Security — Payload CMS plugins 9

Adds WebAuthn passkey login and management to Payload CMS accounts via Better Auth.

Adds full and partial refund records to Payload ecommerce orders, with per-line caps, optional restock, and an append-only audit trail.

Sells digital products from a Payload store using signed, expiring download links that stop working when an order is refunded.

Scans Payload upload collections for malware and secrets via the CypherScan API and blocks suspicious files before they persist.

Cookie banner, script gating and cookie declarations managed from the Payload admin panel.

A plugin for Payload CMS that tracks events and enhances security.

Adds role-based access control to Payload CMS v3 with wildcard permissions, auto-generated permissions per collection, and a managed Roles collection.

RBAC plugin that generates user and role collections and injects fine-grained access control across Payload collections, globals, fields, and endpoints.

Applies default role-based access control to every Payload collection, granting CRUD access to specified roles such as admin and executive.