payload 4.0.0-internal.fa345ef → 4.0.0-internal.ff27d6e

package/dist/auth/baseFields/apiKey/canCreateOrUpdateAPIKey.js

@@ -0,0 +1,20 @@
+import { UnauthorizedError } from '../../../errors/UnauthorizedError.js';
+import { canAccessAdmin } from '../../../utilities/canAccessAdmin.js';
+/** Allows API key creation and updates only for users with admin access. */ export const canCreateOrUpdateAPIKey = async ({ req })=>{
+    if (!req.user) {
+        return false;
+    }
+    try {
+        await canAccessAdmin({
+            req
+        });
+    } catch (error) {
+        if (error instanceof UnauthorizedError) {
+            return false;
+        }
+        throw error;
+    }
+    return true;
+};
+
+//# sourceMappingURL=canCreateOrUpdateAPIKey.js.map

package/dist/auth/baseFields/apiKey/canCreateOrUpdateAPIKey.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/auth/baseFields/apiKey/canCreateOrUpdateAPIKey.ts"],"sourcesContent":["import type { FieldAccess } from '../../../fields/config/types.js'\n\nimport { UnauthorizedError } from '../../../errors/UnauthorizedError.js'\nimport { canAccessAdmin } from '../../../utilities/canAccessAdmin.js'\n\n/** Allows API key creation and updates only for users with admin access. */\nexport const canCreateOrUpdateAPIKey: FieldAccess = async ({ req }) => {\n  if (!req.user) {\n    return false\n  }\n\n  try {\n    await canAccessAdmin({ req })\n  } catch (error) {\n    if (error instanceof UnauthorizedError) {\n      return false\n    }\n\n    throw error\n  }\n\n  return true\n}\n"],"names":["UnauthorizedError","canAccessAdmin","canCreateOrUpdateAPIKey","req","user","error"],"mappings":"AAEA,SAASA,iBAAiB,QAAQ,uCAAsC;AACxE,SAASC,cAAc,QAAQ,uCAAsC;AAErE,0EAA0E,GAC1E,OAAO,MAAMC,0BAAuC,OAAO,EAAEC,GAAG,EAAE;IAChE,IAAI,CAACA,IAAIC,IAAI,EAAE;QACb,OAAO;IACT;IAEA,IAAI;QACF,MAAMH,eAAe;YAAEE;QAAI;IAC7B,EAAE,OAAOE,OAAO;QACd,IAAIA,iBAAiBL,mBAAmB;YACtC,OAAO;QACT;QAEA,MAAMK;IACR;IAEA,OAAO;AACT,EAAC"}

package/dist/auth/baseFields/apiKey/encryptAPIKey.d.ts

@@ -0,0 +1,4 @@
+import type { FieldHook } from '../../../fields/config/types.js';
+/** Encrypts API keys before storage. */
+export declare const encryptAPIKey: FieldHook;
+//# sourceMappingURL=encryptAPIKey.d.ts.map

package/dist/auth/baseFields/apiKey/encryptAPIKey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryptAPIKey.d.ts","sourceRoot":"","sources":["../../../../src/auth/baseFields/apiKey/encryptAPIKey.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAA;AAEhE,wCAAwC;AACxC,eAAO,MAAM,aAAa,EAAE,SAe3B,CAAA"}

package/dist/auth/baseFields/apiKey/encryptAPIKey.js

@@ -0,0 +1,11 @@
+/** Encrypts API keys before storage. */ export const encryptAPIKey = ({ data, req, value })=>{
+    if (data && 'apiKey' in data && typeof data.apiKey !== 'undefined' && !(typeof data.apiKey === 'string' && data.apiKey)) {
+        return null;
+    }
+    if (typeof value === 'undefined') {
+        return undefined;
+    }
+    return value ? req.payload.encrypt(value) : null;
+};
+
+//# sourceMappingURL=encryptAPIKey.js.map

package/dist/auth/baseFields/apiKey/encryptAPIKey.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/auth/baseFields/apiKey/encryptAPIKey.ts"],"sourcesContent":["import type { FieldHook } from '../../../fields/config/types.js'\n\n/** Encrypts API keys before storage. */\nexport const encryptAPIKey: FieldHook = ({ data, req, value }) => {\n  if (\n    data &&\n    'apiKey' in data &&\n    typeof data.apiKey !== 'undefined' &&\n    !(typeof data.apiKey === 'string' && data.apiKey)\n  ) {\n    return null\n  }\n\n  if (typeof value === 'undefined') {\n    return undefined\n  }\n\n  return value ? req.payload.encrypt(value as string) : null\n}\n"],"names":["encryptAPIKey","data","req","value","apiKey","undefined","payload","encrypt"],"mappings":"AAEA,sCAAsC,GACtC,OAAO,MAAMA,gBAA2B,CAAC,EAAEC,IAAI,EAAEC,GAAG,EAAEC,KAAK,EAAE;IAC3D,IACEF,QACA,YAAYA,QACZ,OAAOA,KAAKG,MAAM,KAAK,eACvB,CAAE,CAAA,OAAOH,KAAKG,MAAM,KAAK,YAAYH,KAAKG,MAAM,AAAD,GAC/C;QACA,OAAO;IACT;IAEA,IAAI,OAAOD,UAAU,aAAa;QAChC,OAAOE;IACT;IAEA,OAAOF,QAAQD,IAAII,OAAO,CAACC,OAAO,CAACJ,SAAmB;AACxD,EAAC"}

package/dist/auth/baseFields/apiKey/getAPIKeyLast4.d.ts

@@ -0,0 +1,3 @@
+/** Returns the minimal recognizable portion of an API key for storage. */
+export declare const getAPIKeyLast4: (value: string) => string;
+//# sourceMappingURL=getAPIKeyLast4.d.ts.map

package/dist/auth/baseFields/apiKey/getAPIKeyLast4.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getAPIKeyLast4.d.ts","sourceRoot":"","sources":["../../../../src/auth/baseFields/apiKey/getAPIKeyLast4.ts"],"names":[],"mappings":"AAGA,0EAA0E;AAC1E,eAAO,MAAM,cAAc,UAAW,MAAM,KAAG,MACsB,CAAA"}

package/dist/auth/baseFields/apiKey/getAPIKeyLast4.js

@@ -0,0 +1,5 @@
+const minimumSafeKeyLength = 24;
+const maskedLast4 = '••••';
+/** Returns the minimal recognizable portion of an API key for storage. */ export const getAPIKeyLast4 = (value)=>value.length < minimumSafeKeyLength ? maskedLast4 : value.slice(-4);
+
+//# sourceMappingURL=getAPIKeyLast4.js.map

package/dist/auth/baseFields/apiKey/getAPIKeyLast4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/auth/baseFields/apiKey/getAPIKeyLast4.ts"],"sourcesContent":["const minimumSafeKeyLength = 24\nconst maskedLast4 = '••••'\n\n/** Returns the minimal recognizable portion of an API key for storage. */\nexport const getAPIKeyLast4 = (value: string): string =>\n  value.length < minimumSafeKeyLength ? maskedLast4 : value.slice(-4)\n"],"names":["minimumSafeKeyLength","maskedLast4","getAPIKeyLast4","value","length","slice"],"mappings":"AAAA,MAAMA,uBAAuB;AAC7B,MAAMC,cAAc;AAEpB,wEAAwE,GACxE,OAAO,MAAMC,iBAAiB,CAACC,QAC7BA,MAAMC,MAAM,GAAGJ,uBAAuBC,cAAcE,MAAME,KAAK,CAAC,CAAC,GAAE"}

package/dist/auth/baseFields/apiKey/omitAPIKey.d.ts

@@ -0,0 +1,5 @@
+import type { BeforeReadHook } from '../../../collections/config/types.js';
+export declare const legacyAPIKeyLast4: string;
+/** Removes API key secrets before any collection read hooks can observe them. */
+export declare const omitAPIKey: BeforeReadHook;
+//# sourceMappingURL=omitAPIKey.d.ts.map

