Token Data
During the lifecycle of a request you will be able to access the data you have configured to be stored in the JWT by accessing req.user. The user object is automatically appended to the request for you.
Definining Token Data
You can specify what data gets encoded to the Cookie/JWT-Token by setting saveToJWT property on fields within your auth collection.
1
import type { CollectionConfig } from 'payload'
2
export const Users: CollectionConfig = {
3
slug: 'users',
4
auth: true,
5
fields: [
6
{
7
// will be stored in the JWT
8
saveToJWT: true,
9
type: 'select',
10
name: 'role',
11
options: [
12
'super-admin',
13
'user',
14
]
15
},
16
{
17
// the entire object will be stored in the JWT
18
// tab fields can do the same thing!
19
saveToJWT: true,
20
type: 'group',
21
name: 'group1',
22
fields: [
23
{
24
type: 'text',
25
name: 'includeField',
26
},
27
{
28
// will be omitted from the JWT
29
saveToJWT: false,
30
type: 'text',
31
name: 'omitField',
32
},
33
]
34
},
35
{
36
type: 'group',
37
name: 'group2',
38
fields: [
39
{
40
// will be stored in the JWT
41
// but stored at the top level
42
saveToJWT: true,
43
type: 'text',
44
name: 'includeField',
45
},
46
{
47
type: 'text',
48
name: 'omitField',
49
},
50
]
51
},
52
]
53
}
Using Token Data
This is especially helpful when writing Hooks and Access Control that depend on user defined fields.
1
import type { CollectionConfig } from 'payload'
2
export const Invoices: CollectionConfig = {
3
slug: 'invoices',
4
access: {
5
read: ({ req, data }) => {
6
if (!req?.user) return false
7
if ({ req.user?.role === 'super-admin'}) {
8
return true
9
}
10
return data.owner === req.user.id
11
}
12
}
13
fields: [
14
{
15
name: 'owner',
16
relationTo: 'users'
17
},
18
// ... other fields
19
],
20
}
Next