAAUQ,UAAU,KAAK,OAAO;QAClC,+CAA+C;QAC/C,IAAIC,eAAe;QACnB,IAAIC,eAAe;QACnBV,UAAUM,MAAM,CAACK,IAAI,CAAC,CAACC;YACrB,IAAI5B,iBAAiB4B,QAAQ;gBAC3B,IAAIA,MAAMC,IAAI,KAAK,aAAaJ,eAAe;gBAC/C,IAAIG,MAAMC,IAAI,KAAK,aAAaH,eAAe;YACjD;YACA,OAAOA,gBAAgBD;QACzB;QACA,IAAI,CAACA,cAAc;YACjBT,UAAUM,MAAM,CAACQ,IAAI,CAAC;gBACpBD,MAAM;gBACNE,MAAM;gBACNC,OAAO;oBACLC,iBAAiB;oBACjBC,QAAQ;gBACV;gBACAC,OAAO,CAAC,EAAEC,CAAC,EAAE,GAAKA,EAAE;YACtB;QACF;QACA,IAAI,CAACV,cAAc;YACjBV,UAAUM,MAAM,CAACQ,IAAI,CAAC;gBACpBD,MAAM;gBACNG,OAAO;oBACLC,iBAAiB;oBACjBC,QAAQ;gBACV;gBACA,8KAA8K;gBAC9KH,MAAM;gBACNM,OAAO;gBACPF,OAAO,CAAC,EAAEC,CAAC,EAAE,GAAKA,EAAE;YACtB;QACF;IACF;IAEApB,UAAUsB,MAAM,GAAGtB,UAAUsB,MAAM,IAAIlC,aAAaY,UAAUK,IAAI;IAElE,IAAIL,UAAUuB,QAAQ,EAAE;QACtB,IAAIvB,UAAUuB,QAAQ,KAAK,MAAMvB,UAAUuB,QAAQ,GAAG;YAAEC,QAAQ;QAAM;QAEtE,IAAIxB,UAAUQ,UAAU,KAAK,OAAO;YAClC,MAAM,IAAI1B,mBAAmBgB;QAC/B;QAEA,IAAIE,UAAUuB,QAAQ,CAACC,MAAM,EAAE;YAC7B,IAAIxB,UAAUuB,QAAQ,CAACC,MAAM,KAAK,MAAM;gBACtCxB,UAAUuB,QAAQ,CAACC,MAAM,GAAG;oBAC1BC,UAAU;oBACVC,UAAU;gBACZ;YACF;YAEA,IAAI1B,UAAUuB,QAAQ,CAACC,MAAM,CAACC,QAAQ,KAAK,MAAM;gBAC/CzB,UAAUuB,QAAQ,CAACC,MAAM,CAACC,QAAQ,GAAG;oBACnCE,UAAUrC,gBAAgBsC,gBAAgB;gBAC5C;YACF;YAEA,IAAI5B,UAAUuB,QAAQ,CAACC,MAAM,CAACE,QAAQ,KAAKG,WAAW;gBACpD7B,UAAUuB,QAAQ,CAACC,MAAM,CAACE,QAAQ,GAAG;YACvC;YAEA1B,UAAUM,MAAM,GAAGrB,gBAAgBe,UAAUM,MAAM,EAAEjB;QACvD;IACF;IAEA,IAAIW,UAAU8B,MAAM,EAAE;QACpB,IAAI9B,UAAU8B,MAAM,KAAK,MAAM9B,UAAU8B,MAAM,GAAG,CAAC;QAEnD,qCAAqC;QACrCnC,qBAAqBK,UAAUM,MAAM,EAAEN;QAEvC,2CAA2C;QAC3CA,UAAU+B,gBAAgB,GAAG/B,UAAU+B,gBAAgB,IAAI;QAE3D/B,UAAU8B,MAAM,CAACE,SAAS,GAAGhC,UAAU8B,MAAM,CAACE,SAAS,IAAIhC,UAAUK,IAAI;QACzEL,UAAUgB,KAAK,CAACiB,UAAU,GACxBjC,UAAUgB,KAAK,CAACiB,UAAU,IAAIjC,UAAUgB,KAAK,CAACiB,UAAU,KAAK,OACzDjC,UAAUgB,KAAK,CAACiB,UAAU,GAC1B;QAEN,MAAMC,eAAehD,oBAAoB;YACvCY,YAAYE;YACZH;QACF;QAEAG,UAAUM,MAAM,GAAGrB,gBAAgBe,UAAUM,MAAM,EAAE4B;IACvD;IAEA,IAAIlC,UAAUmC,IAAI,EAAE;QAClB,qCAAqC;QACrCzC,mBAAmBM,UAAUM,MAAM,EAAEN;QAErCA,UAAUmC,IAAI,GAAGhD,6BACfI,cACA,OAAOS,UAAUmC,IAAI,KAAK,WAAWnC,UAAUmC,IAAI,GAAG,CAAC;QAGzD,IAAI,CAACnC,UAAUmC,IAAI,CAACC,oBAAoB,IAAIpC,UAAUmC,IAAI,CAACE,MAAM,KAAK,MAAM;YAC1ErC,UAAUmC,IAAI,CAACE,MAAM,GAAG,CAAC;QAC3B;QAEA,4DAA4D;QAC5DrC,UAAU+B,gBAAgB,GAAG/B,UAAU+B,gBAAgB,IAAI;QAE3D,IAAI,CAAC/B,UAAUmC,IAAI,CAACG,UAAU,EAAE;YAC9BtC,UAAUmC,IAAI,CAACG,UAAU,GAAG,EAAE;QAChC;QAEAtC,UAAUmC,IAAI,CAACI,iBAAiB,GAAGvC,UAAUmC,IAAI,CAACI,iBAAiB,GAC/D;YACE,GAAG9C,yBAAyB;YAC5B,GAAI,OAAOO,UAAUmC,IAAI,CAACI,iBAAiB,KAAK,YAC5C,CAAC,IACDvC,UAAUmC,IAAI,CAACI,iBAAiB;QACtC,IACA;QAEJvC,UAAUM,MAAM,GAAGrB,gBAAgBe,UAAUM,MAAM,EAAEzB,kBAAkBmB,UAAUmC,IAAI;IACvF;IAEA,OAAOnC;AACT,EAAC"}