package/dist/auth/baseFields/apiKey/omitAPIKey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"omitAPIKey.d.ts","sourceRoot":"","sources":["../../../../src/auth/baseFields/apiKey/omitAPIKey.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAA;AAE1E,eAAO,MAAM,iBAAiB,QAAgB,CAAA;AAE9C,iFAAiF;AACjF,eAAO,MAAM,UAAU,EAAE,cASxB,CAAA"}

package/dist/auth/baseFields/apiKey/omitAPIKey.js

@@ -0,0 +1,11 @@
+export const legacyAPIKeyLast4 = '•'.repeat(4);
+/** Removes API key secrets before any collection read hooks can observe them. */ export const omitAPIKey = ({ doc })=>{
+    if (doc.apiKeyIndex && !doc.apiKeyLast4) {
+        doc.apiKeyLast4 = legacyAPIKeyLast4;
+    }
+    delete doc.apiKey;
+    delete doc.apiKeyIndex;
+    return doc;
+};
+
+//# sourceMappingURL=omitAPIKey.js.map

package/dist/auth/baseFields/apiKey/omitAPIKey.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/auth/baseFields/apiKey/omitAPIKey.ts"],"sourcesContent":["import type { BeforeReadHook } from '../../../collections/config/types.js'\n\nexport const legacyAPIKeyLast4 = '•'.repeat(4)\n\n/** Removes API key secrets before any collection read hooks can observe them. */\nexport const omitAPIKey: BeforeReadHook = ({ doc }) => {\n  if (doc.apiKeyIndex && !doc.apiKeyLast4) {\n    doc.apiKeyLast4 = legacyAPIKeyLast4\n  }\n\n  delete doc.apiKey\n  delete doc.apiKeyIndex\n\n  return doc\n}\n"],"names":["legacyAPIKeyLast4","repeat","omitAPIKey","doc","apiKeyIndex","apiKeyLast4","apiKey"],"mappings":"AAEA,OAAO,MAAMA,oBAAoB,IAAIC,MAAM,CAAC,GAAE;AAE9C,+EAA+E,GAC/E,OAAO,MAAMC,aAA6B,CAAC,EAAEC,GAAG,EAAE;IAChD,IAAIA,IAAIC,WAAW,IAAI,CAACD,IAAIE,WAAW,EAAE;QACvCF,IAAIE,WAAW,GAAGL;IACpB;IAEA,OAAOG,IAAIG,MAAM;IACjB,OAAOH,IAAIC,WAAW;IAEtB,OAAOD;AACT,EAAC"}

package/dist/auth/baseFields/apiKey/omitAPIKeyIndex.d.ts

@@ -0,0 +1,4 @@
+import type { FieldHook } from '../../../fields/config/types.js';
+/** Keeps the authentication index out of returned documents. */
+export declare const omitAPIKeyIndex: FieldHook;
+//# sourceMappingURL=omitAPIKeyIndex.d.ts.map

package/dist/auth/baseFields/apiKey/omitAPIKeyIndex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"omitAPIKeyIndex.d.ts","sourceRoot":"","sources":["../../../../src/auth/baseFields/apiKey/omitAPIKeyIndex.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAA;AAEhE,gEAAgE;AAChE,eAAO,MAAM,eAAe,EAAE,SAE7B,CAAA"}

package/dist/auth/baseFields/apiKey/omitAPIKeyIndex.js

@@ -0,0 +1,5 @@
+/** Keeps the authentication index out of returned documents. */ export const omitAPIKeyIndex = ({ siblingData })=>{
+    delete siblingData.apiKeyIndex;
+};
+
+//# sourceMappingURL=omitAPIKeyIndex.js.map

package/dist/auth/baseFields/apiKey/omitAPIKeyIndex.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/auth/baseFields/apiKey/omitAPIKeyIndex.ts"],"sourcesContent":["import type { FieldHook } from '../../../fields/config/types.js'\n\n/** Keeps the authentication index out of returned documents. */\nexport const omitAPIKeyIndex: FieldHook = ({ siblingData }) => {\n  delete siblingData.apiKeyIndex\n}\n"],"names":["omitAPIKeyIndex","siblingData","apiKeyIndex"],"mappings":"AAEA,8DAA8D,GAC9D,OAAO,MAAMA,kBAA6B,CAAC,EAAEC,WAAW,EAAE;IACxD,OAAOA,YAAYC,WAAW;AAChC,EAAC"}

package/dist/auth/baseFields/apiKey/omitEncryptedAPIKey.d.ts

@@ -0,0 +1,4 @@
+import type { FieldHook } from '../../../fields/config/types.js';
+/** Prevents the encrypted key from surviving field-level reads. */
+export declare const omitEncryptedAPIKey: FieldHook;
+//# sourceMappingURL=omitEncryptedAPIKey.d.ts.map

package/dist/auth/baseFields/apiKey/omitEncryptedAPIKey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"omitEncryptedAPIKey.d.ts","sourceRoot":"","sources":["../../../../src/auth/baseFields/apiKey/omitEncryptedAPIKey.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAA;AAEhE,mEAAmE;AACnE,eAAO,MAAM,mBAAmB,EAAE,SAEjC,CAAA"}

package/dist/auth/baseFields/apiKey/omitEncryptedAPIKey.js

@@ -0,0 +1,5 @@
+/** Prevents the encrypted key from surviving field-level reads. */ export const omitEncryptedAPIKey = ({ siblingData })=>{
+    delete siblingData.apiKey;
+};
+
+//# sourceMappingURL=omitEncryptedAPIKey.js.map

package/dist/auth/baseFields/apiKey/omitEncryptedAPIKey.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/auth/baseFields/apiKey/omitEncryptedAPIKey.ts"],"sourcesContent":["import type { FieldHook } from '../../../fields/config/types.js'\n\n/** Prevents the encrypted key from surviving field-level reads. */\nexport const omitEncryptedAPIKey: FieldHook = ({ siblingData }) => {\n  delete siblingData.apiKey\n}\n"],"names":["omitEncryptedAPIKey","siblingData","apiKey"],"mappings":"AAEA,iEAAiE,GACjE,OAAO,MAAMA,sBAAiC,CAAC,EAAEC,WAAW,EAAE;IAC5D,OAAOA,YAAYC,MAAM;AAC3B,EAAC"}

package/dist/auth/baseFields/apiKey/setAPIKeyIndex.d.ts

@@ -0,0 +1,4 @@
+import type { FieldHook } from '../../../fields/config/types.js';
+/** Maintains the API key authentication index. */
+export declare const setAPIKeyIndex: FieldHook;
+//# sourceMappingURL=setAPIKeyIndex.d.ts.map

package/dist/auth/baseFields/apiKey/setAPIKeyIndex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setAPIKeyIndex.d.ts","sourceRoot":"","sources":["../../../../src/auth/baseFields/apiKey/setAPIKeyIndex.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAA;AAEhE,kDAAkD;AAClD,eAAO,MAAM,cAAc,EAAE,SAe5B,CAAA"}

package/dist/auth/baseFields/apiKey/setAPIKeyIndex.js

@@ -0,0 +1,12 @@
+import crypto from 'crypto';
+/** Maintains the API key authentication index. */ export const setAPIKeyIndex = ({ data, req, siblingData })=>{
+    if (data && 'apiKey' in data && typeof data.apiKey !== 'undefined' && !(typeof data.apiKey === 'string' && data.apiKey)) {
+        return null;
+    }
+    if (typeof data?.apiKey === 'string') {
+        return crypto.createHmac('sha256', req.payload.secret).update(data.apiKey).digest('hex');
+    }
+    delete siblingData.apiKeyIndex;
+};
+
+//# sourceMappingURL=setAPIKeyIndex.js.map

