payloadcms

Files

contip b1fa76e397 fix: keep apiKey encrypted in refresh operation (#13063 ) (#13177 )

### What?
Prevents decrypted apiKey from being saved back to database on the auth
refresh operation.

### Why?
References issue #13063: refreshing a token for a logged-in user
decrypted `apiKey` and wrote it back in plaintext, corrupting the user
record.

### How?
The user is now fetched with `db.findOne` instead of `findByID`,
preserving the encryption of the key when saved back to the database
using `db.updateOne`. The user record is then re-fetched using
`findByID`, allowing for the decrypted key to be provided in the
response.

### Tests
* ✅ keeps apiKey encrypted in DB after refresh
* ✅ returns user with decrypted apiKey after refresh

Fixes #13063

2025-07-29 16:27:45 -04:00

_community

fix: svg+xml file detection (#13276 )

2025-07-25 18:33:53 +00:00

access-control

feat(ui): adds support for copy pasting complex fields (#11513 )

2025-07-09 13:59:22 +00:00

admin

fix(next): catch list filter errors, prevent list view crash (#13297 )

2025-07-29 11:30:07 -04:00

admin-bar

chore: fix all lint errors and add mechanisms to prevent them from appearing again (#12401 )

2025-05-19 12:36:40 -03:00

admin-root

feat(next): add redirect from ${adminRoute}/collections to ${adminRoute} (#13061 )

2025-07-09 10:39:02 -04:00

app

feat: deprecates getPayloadHMR in favor of simpler getPayload (#9249 )

2024-11-16 15:30:05 -05:00

array-update

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

auth

fix: keep apiKey encrypted in refresh operation (#13063 ) (#13177 )

2025-07-29 16:27:45 -04:00

auth-basic

chore: run dev:generate-types (#11994 )

2025-04-08 17:25:29 -03:00

benchmark-blocks

chore: fix all lint errors and add mechanisms to prevent them from appearing again (#12401 )

2025-05-19 12:36:40 -03:00

bulk-edit

feat: group by (#13138 )

2025-07-24 14:00:52 -04:00

collections-graphql

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

collections-rest

feat: collection-level disableBulkEdit (#12850 )

2025-06-19 09:18:29 +00:00

config

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

create-payload-app

chore: fix all lint errors and add mechanisms to prevent them from appearing again (#12401 )

2025-05-19 12:36:40 -03:00

custom-graphql

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

database

perf(drizzle): 2x faster db.deleteMany (#13255 )

2025-07-25 15:46:09 -07:00

dataloader

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

chore: fix all lint errors and add mechanisms to prevent them from appearing again (#12401 )

2025-05-19 12:36:40 -03:00

email-nodemailer

chore: fix all lint errors and add mechanisms to prevent them from appearing again (#12401 )

2025-05-19 12:36:40 -03:00

email-resend

chore: fix all lint errors and add mechanisms to prevent them from appearing again (#12401 )

2025-05-19 12:36:40 -03:00

endpoints

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

field-error-states

chore: fix all lint errors and add mechanisms to prevent them from appearing again (#12401 )

2025-05-19 12:36:40 -03:00

field-perf

chore: fix all lint errors and add mechanisms to prevent them from appearing again (#12401 )

2025-05-19 12:36:40 -03:00

fields

fix(ui): properly sync search params to user preferences (#13200 )

2025-07-18 09:29:26 -04:00

fields-relationship

feat: group by (#13138 )

2025-07-24 14:00:52 -04:00

folders

feat: adds trash support (soft deletes) (#12656 )

2025-07-25 09:08:22 -04:00

folders-browse-by-disabled

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

form-state

fix(ui): block rows unexpectedly collapse and array rows not collapsed on init (#12987 )

2025-06-30 21:12:26 -04:00

globals

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

graphql

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

graphql-schema-gen

chore: fix all lint errors and add mechanisms to prevent them from appearing again (#12401 )

2025-05-19 12:36:40 -03:00

group-by

fix(next): group by null relationship crashes list view (#13315 )

2025-07-29 11:55:02 -04:00

helpers

fix(ui): autosave-enabled document drawers close unexpectedly within the join field (#13298 )

