Allow local API login without password

[mstone121]

I would like to have the option to log the user in without a password. This is useful if you have custom authentication that doesn't play well with passport or other currently support payload integrations but you still want to keep local auth enabled.

Essentially, all I'm asking for is the ability to run this section of code (minus the beforeLogin hook) without the password check that happens earlier:

payload/src/auth/operations/login.ts

Lines 124 to 162 in cd0bf68

	const fieldsToSign = getFieldsToSign({
	collectionConfig,
	user,
	email,
	});
	await collectionConfig.hooks.beforeLogin.reduce(async (priorHook, hook) => {
	await priorHook;
	user = (await hook({
	user,
	req: args.req,
	})) || user;
	}, Promise.resolve());
	const token = jwt.sign(
	fieldsToSign,
	secret,
	{
	expiresIn: collectionConfig.auth.tokenExpiration,
	},
	);
	if (args.res) {
	const cookieOptions: CookieOptions = {
	path: '/',
	httpOnly: true,
	expires: getCookieExpiration(collectionConfig.auth.tokenExpiration),
	secure: collectionConfig.auth.cookies.secure,
	sameSite: collectionConfig.auth.cookies.sameSite,
	domain: undefined,
	};
	if (collectionConfig.auth.cookies.domain) cookieOptions.domain = collectionConfig.auth.cookies.domain;
	args.res.cookie(`${config.cookiePrefix}-token`, token, cookieOptions);
	}
	req.user = user;

See also #1340, #1340 (reply in thread)

[mstone121]

Duplicate of #2895