package/dist/auth/baseFields/apiKey/setAPIKeyIndex.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/auth/baseFields/apiKey/setAPIKeyIndex.ts"],"sourcesContent":["import crypto from 'crypto'\n\nimport type { FieldHook } from '../../../fields/config/types.js'\n\n/** Maintains the API key authentication index. */\nexport const setAPIKeyIndex: FieldHook = ({ data, req, siblingData }) => {\n  if (\n    data &&\n    'apiKey' in data &&\n    typeof data.apiKey !== 'undefined' &&\n    !(typeof data.apiKey === 'string' && data.apiKey)\n  ) {\n    return null\n  }\n\n  if (typeof data?.apiKey === 'string') {\n    return crypto.createHmac('sha256', req.payload.secret).update(data.apiKey).digest('hex')\n  }\n\n  delete siblingData.apiKeyIndex\n}\n"],"names":["crypto","setAPIKeyIndex","data","req","siblingData","apiKey","createHmac","payload","secret","update","digest","apiKeyIndex"],"mappings":"AAAA,OAAOA,YAAY,SAAQ;AAI3B,gDAAgD,GAChD,OAAO,MAAMC,iBAA4B,CAAC,EAAEC,IAAI,EAAEC,GAAG,EAAEC,WAAW,EAAE;IAClE,IACEF,QACA,YAAYA,QACZ,OAAOA,KAAKG,MAAM,KAAK,eACvB,CAAE,CAAA,OAAOH,KAAKG,MAAM,KAAK,YAAYH,KAAKG,MAAM,AAAD,GAC/C;QACA,OAAO;IACT;IAEA,IAAI,OAAOH,MAAMG,WAAW,UAAU;QACpC,OAAOL,OAAOM,UAAU,CAAC,UAAUH,IAAII,OAAO,CAACC,MAAM,EAAEC,MAAM,CAACP,KAAKG,MAAM,EAAEK,MAAM,CAAC;IACpF;IAEA,OAAON,YAAYO,WAAW;AAChC,EAAC"}

package/dist/auth/baseFields/apiKey/setKeyLast4.d.ts

@@ -0,0 +1,4 @@
+import type { FieldHook } from '../../../fields/config/types.js';
+/** Maintains the non-secret API key preview. */
+export declare const setKeyLast4: FieldHook;
+//# sourceMappingURL=setKeyLast4.d.ts.map

package/dist/auth/baseFields/apiKey/setKeyLast4.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setKeyLast4.d.ts","sourceRoot":"","sources":["../../../../src/auth/baseFields/apiKey/setKeyLast4.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAA;AAIhE,gDAAgD;AAChD,eAAO,MAAM,WAAW,EAAE,SAezB,CAAA"}

package/dist/auth/baseFields/apiKey/setKeyLast4.js

@@ -0,0 +1,12 @@
+import { getAPIKeyLast4 } from './getAPIKeyLast4.js';
+/** Maintains the non-secret API key preview. */ export const setKeyLast4 = ({ data, siblingData })=>{
+    if (data && 'apiKey' in data && typeof data.apiKey !== 'undefined' && !(typeof data.apiKey === 'string' && data.apiKey)) {
+        return null;
+    }
+    if (typeof data?.apiKey === 'string') {
+        return getAPIKeyLast4(data.apiKey);
+    }
+    delete siblingData.apiKeyLast4;
+};
+
+//# sourceMappingURL=setKeyLast4.js.map

package/dist/auth/baseFields/apiKey/setKeyLast4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/auth/baseFields/apiKey/setKeyLast4.ts"],"sourcesContent":["import type { FieldHook } from '../../../fields/config/types.js'\n\nimport { getAPIKeyLast4 } from './getAPIKeyLast4.js'\n\n/** Maintains the non-secret API key preview. */\nexport const setKeyLast4: FieldHook = ({ data, siblingData }) => {\n  if (\n    data &&\n    'apiKey' in data &&\n    typeof data.apiKey !== 'undefined' &&\n    !(typeof data.apiKey === 'string' && data.apiKey)\n  ) {\n    return null\n  }\n\n  if (typeof data?.apiKey === 'string') {\n    return getAPIKeyLast4(data.apiKey)\n  }\n\n  delete siblingData.apiKeyLast4\n}\n"],"names":["getAPIKeyLast4","setKeyLast4","data","siblingData","apiKey","apiKeyLast4"],"mappings":"AAEA,SAASA,cAAc,QAAQ,sBAAqB;AAEpD,8CAA8C,GAC9C,OAAO,MAAMC,cAAyB,CAAC,EAAEC,IAAI,EAAEC,WAAW,EAAE;IAC1D,IACED,QACA,YAAYA,QACZ,OAAOA,KAAKE,MAAM,KAAK,eACvB,CAAE,CAAA,OAAOF,KAAKE,MAAM,KAAK,YAAYF,KAAKE,MAAM,AAAD,GAC/C;QACA,OAAO;IACT;IAEA,IAAI,OAAOF,MAAME,WAAW,UAAU;QACpC,OAAOJ,eAAeE,KAAKE,MAAM;IACnC;IAEA,OAAOD,YAAYE,WAAW;AAChC,EAAC"}

package/dist/auth/baseFields/apiKey.d.ts

@@ -1,11 +1,11 @@
-import type { CheckboxField, Field, TextField } from '../../fields/config/types.js';
-type APIKeyCheckboxFieldOverride = Omit<Partial<CheckboxField>, 'name' | 'type'>;
+import type { Field, TextField } from '../../fields/config/types.js';
+export { omitAPIKey } from './apiKey/omitAPIKey.js';
 type APIKeyTextFieldOverride = Omit<Partial<TextField>, 'hasMany' | 'maxRows' | 'minRows' | 'name' | 'type' | 'validate'>;
-export declare const createAPIKeyFields: ({ apiKeyField, apiKeyIndexField, enableAPIKeyField, includeEnableAPIKey, }?: {
+export declare const createAPIKeyFields: ({ apiKeyField, apiKeyIndexField, apiKeyLast4Field, }?: {
     apiKeyField?: APIKeyTextFieldOverride;
     apiKeyIndexField?: APIKeyTextFieldOverride;
-    enableAPIKeyField?: APIKeyCheckboxFieldOverride;
-    includeEnableAPIKey?: boolean;
+    apiKeyLast4Field?: APIKeyTextFieldOverride;
 }) => Field[];
-export {};
+/** Builds API key fields and safely merges custom overrides. */
+export declare const getAPIKeyFields: (fields: Field[]) => Field[];
 //# sourceMappingURL=apiKey.d.ts.map

package/dist/auth/baseFields/apiKey.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"apiKey.d.ts","sourceRoot":"","sources":["../../../src/auth/baseFields/apiKey.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,KAAK,EAAa,SAAS,EAAE,MAAM,8BAA8B,CAAA;AAO9F,KAAK,2BAA2B,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,CAAA;AAChF,KAAK,uBAAuB,GAAG,IAAI,CACjC,OAAO,CAAC,SAAS,CAAC,EAClB,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,CACjE,CAAA;AAED,eAAO,MAAM,kBAAkB,GAAI,6EAKhC;IACD,WAAW,CAAC,EAAE,uBAAuB,CAAA;IACrC,gBAAgB,CAAC,EAAE,uBAAuB,CAAA;IAC1C,iBAAiB,CAAC,EAAE,2BAA2B,CAAA;IAC/C,mBAAmB,CAAC,EAAE,OAAO,CAAA;CACzB,KAAG,KAAK,EAwEb,CAAA"}
+{"version":3,"file":"apiKey.d.ts","sourceRoot":"","sources":["../../../src/auth/baseFields/apiKey.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAA;AAUpE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAEnD,KAAK,uBAAuB,GAAG,IAAI,CACjC,OAAO,CAAC,SAAS,CAAC,EAClB,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,CACjE,CAAA;AAED,eAAO,MAAM,kBAAkB,0DAI5B;IACD,WAAW,CAAC,EAAE,uBAAuB,CAAA;IACrC,gBAAgB,CAAC,EAAE,uBAAuB,CAAA;IAC1C,gBAAgB,CAAC,EAAE,uBAAuB,CAAA;CAC3C,KAAQ,KAAK,EAsEb,CAAA;AAED,gEAAgE;AAChE,eAAO,MAAM,eAAe,WAAY,KAAK,EAAE,KAAG,KAAK,EAMtD,CAAA"}