2025-07-29 11:49:15 -04:00

hooks

feat: expose data argument in afterChange hook for collections and globals (#12756 )

2025-06-11 06:23:22 -07:00

i18n

test: move i18n list tests to i18n suite (#13143 )

2025-07-12 07:03:26 -04:00

import-test

feat: adds jobs queue (#8228 )

2024-10-30 17:56:50 +00:00

joins

fix(ui): autosave-enabled document drawers close unexpectedly within the join field (#13298 )

2025-07-29 11:49:15 -04:00

lexical

fix(richtext-lexical): unify indent between different converters and make paragraphs and lists match without CSS (#13274 )

2025-07-25 22:58:49 +01:00

lexical-mdx

chore: fix all lint errors and add mechanisms to prevent them from appearing again (#12401 )

2025-05-19 12:36:40 -03:00

live-preview

fix(ui): autosave-enabled document drawers close unexpectedly within the join field (#13298 )

2025-07-29 11:49:15 -04:00

loader

feat!: beta-next (#7620 )

2024-08-13 12:54:33 -04:00

localization

fix(ui): preserve localized blocks and arrays when using CopyToLocale (#13216 )

2025-07-24 20:37:13 +01:00

localization-rtl

chore: fix all lint errors and add mechanisms to prevent them from appearing again (#12401 )

2025-05-19 12:36:40 -03:00

locked-documents

feat: group by (#13138 )

2025-07-24 14:00:52 -04:00

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

migrations-cli

chore: fix all lint errors and add mechanisms to prevent them from appearing again (#12401 )

2025-05-19 12:36:40 -03:00

nested-fields

chore: fix all lint errors and add mechanisms to prevent them from appearing again (#12401 )

2025-05-19 12:36:40 -03:00

payload-cloud

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

plugin-cloud-storage

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

plugin-form-builder

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

plugin-import-export

fix(plugin-import-export): json preview and downloads preserve nesting and exclude disabled fields (#13210 )

2025-07-24 11:36:46 -04:00

plugin-multi-tenant

fix(plugin-multi-tenant): selector could become hidden (#13134 )

2025-07-11 16:34:55 -04:00

plugin-nested-docs

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

plugin-redirects

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

plugin-search

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

plugin-sentry

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

plugin-seo

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

plugin-stripe

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

plugins

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

query-presets

feat: group by (#13138 )

2025-07-24 14:00:52 -04:00

queues

feat: scheduling jobs (#12863 )

2025-07-18 06:48:27 -04:00

relationships

fix: filtering by polymorphic relationships inside other fields (#13265 )

2025-07-25 09:10:21 -04:00

scripts

feat(next): root admin (#7276 )

2024-07-23 13:44:44 -04:00

select

chore: add new int test verifying that select *improves* performance of new optimization (#13254 )

2025-07-23 16:48:25 -07:00

server-functions

feat: auth sessions (#12483 )

2025-06-27 09:13:52 -04:00

sort

test: fix flaky sorting test (#13303 )

2025-07-29 03:25:09 +00:00

storage-azure

feat(storage-*): include modified headers into the response headers of files when using adapters (#12096 )

2025-07-10 08:00:26 -07:00

storage-gcs

feat(storage-*): include modified headers into the response headers of files when using adapters (#12096 )

2025-07-10 08:00:26 -07:00

storage-s3

feat(storage-*): include modified headers into the response headers of files when using adapters (#12096 )

2025-07-10 08:00:26 -07:00

storage-uploadthing

feat(storage-*): include modified headers into the response headers of files when using adapters (#12096 )

2025-07-10 08:00:26 -07:00

storage-vercel-blob

feat(storage-*): include modified headers into the response headers of files when using adapters (#12096 )

2025-07-10 08:00:26 -07:00

trash

fix(next): unable to view trashed documents when group-by is enabled (#13300 )

2025-07-28 11:29:04 -07:00

types

fix: strict custom view paths (#12968 )

2025-06-29 14:20:54 -04:00

uploads

fix: filters cookies with the payload- prefix in getExternalFile by default (#13215 )