package/dist/auth/baseFields/apiKey.js

@@ -1,70 +1,101 @@
-import crypto from 'crypto';
-const encryptKey = ({ req, value })=>value ? req.payload.encrypt(value) : null;
-const decryptKey = ({ req, value })=>value ? req.payload.decrypt(value) : undefined;
-export const createAPIKeyFields = ({ apiKeyField, apiKeyIndexField, enableAPIKeyField, includeEnableAPIKey = true } = {})=>{
-    const fields = [];
-    if (includeEnableAPIKey) {
-        fields.push({
-            name: 'enableAPIKey',
-            type: 'checkbox',
-            ...enableAPIKeyField,
+import { fieldAffectsData } from '../../fields/config/types.js';
+import { canCreateOrUpdateAPIKey } from './apiKey/canCreateOrUpdateAPIKey.js';
+import { encryptAPIKey } from './apiKey/encryptAPIKey.js';
+import { omitAPIKeyIndex } from './apiKey/omitAPIKeyIndex.js';
+import { omitEncryptedAPIKey } from './apiKey/omitEncryptedAPIKey.js';
+import { setAPIKeyIndex } from './apiKey/setAPIKeyIndex.js';
+import { setKeyLast4 } from './apiKey/setKeyLast4.js';
+export { omitAPIKey } from './apiKey/omitAPIKey.js';
+export const createAPIKeyFields = ({ apiKeyField, apiKeyIndexField, apiKeyLast4Field } = {})=>{
+    const customAccess = apiKeyField?.access;
+    return [
+        {
+            name: 'apiKey',
+            type: 'text',
+            ...apiKeyField,
+            access: {
+                create: canCreateOrUpdateAPIKey,
+                ...apiKeyField?.access,
+                read: ()=>false,
+                update: apiKeyField?.access?.update ?? canCreateOrUpdateAPIKey
+            },
             admin: {
                 components: {
                     Field: false
                 },
-                ...enableAPIKeyField?.admin
+                ...apiKeyField?.admin
             },
-            label: enableAPIKeyField?.label ?? (({ t })=>t('authentication:enableAPIKey'))
-        });
-    }
-    fields.push({
-        name: 'apiKey',
-        type: 'text',
-        ...apiKeyField,
-        admin: {
-            components: {
-                Field: false
+            hooks: {
+                ...apiKeyField?.hooks,
+                afterRead: [
+                    omitEncryptedAPIKey,
+                    ...apiKeyField?.hooks?.afterRead ?? []
+                ],
+                beforeChange: [
+                    encryptAPIKey,
+                    ...apiKeyField?.hooks?.beforeChange ?? []
+                ]
             },
-            ...apiKeyField?.admin
-        },
-        hooks: {
-            afterRead: [
-                decryptKey
-            ],
-            beforeChange: [
-                encryptKey
-            ],
-            ...apiKeyField?.hooks
+            label: apiKeyField?.label ?? (({ t })=>t('authentication:apiKey'))
         },
-        label: apiKeyField?.label ?? (({ t })=>t('authentication:apiKey'))
-    }, {
-        name: 'apiKeyIndex',
-        type: 'text',
-        ...apiKeyIndexField,
-        admin: {
-            disabled: true,
-            ...apiKeyIndexField?.admin
+        {
+            name: 'apiKeyLast4',
+            type: 'text',
+            ...apiKeyLast4Field,
+            access: {
+                ...apiKeyLast4Field?.access,
+                create: customAccess?.create ?? canCreateOrUpdateAPIKey,
+                read: customAccess?.update ?? canCreateOrUpdateAPIKey,
+                update: customAccess?.update ?? canCreateOrUpdateAPIKey
+            },
+            admin: {
+                components: {
+                    Field: false
+                },
+                ...apiKeyLast4Field?.admin
+            },
+            hooks: {
+                ...apiKeyLast4Field?.hooks,
+                beforeValidate: [
+                    setKeyLast4,
+                    ...apiKeyLast4Field?.hooks?.beforeValidate ?? []
+                ]
+            }
         },
-        hidden: apiKeyIndexField?.hidden ?? true,
-        hooks: {
-            beforeValidate: [
-                ({ data, req, value })=>{
-                    if (data?.apiKey === false || data?.apiKey === null || data?.apiKey === '') {
-                        return null;
-                    }
-                    if (includeEnableAPIKey && (data?.enableAPIKey === false || data?.enableAPIKey === null)) {
-                        return null;
-                    }
-                    if (data?.apiKey) {
-                        return crypto.createHmac('sha256', req.payload.secret).update(data.apiKey).digest('hex');
-                    }
-                    return value;
-                }
-            ],
-            ...apiKeyIndexField?.hooks
+        {
+            name: 'apiKeyIndex',
+            type: 'text',
+            ...apiKeyIndexField,
+            access: {
+                ...apiKeyIndexField?.access,
+                create: customAccess?.create ?? canCreateOrUpdateAPIKey,
+                read: ()=>false,
+                update: customAccess?.update ?? canCreateOrUpdateAPIKey
+            },
+            admin: {
+                disabled: true,
+                ...apiKeyIndexField?.admin
+            },
+            hidden: apiKeyIndexField?.hidden ?? true,
+            hooks: {
+                ...apiKeyIndexField?.hooks,
+                afterRead: [
+                    omitAPIKeyIndex,
+                    ...apiKeyIndexField?.hooks?.afterRead ?? []
+                ],
+                beforeValidate: [
+                    setAPIKeyIndex,
+                    ...apiKeyIndexField?.hooks?.beforeValidate ?? []
+                ]
+            }
         }
+    ];
+};
+/** Builds API key fields and safely merges custom overrides. */ export const getAPIKeyFields = (fields)=>{
+    const customAPIKeyField = fields.find((field)=>fieldAffectsData(field) && field.name === 'apiKey' && field.type === 'text');
+    return createAPIKeyFields({
+        apiKeyField: customAPIKeyField
     });
-    return fields;
 };
 
 //# sourceMappingURL=apiKey.js.map

package/dist/auth/baseFields/apiKey.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/auth/baseFields/apiKey.ts"],"sourcesContent":["import crypto from 'crypto'\n\nimport type { CheckboxField, Field, FieldHook, TextField } from '../../fields/config/types.js'\n\nconst encryptKey: FieldHook = ({ req, value }) =>\n  value ? req.payload.encrypt(value as string) : null\nconst decryptKey: FieldHook = ({ req, value }) =>\n  value ? req.payload.decrypt(value as string) : undefined\n\ntype APIKeyCheckboxFieldOverride = Omit<Partial<CheckboxField>, 'name' | 'type'>\ntype APIKeyTextFieldOverride = Omit<\n  Partial<TextField>,\n  'hasMany' | 'maxRows' | 'minRows' | 'name' | 'type' | 'validate'\n>\n\nexport const createAPIKeyFields = ({\n  apiKeyField,\n  apiKeyIndexField,\n  enableAPIKeyField,\n  includeEnableAPIKey = true,\n}: {\n  apiKeyField?: APIKeyTextFieldOverride\n  apiKeyIndexField?: APIKeyTextFieldOverride\n  enableAPIKeyField?: APIKeyCheckboxFieldOverride\n  includeEnableAPIKey?: boolean\n} = {}): Field[] => {\n  const fields: Field[] = []\n\n  if (includeEnableAPIKey) {\n    fields.push({\n      name: 'enableAPIKey',\n      type: 'checkbox',\n      ...enableAPIKeyField,\n      admin: {\n        components: {\n          Field: false,\n        },\n        ...enableAPIKeyField?.admin,\n      },\n      label: enableAPIKeyField?.label ?? (({ t }) => t('authentication:enableAPIKey')),\n    })\n  }\n\n  fields.push(\n    {\n      name: 'apiKey',\n      type: 'text',\n      ...apiKeyField,\n      admin: {\n        components: {\n          Field: false,\n        },\n        ...apiKeyField?.admin,\n      },\n      hooks: {\n        afterRead: [decryptKey],\n        beforeChange: [encryptKey],\n        ...apiKeyField?.hooks,\n      },\n      label: apiKeyField?.label ?? (({ t }) => t('authentication:apiKey')),\n    },\n    {\n      name: 'apiKeyIndex',\n      type: 'text',\n      ...apiKeyIndexField,\n      admin: {\n        disabled: true,\n        ...apiKeyIndexField?.admin,\n      },\n      hidden: apiKeyIndexField?.hidden ?? true,\n      hooks: {\n        beforeValidate: [\n          ({ data, req, value }) => {\n            if (data?.apiKey === false || data?.apiKey === null || data?.apiKey === '') {\n              return null\n            }\n            if (\n              includeEnableAPIKey &&\n              (data?.enableAPIKey === false || data?.enableAPIKey === null)\n            ) {\n              return null\n            }\n            if (data?.apiKey) {\n              return crypto\n                .createHmac('sha256', req.payload.secret)\n                .update(data.apiKey as string)\n                .digest('hex')\n            }\n            return value\n          },\n        ],\n        ...apiKeyIndexField?.hooks,\n      },\n    },\n  )\n\n  return fields\n}\n"],"names":["crypto","encryptKey","req","value","payload","encrypt","decryptKey","decrypt","undefined","createAPIKeyFields","apiKeyField","apiKeyIndexField","enableAPIKeyField","includeEnableAPIKey","fields","push","name","type","admin","components","Field","label","t","hooks","afterRead","beforeChange","disabled","hidden","beforeValidate","data","apiKey","enableAPIKey","createHmac","secret","update","digest"],"mappings":"AAAA,OAAOA,YAAY,SAAQ;AAI3B,MAAMC,aAAwB,CAAC,EAAEC,GAAG,EAAEC,KAAK,EAAE,GAC3CA,QAAQD,IAAIE,OAAO,CAACC,OAAO,CAACF,SAAmB;AACjD,MAAMG,aAAwB,CAAC,EAAEJ,GAAG,EAAEC,KAAK,EAAE,GAC3CA,QAAQD,IAAIE,OAAO,CAACG,OAAO,CAACJ,SAAmBK;AAQjD,OAAO,MAAMC,qBAAqB,CAAC,EACjCC,WAAW,EACXC,gBAAgB,EAChBC,iBAAiB,EACjBC,sBAAsB,IAAI,EAM3B,GAAG,CAAC,CAAC;IACJ,MAAMC,SAAkB,EAAE;IAE1B,IAAID,qBAAqB;QACvBC,OAAOC,IAAI,CAAC;YACVC,MAAM;YACNC,MAAM;YACN,GAAGL,iBAAiB;YACpBM,OAAO;gBACLC,YAAY;oBACVC,OAAO;gBACT;gBACA,GAAGR,mBAAmBM,KAAK;YAC7B;YACAG,OAAOT,mBAAmBS,SAAU,CAAA,CAAC,EAAEC,CAAC,EAAE,GAAKA,EAAE,8BAA6B;QAChF;IACF;IAEAR,OAAOC,IAAI,CACT;QACEC,MAAM;QACNC,MAAM;QACN,GAAGP,WAAW;QACdQ,OAAO;YACLC,YAAY;gBACVC,OAAO;YACT;YACA,GAAGV,aAAaQ,KAAK;QACvB;QACAK,OAAO;YACLC,WAAW;gBAAClB;aAAW;YACvBmB,cAAc;gBAACxB;aAAW;YAC1B,GAAGS,aAAaa,KAAK;QACvB;QACAF,OAAOX,aAAaW,SAAU,CAAA,CAAC,EAAEC,CAAC,EAAE,GAAKA,EAAE,wBAAuB;IACpE,GACA;QACEN,MAAM;QACNC,MAAM;QACN,GAAGN,gBAAgB;QACnBO,OAAO;YACLQ,UAAU;YACV,GAAGf,kBAAkBO,KAAK;QAC5B;QACAS,QAAQhB,kBAAkBgB,UAAU;QACpCJ,OAAO;YACLK,gBAAgB;gBACd,CAAC,EAAEC,IAAI,EAAE3B,GAAG,EAAEC,KAAK,EAAE;oBACnB,IAAI0B,MAAMC,WAAW,SAASD,MAAMC,WAAW,QAAQD,MAAMC,WAAW,IAAI;wBAC1E,OAAO;oBACT;oBACA,IACEjB,uBACCgB,CAAAA,MAAME,iBAAiB,SAASF,MAAME,iBAAiB,IAAG,GAC3D;wBACA,OAAO;oBACT;oBACA,IAAIF,MAAMC,QAAQ;wBAChB,OAAO9B,OACJgC,UAAU,CAAC,UAAU9B,IAAIE,OAAO,CAAC6B,MAAM,EACvCC,MAAM,CAACL,KAAKC,MAAM,EAClBK,MAAM,CAAC;oBACZ;oBACA,OAAOhC;gBACT;aACD;YACD,GAAGQ,kBAAkBY,KAAK;QAC5B;IACF;IAGF,OAAOT;AACT,EAAC"}