2025-07-29 16:21:50 -04:00

versions

fix(ui): autosave-enabled document drawers close unexpectedly within the join field (#13298 )

2025-07-29 11:49:15 -04:00

.prettierignore

chore: regenerate all types in test dir, and add to eslint & prettier ignores

2024-07-11 15:59:38 -04:00

.swcrc

…

buildConfigWithDefaults.ts

chore: fix various e2e test setup issues (#12670 )

2025-06-04 17:34:37 -03:00

credentials.ts

…

CustomDashboard.tsx

…

dev.ts

chore: enable turbopack by default in monorepo (#12684 )

2025-06-05 22:01:55 -03:00

docker-compose.yml

fix(plugin-cloud-storage): actually deprecate adapters (#9640 )

2024-12-31 09:14:56 -05:00

eslint.config.js

fix(ui): properly sync search params to user preferences (#13200 )

2025-07-18 09:29:26 -04:00

generateDatabaseAdapter.ts

fix(db-mongodb): improve compatibility with Firestore database (#12763 )

2025-07-16 15:17:43 -04:00

generateDatabaseSchema.ts

fix(db-mongodb): improve compatibility with Firestore database (#12763 )

2025-07-16 15:17:43 -04:00

generateGraphQLSchema.ts

feat!: beta-next (#7620 )

2024-08-13 12:54:33 -04:00

generateImportMap.ts

feat: payload admin bar (#3684 )

2025-03-05 19:14:35 +00:00

generateTypes.ts

chore: gitignore test/databaseAdapter (#8235 )

2024-09-16 17:02:08 +00:00

helpers.ts

feat: group by (#13138 )

2025-07-24 14:00:52 -04:00

initDevAndTest.ts

feat: scheduling jobs (#12863 )

2025-07-18 06:48:27 -04:00

jest-spec-reporter.cjs

feat!: on demand rsc (#8364 )

2024-11-11 13:59:05 -05:00

jest.config.js

chore: use custom jest reporter to achieve sane jest logs (#8607 )

2024-10-11 18:54:39 +00:00

jest.setup.js

fix: localized fields within block references were not handled properly if any parent is localized (#11207 )

2025-02-17 19:50:32 +00:00

jestreporter.cjs

chore: use custom jest reporter to achieve sane jest logs (#8607 )

2024-10-11 18:54:39 +00:00

next-env.d.ts

build: fix tsconfig monorepo setup (#10028 )

2024-12-17 14:49:29 -05:00

next.config.mjs

fix(plugin-multi-tenant): selector could become hidden (#13134 )

2025-07-11 16:34:55 -04:00

package.json

feat: support next.js 15.4.4 (#13280 )

2025-07-28 16:23:43 +00:00

playwright.bail.config.ts

…

playwright.config.ts

chore: fix flaky lexical test (#11035 )

2025-02-07 03:24:49 +00:00

runE2E.ts

chore: enable turbopack by default in monorepo (#12684 )

2025-06-05 22:01:55 -03:00

runInit.ts

feat: scheduling jobs (#12863 )

2025-07-18 06:48:27 -04:00

runInitSeparateProcess.ts

chore: upgrade to pnpm v9, regenerate lockfile (#7369 )

2024-08-14 08:57:04 -04:00

safelyRunScript.ts

chore: when dev server restarts, ensure exiting the parent process kills child process (#8703 )

2024-10-14 20:02:26 +00:00

setupProd.ts

feat: payload admin bar (#3684 )

2025-03-05 19:14:35 +00:00

test.env

chore: bump node version in monorepo and add new flag for node 23.6+ (#12328 )

2025-05-12 09:41:18 -04:00

testEmailAdapter.ts

…

testHooks.ts

perf: deduplicate blocks used in multiple places using new config.blocks property (#10905 )

2025-02-14 00:08:20 +00:00

tsconfig.eslint.json

…

tsconfig.json

chore: make TypeScript strict in test folder. Simplify tsconfig (#10582 )

2025-01-14 20:00:00 -03:00

tsconfig.typecheck.json

feat: payload admin bar (#3684 )

2025-03-05 19:14:35 +00:00