+{"version":3,"sources":["../../../src/auth/baseFields/apiKey.ts"],"sourcesContent":["import type { Field, TextField } from '../../fields/config/types.js'\n\nimport { fieldAffectsData } from '../../fields/config/types.js'\nimport { canCreateOrUpdateAPIKey } from './apiKey/canCreateOrUpdateAPIKey.js'\nimport { encryptAPIKey } from './apiKey/encryptAPIKey.js'\nimport { omitAPIKeyIndex } from './apiKey/omitAPIKeyIndex.js'\nimport { omitEncryptedAPIKey } from './apiKey/omitEncryptedAPIKey.js'\nimport { setAPIKeyIndex } from './apiKey/setAPIKeyIndex.js'\nimport { setKeyLast4 } from './apiKey/setKeyLast4.js'\n\nexport { omitAPIKey } from './apiKey/omitAPIKey.js'\n\ntype APIKeyTextFieldOverride = Omit<\n  Partial<TextField>,\n  'hasMany' | 'maxRows' | 'minRows' | 'name' | 'type' | 'validate'\n>\n\nexport const createAPIKeyFields = ({\n  apiKeyField,\n  apiKeyIndexField,\n  apiKeyLast4Field,\n}: {\n  apiKeyField?: APIKeyTextFieldOverride\n  apiKeyIndexField?: APIKeyTextFieldOverride\n  apiKeyLast4Field?: APIKeyTextFieldOverride\n} = {}): Field[] => {\n  const customAccess = apiKeyField?.access\n\n  return [\n    {\n      name: 'apiKey',\n      type: 'text',\n      ...apiKeyField,\n      access: {\n        create: canCreateOrUpdateAPIKey,\n        ...apiKeyField?.access,\n        read: () => false,\n        update: apiKeyField?.access?.update ?? canCreateOrUpdateAPIKey,\n      },\n      admin: {\n        components: {\n          Field: false,\n        },\n        ...apiKeyField?.admin,\n      },\n      hooks: {\n        ...apiKeyField?.hooks,\n        afterRead: [omitEncryptedAPIKey, ...(apiKeyField?.hooks?.afterRead ?? [])],\n        beforeChange: [encryptAPIKey, ...(apiKeyField?.hooks?.beforeChange ?? [])],\n      },\n      label: apiKeyField?.label ?? (({ t }) => t('authentication:apiKey')),\n    },\n    {\n      name: 'apiKeyLast4',\n      type: 'text',\n      ...apiKeyLast4Field,\n      access: {\n        ...apiKeyLast4Field?.access,\n        create: customAccess?.create ?? canCreateOrUpdateAPIKey,\n        read: customAccess?.update ?? canCreateOrUpdateAPIKey,\n        update: customAccess?.update ?? canCreateOrUpdateAPIKey,\n      },\n      admin: {\n        components: {\n          Field: false,\n        },\n        ...apiKeyLast4Field?.admin,\n      },\n      hooks: {\n        ...apiKeyLast4Field?.hooks,\n        beforeValidate: [setKeyLast4, ...(apiKeyLast4Field?.hooks?.beforeValidate ?? [])],\n      },\n    },\n    {\n      name: 'apiKeyIndex',\n      type: 'text',\n      ...apiKeyIndexField,\n      access: {\n        ...apiKeyIndexField?.access,\n        create: customAccess?.create ?? canCreateOrUpdateAPIKey,\n        read: () => false,\n        update: customAccess?.update ?? canCreateOrUpdateAPIKey,\n      },\n      admin: {\n        disabled: true,\n        ...apiKeyIndexField?.admin,\n      },\n      hidden: apiKeyIndexField?.hidden ?? true,\n      hooks: {\n        ...apiKeyIndexField?.hooks,\n        afterRead: [omitAPIKeyIndex, ...(apiKeyIndexField?.hooks?.afterRead ?? [])],\n        beforeValidate: [setAPIKeyIndex, ...(apiKeyIndexField?.hooks?.beforeValidate ?? [])],\n      },\n    },\n  ]\n}\n\n/** Builds API key fields and safely merges custom overrides. */\nexport const getAPIKeyFields = (fields: Field[]): Field[] => {\n  const customAPIKeyField = fields.find(\n    (field) => fieldAffectsData(field) && field.name === 'apiKey' && field.type === 'text',\n  )\n\n  return createAPIKeyFields({ apiKeyField: customAPIKeyField as TextField | undefined })\n}\n"],"names":["fieldAffectsData","canCreateOrUpdateAPIKey","encryptAPIKey","omitAPIKeyIndex","omitEncryptedAPIKey","setAPIKeyIndex","setKeyLast4","omitAPIKey","createAPIKeyFields","apiKeyField","apiKeyIndexField","apiKeyLast4Field","customAccess","access","name","type","create","read","update","admin","components","Field","hooks","afterRead","beforeChange","label","t","beforeValidate","disabled","hidden","getAPIKeyFields","fields","customAPIKeyField","find","field"],"mappings":"AAEA,SAASA,gBAAgB,QAAQ,+BAA8B;AAC/D,SAASC,uBAAuB,QAAQ,sCAAqC;AAC7E,SAASC,aAAa,QAAQ,4BAA2B;AACzD,SAASC,eAAe,QAAQ,8BAA6B;AAC7D,SAASC,mBAAmB,QAAQ,kCAAiC;AACrE,SAASC,cAAc,QAAQ,6BAA4B;AAC3D,SAASC,WAAW,QAAQ,0BAAyB;AAErD,SAASC,UAAU,QAAQ,yBAAwB;AAOnD,OAAO,MAAMC,qBAAqB,CAAC,EACjCC,WAAW,EACXC,gBAAgB,EAChBC,gBAAgB,EAKjB,GAAG,CAAC,CAAC;IACJ,MAAMC,eAAeH,aAAaI;IAElC,OAAO;QACL;YACEC,MAAM;YACNC,MAAM;YACN,GAAGN,WAAW;YACdI,QAAQ;gBACNG,QAAQf;gBACR,GAAGQ,aAAaI,MAAM;gBACtBI,MAAM,IAAM;gBACZC,QAAQT,aAAaI,QAAQK,UAAUjB;YACzC;YACAkB,OAAO;gBACLC,YAAY;oBACVC,OAAO;gBACT;gBACA,GAAGZ,aAAaU,KAAK;YACvB;YACAG,OAAO;gBACL,GAAGb,aAAaa,KAAK;gBACrBC,WAAW;oBAACnB;uBAAyBK,aAAaa,OAAOC,aAAa,EAAE;iBAAE;gBAC1EC,cAAc;oBAACtB;uBAAmBO,aAAaa,OAAOE,gBAAgB,EAAE;iBAAE;YAC5E;YACAC,OAAOhB,aAAagB,SAAU,CAAA,CAAC,EAAEC,CAAC,EAAE,GAAKA,EAAE,wBAAuB;QACpE;QACA;YACEZ,MAAM;YACNC,MAAM;YACN,GAAGJ,gBAAgB;YACnBE,QAAQ;gBACN,GAAGF,kBAAkBE,MAAM;gBAC3BG,QAAQJ,cAAcI,UAAUf;gBAChCgB,MAAML,cAAcM,UAAUjB;gBAC9BiB,QAAQN,cAAcM,UAAUjB;YAClC;YACAkB,OAAO;gBACLC,YAAY;oBACVC,OAAO;gBACT;gBACA,GAAGV,kBAAkBQ,KAAK;YAC5B;YACAG,OAAO;gBACL,GAAGX,kBAAkBW,KAAK;gBAC1BK,gBAAgB;oBAACrB;uBAAiBK,kBAAkBW,OAAOK,kBAAkB,EAAE;iBAAE;YACnF;QACF;QACA;YACEb,MAAM;YACNC,MAAM;YACN,GAAGL,gBAAgB;YACnBG,QAAQ;gBACN,GAAGH,kBAAkBG,MAAM;gBAC3BG,QAAQJ,cAAcI,UAAUf;gBAChCgB,MAAM,IAAM;gBACZC,QAAQN,cAAcM,UAAUjB;YAClC;YACAkB,OAAO;gBACLS,UAAU;gBACV,GAAGlB,kBAAkBS,KAAK;YAC5B;YACAU,QAAQnB,kBAAkBmB,UAAU;YACpCP,OAAO;gBACL,GAAGZ,kBAAkBY,KAAK;gBAC1BC,WAAW;oBAACpB;uBAAqBO,kBAAkBY,OAAOC,aAAa,EAAE;iBAAE;gBAC3EI,gBAAgB;oBAACtB;uBAAoBK,kBAAkBY,OAAOK,kBAAkB,EAAE;iBAAE;YACtF;QACF;KACD;AACH,EAAC;AAED,8DAA8D,GAC9D,OAAO,MAAMG,kBAAkB,CAACC;IAC9B,MAAMC,oBAAoBD,OAAOE,IAAI,CACnC,CAACC,QAAUlC,iBAAiBkC,UAAUA,MAAMpB,IAAI,KAAK,YAAYoB,MAAMnB,IAAI,KAAK;IAGlF,OAAOP,mBAAmB;QAAEC,aAAauB;IAA2C;AACtF,EAAC"}

package/dist/auth/baseFields/auth.d.ts

@@ -1,3 +1,4 @@
 import type { Field } from '../../fields/config/types.js';
 export declare const baseAuthFields: Field[];
+export declare const resetPasswordRequestedAtField: Field;
 //# sourceMappingURL=auth.d.ts.map

package/dist/auth/baseFields/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/auth/baseFields/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAA;AAEzD,eAAO,MAAM,cAAc,EAAE,KAAK,EAqCjC,CAAA"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/auth/baseFields/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAA;AAEzD,eAAO,MAAM,cAAc,EAAE,KAAK,EAqCjC,CAAA;AAED,eAAO,MAAM,6BAA6B,EAAE,KAQ3C,CAAA"}

package/dist/auth/baseFields/auth.js

@@ -36,5 +36,14 @@ export const baseAuthFields = [
         hidden: true
     }
 ];
+export const resetPasswordRequestedAtField = {
+    name: 'resetPasswordRequestedAt',
+    type: 'date',
+    access: {
+        create: ()=>false,
+        update: ()=>false
+    },
+    hidden: true
+};
 
 //# sourceMappingURL=auth.js.map

package/dist/auth/baseFields/auth.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/auth/baseFields/auth.ts"],"sourcesContent":["import type { Field } from '../../fields/config/types.js'\n\nexport const baseAuthFields: Field[] = [\n  {\n    name: 'resetPasswordToken',\n    type: 'text',\n    access: {\n      create: () => false,\n      update: () => false,\n    },\n    hidden: true,\n  },\n  {\n    name: 'resetPasswordExpiration',\n    type: 'date',\n    access: {\n      create: () => false,\n      update: () => false,\n    },\n    hidden: true,\n  },\n  {\n    name: 'salt',\n    type: 'text',\n    access: {\n      create: () => false,\n      update: () => false,\n    },\n    hidden: true,\n  },\n  {\n    name: 'hash',\n    type: 'text',\n    access: {\n      create: () => false,\n      update: () => false,\n    },\n    hidden: true,\n  },\n]\n"],"names":["baseAuthFields","name","type","access","create","update","hidden"],"mappings":"AAEA,OAAO,MAAMA,iBAA0B;IACrC;QACEC,MAAM;QACNC,MAAM;QACNC,QAAQ;YACNC,QAAQ,IAAM;YACdC,QAAQ,IAAM;QAChB;QACAC,QAAQ;IACV;IACA;QACEL,MAAM;QACNC,MAAM;QACNC,QAAQ;YACNC,QAAQ,IAAM;YACdC,QAAQ,IAAM;QAChB;QACAC,QAAQ;IACV;IACA;QACEL,MAAM;QACNC,MAAM;QACNC,QAAQ;YACNC,QAAQ,IAAM;YACdC,QAAQ,IAAM;QAChB;QACAC,QAAQ;IACV;IACA;QACEL,MAAM;QACNC,MAAM;QACNC,QAAQ;YACNC,QAAQ,IAAM;YACdC,QAAQ,IAAM;QAChB;QACAC,QAAQ;IACV;CACD,CAAA"}
+{"version":3,"sources":["../../../src/auth/baseFields/auth.ts"],"sourcesContent":["import type { Field } from '../../fields/config/types.js'\n\nexport const baseAuthFields: Field[] = [\n  {\n    name: 'resetPasswordToken',\n    type: 'text',\n    access: {\n      create: () => false,\n      update: () => false,\n    },\n    hidden: true,\n  },\n  {\n    name: 'resetPasswordExpiration',\n    type: 'date',\n    access: {\n      create: () => false,\n      update: () => false,\n    },\n    hidden: true,\n  },\n  {\n    name: 'salt',\n    type: 'text',\n    access: {\n      create: () => false,\n      update: () => false,\n    },\n    hidden: true,\n  },\n  {\n    name: 'hash',\n    type: 'text',\n    access: {\n      create: () => false,\n      update: () => false,\n    },\n    hidden: true,\n  },\n]\n\nexport const resetPasswordRequestedAtField: Field = {\n  name: 'resetPasswordRequestedAt',\n  type: 'date',\n  access: {\n    create: () => false,\n    update: () => false,\n  },\n  hidden: true,\n}\n"],"names":["baseAuthFields","name","type","access","create","update","hidden","resetPasswordRequestedAtField"],"mappings":"AAEA,OAAO,MAAMA,iBAA0B;IACrC;QACEC,MAAM;QACNC,MAAM;QACNC,QAAQ;YACNC,QAAQ,IAAM;YACdC,QAAQ,IAAM;QAChB;QACAC,QAAQ;IACV;IACA;QACEL,MAAM;QACNC,MAAM;QACNC,QAAQ;YACNC,QAAQ,IAAM;YACdC,QAAQ,IAAM;QAChB;QACAC,QAAQ;IACV;IACA;QACEL,MAAM;QACNC,MAAM;QACNC,QAAQ;YACNC,QAAQ,IAAM;YACdC,QAAQ,IAAM;QAChB;QACAC,QAAQ;IACV;IACA;QACEL,MAAM;QACNC,MAAM;QACNC,QAAQ;YACNC,QAAQ,IAAM;YACdC,QAAQ,IAAM;QAChB;QACAC,QAAQ;IACV;CACD,CAAA;AAED,OAAO,MAAMC,gCAAuC;IAClDN,MAAM;IACNC,MAAM;IACNC,QAAQ;QACNC,QAAQ,IAAM;QACdC,QAAQ,IAAM;IAChB;IACAC,QAAQ;AACV,EAAC"}

package/dist/auth/cookies.d.ts

@@ -33,8 +33,8 @@ type GeneratePayloadCookieArgs = {
     returnCookieAsObject?: boolean;
     token: string;
 };
-export declare const generatePayloadCookie: <T extends GeneratePayloadCookieArgs>({ collectionAuthConfig, cookiePrefix, returnCookieAsObject, token, }: T) => T["returnCookieAsObject"] extends true ? CookieObject : string;
-export declare const generateExpiredPayloadCookie: <T extends Omit<GeneratePayloadCookieArgs, "token">>({ collectionAuthConfig, cookiePrefix, returnCookieAsObject, }: T) => T["returnCookieAsObject"] extends true ? CookieObject : string;
+export declare const generatePayloadCookie: <T extends GeneratePayloadCookieArgs>({ collectionAuthConfig, cookiePrefix, returnCookieAsObject, token, }: T) => T['returnCookieAsObject'] extends true ? CookieObject : string;
+export declare const generateExpiredPayloadCookie: <T extends Omit<GeneratePayloadCookieArgs, 'token'>>({ collectionAuthConfig, cookiePrefix, returnCookieAsObject, }: T) => T['returnCookieAsObject'] extends true ? CookieObject : string;
 export declare function parseCookies(headers: Request['headers']): Map<string, string>;
 export {};
 //# sourceMappingURL=cookies.d.ts.map

package/dist/auth/cookies.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cookies.d.ts","sourceRoot":"","sources":["../../src/auth/cookies.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAA;AAEjF,KAAK,aAAa,GAAG;IACnB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,IAAI,CAAA;IACd,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,oBAAoB,EAAE,OAAO,CAAA;IAC7B,QAAQ,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAA;IACpC,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,CAAA;AAED,KAAK,YAAY,GAAG;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAA;IACpC,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;CAC1B,CAAA;AAED,eAAO,MAAM,cAAc,GAAI,oBAAoB,GAAG,OAAO,EAC3D,MAAM,aAAa,KAClB,oBAAoB,SAAS,IAAI,GAAG,YAAY,GAAG,MAiFrD,CAAA;AACD,KAAK,uBAAuB,GAAG;IAK7B,OAAO,EAAE,MAAM,CAAA;CAChB,CAAA;AACD,eAAO,MAAM,mBAAmB,GAAI,aAAoB,uBAAuB,SAI9E,CAAA;AAED,KAAK,yBAAyB,GAAG;IAE/B,oBAAoB,EAAE,yBAAyB,CAAC,MAAM,CAAC,CAAA;IAEvD,YAAY,EAAE,MAAM,CAAA;IAEpB,oBAAoB,CAAC,EAAE,OAAO,CAAA;IAE9B,KAAK,EAAE,MAAM,CAAA;CACd,CAAA;AACD,eAAO,MAAM,qBAAqB,GAAI,CAAC,SAAS,yBAAyB,EAAE,sEAKxE,CAAC,KAAG,CAAC,CAAC,sBAAsB,CAAC,SAAS,IAAI,GAAG,YAAY,GAAG,MAmB9D,CAAA;AAED,eAAO,MAAM,4BAA4B,GAAI,CAAC,SAAS,IAAI,CAAC,yBAAyB,EAAE,OAAO,CAAC,EAAE,+DAI9F,CAAC,KAAG,CAAC,CAAC,sBAAsB,CAAC,SAAS,IAAI,GAAG,YAAY,GAAG,MAoB9D,CAAA;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,uBA8CvD"}
+{"version":3,"file":"cookies.d.ts","sourceRoot":"","sources":["../../src/auth/cookies.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAA;AAEjF,KAAK,aAAa,GAAG;IACnB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,IAAI,CAAA;IACd,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,oBAAoB,EAAE,OAAO,CAAA;IAC7B,QAAQ,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAA;IACpC,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,CAAA;AAED,KAAK,YAAY,GAAG;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAA;IACpC,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;CAC1B,CAAA;AAED,eAAO,MAAM,cAAc,GAAI,oBAAoB,GAAG,OAAO,QACrD,aAAa,KAClB,oBAAoB,SAAS,IAAI,GAAG,YAAY,GAAG,MAiFrD,CAAA;AACD,KAAK,uBAAuB,GAAG;IAK7B,OAAO,EAAE,MAAM,CAAA;CAChB,CAAA;AACD,eAAO,MAAM,mBAAmB,gBAAwB,uBAAuB,SAI9E,CAAA;AAED,KAAK,yBAAyB,GAAG;IAE/B,oBAAoB,EAAE,yBAAyB,CAAC,MAAM,CAAC,CAAA;IAEvD,YAAY,EAAE,MAAM,CAAA;IAEpB,oBAAoB,CAAC,EAAE,OAAO,CAAA;IAE9B,KAAK,EAAE,MAAM,CAAA;CACd,CAAA;AACD,eAAO,MAAM,qBAAqB,GAAI,CAAC,SAAS,yBAAyB,wEAKtE,CAAC,KAAG,CAAC,CAAC,sBAAsB,CAAC,SAAS,IAAI,GAAG,YAAY,GAAG,MAmB9D,CAAA;AAED,eAAO,MAAM,4BAA4B,GAAI,CAAC,SAAS,IAAI,CAAC,yBAAyB,EAAE,OAAO,CAAC,iEAI5F,CAAC,KAAG,CAAC,CAAC,sBAAsB,CAAC,SAAS,IAAI,GAAG,YAAY,GAAG,MAoB9D,CAAA;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,uBA8CvD"}

package/dist/auth/createAuthToken.d.ts

@@ -0,0 +1,23 @@
+import type { SanitizedCollectionConfig } from '../collections/config/types.js';
+import type { AuthenticatedUser } from '../index.js';
+import type { PayloadRequest } from '../types/index.js';
+/**
+ * Starts a login session for the user and signs the JWT for it, the same token a password login
+ * returns. Payload's JWT strategy accepts it. The session is saved on the user right away.
+ */
+export declare const createAuthToken: ({ collectionConfig, email, req, user, }: {
+    collectionConfig: SanitizedCollectionConfig;
+    /** The `email` claim of the token. */
+    email: string;
+    req: PayloadRequest;
+    user: AuthenticatedUser;
+}) => Promise<{
+    exp: number;
+    /**
+     * The ID of the session the token belongs to. Removing that session from the user, like logout
+     * does, makes the token stop working.
+     */
+    sid?: string;
+    token: string;
+}>;
+//# sourceMappingURL=createAuthToken.d.ts.map

package/dist/auth/createAuthToken.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createAuthToken.d.ts","sourceRoot":"","sources":["../../src/auth/createAuthToken.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAA;AAC/E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAMvD;;;GAGG;AACH,eAAO,MAAM,eAAe,4CAKzB;IACD,gBAAgB,EAAE,yBAAyB,CAAA;IAC3C,sCAAsC;IACtC,KAAK,EAAE,MAAM,CAAA;IACb,GAAG,EAAE,cAAc,CAAA;IACnB,IAAI,EAAE,iBAAiB,CAAA;CACxB,KAAG,OAAO,CAAC;IACV,GAAG,EAAE,MAAM,CAAA;IACX;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;CACd,CAUA,CAAA"}

package/dist/auth/createAuthToken.js

@@ -0,0 +1,31 @@
+import { getFieldsToSign } from './getFieldsToSign.js';
+import { jwtSign } from './jwt.js';
+import { addSessionToUser } from './sessions.js';
+/**
+ * Starts a login session for the user and signs the JWT for it, the same token a password login
+ * returns. Payload's JWT strategy accepts it. The session is saved on the user right away.
+ */ export const createAuthToken = async ({ collectionConfig, email, req, user })=>{
+    const { sid } = await addSessionToUser({
+        collectionConfig,
+        payload: req.payload,
+        req,
+        user
+    });
+    const { exp, token } = await jwtSign({
+        fieldsToSign: getFieldsToSign({
+            collectionConfig,
+            email,
+            sid,
+            user
+        }),
+        secret: req.payload.secret,
+        tokenExpiration: collectionConfig.auth.tokenExpiration
+    });
+    return {
+        exp,
+        sid,
+        token
+    };
+};
+
+//# sourceMappingURL=createAuthToken.js.map

package/dist/auth/createAuthToken.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/createAuthToken.ts"],"sourcesContent":["import type { SanitizedCollectionConfig } from '../collections/config/types.js'\nimport type { AuthenticatedUser } from '../index.js'\nimport type { PayloadRequest } from '../types/index.js'\n\nimport { getFieldsToSign } from './getFieldsToSign.js'\nimport { jwtSign } from './jwt.js'\nimport { addSessionToUser } from './sessions.js'\n\n/**\n * Starts a login session for the user and signs the JWT for it, the same token a password login\n * returns. Payload's JWT strategy accepts it. The session is saved on the user right away.\n */\nexport const createAuthToken = async ({\n  collectionConfig,\n  email,\n  req,\n  user,\n}: {\n  collectionConfig: SanitizedCollectionConfig\n  /** The `email` claim of the token. */\n  email: string\n  req: PayloadRequest\n  user: AuthenticatedUser\n}): Promise<{\n  exp: number\n  /**\n   * The ID of the session the token belongs to. Removing that session from the user, like logout\n   * does, makes the token stop working.\n   */\n  sid?: string\n  token: string\n}> => {\n  const { sid } = await addSessionToUser({ collectionConfig, payload: req.payload, req, user })\n\n  const { exp, token } = await jwtSign({\n    fieldsToSign: getFieldsToSign({ collectionConfig, email, sid, user }),\n    secret: req.payload.secret,\n    tokenExpiration: collectionConfig.auth.tokenExpiration,\n  })\n\n  return { exp, sid, token }\n}\n"],"names":["getFieldsToSign","jwtSign","addSessionToUser","createAuthToken","collectionConfig","email","req","user","sid","payload","exp","token","fieldsToSign","secret","tokenExpiration","auth"],"mappings":"AAIA,SAASA,eAAe,QAAQ,uBAAsB;AACtD,SAASC,OAAO,QAAQ,WAAU;AAClC,SAASC,gBAAgB,QAAQ,gBAAe;AAEhD;;;CAGC,GACD,OAAO,MAAMC,kBAAkB,OAAO,EACpCC,gBAAgB,EAChBC,KAAK,EACLC,GAAG,EACHC,IAAI,EAOL;IASC,MAAM,EAAEC,GAAG,EAAE,GAAG,MAAMN,iBAAiB;QAAEE;QAAkBK,SAASH,IAAIG,OAAO;QAAEH;QAAKC;IAAK;IAE3F,MAAM,EAAEG,GAAG,EAAEC,KAAK,EAAE,GAAG,MAAMV,QAAQ;QACnCW,cAAcZ,gBAAgB;YAAEI;YAAkBC;YAAOG;YAAKD;QAAK;QACnEM,QAAQP,IAAIG,OAAO,CAACI,MAAM;QAC1BC,iBAAiBV,iBAAiBW,IAAI,CAACD,eAAe;IACxD;IAEA,OAAO;QAAEJ;QAAKF;QAAKG;IAAM;AAC3B,EAAC"}