blacklight-spotlight 5.3.2 → 6.0.0.rc2

data/config/locales/spotlight.it.yml

@@ -33,8 +33,7 @@ it:
         reset: Cancella la casella di ricerca
         submit: Ricerca all'interno dell'indice
         success:
-          expand_html: Puoi anche cercare tutti gli elementi del percorso per <a href="%{expand_search_url}">"%{browse_query}"</a>.
           result_number_html: La tua ricerca ha trovato <strong> %{search_size} di %{parent_search_count} elementi</strong> in questo indice di ricerca.
+        view_search: Visualizza questo indice con più opzioni di ricerca e filtro
         zero_results:
-          expand_html: Puoi <a href="%{clear_search_url}">cancellare questa ricerca</a> o <a href="%{expand_search_url}">provare a cercare tutti gli elementi del percorso per "%{browse_query}"</a>.
           result_number: La tua ricerca in questo indice non ha prodotto alcun risultato.

data/config/locales/spotlight.ja.yml

@@ -0,0 +1,39 @@
+ja:
+  activemodel:
+    attributes:
+      spotlight/contact_form:
+        email: メールアドレス
+        message: お問い合わせ内容
+        name: お名前
+  helpers:
+    action:
+      cancel: キャンセル
+    submit:
+      contact_form:
+        create: 送信
+        created: 送信しました。ご意見ありがとうございます。
+  spotlight:
+    about_pages:
+      contacts:
+        header: 連絡先
+    browse:
+      search:
+        item_count:
+          one: "%{count} 件"
+          other: "%{count} 件"
+      search_box:
+        label: このカテゴリ内を検索
+        placeholder: 検索…
+        reset: 検索ボックスをクリア
+        submit: このカテゴリ内を検索
+        success:
+          result_number_html: このカテゴリ内の <strong>%{parent_search_count} 件中 %{search_size} 件</strong>が検索条件に一致しました。
+        view_search: より多くの検索・絞り込みオプションでこのカテゴリを表示
+        zero_results:
+          result_number: このカテゴリ内に検索条件と一致する資料はありませんでした。
+    header_links:
+      contact: ご意見・お問い合わせ
+    shared:
+      report_a_problem:
+        honeypot_field_explanation: この入力欄は無視してください。スパム判定のために使用しています。ここに入力するとメッセージは送信されません。
+        title: お問い合わせ

data/config/locales/spotlight.zh.yml

@@ -33,8 +33,7 @@ zh:
         reset: 清除
         submit: 检索所有资料
         success:
-          expand_html: <a href="%{expand_search_url}">您也可检索所有资料 "%{browse_query}"</a>.
           result_number_html: 您的检索在本专题 <strong> %{search_size} of %{parent_search_count} 条资料中检索到</strong> 条.
+        view_search: 使用更多检索和筛选选项查看该类资料
         zero_results:
-          expand_html: <a href="%{clear_search_url}">您可取消本次专题检索</a> 或检索所有资料 <a href="%{expand_search_url}">"%{browse_query}"</a>.
           result_number: 找到0条结果

data/db/migrate/20261007133748_add_discovery_enabled_to_spotlight_exhibits.rb

@@ -0,0 +1,5 @@
+class AddDiscoveryEnabledToSpotlightExhibits < ActiveRecord::Migration[7.1]
+  def change
+    add_column :spotlight_exhibits, :discovery_enabled, :boolean, default: true, null: false
+  end
+end

data/lib/generators/spotlight/assets/importmap_generator.rb

@@ -26,9 +26,7 @@ module Spotlight
       DESCRIPTION
 
       def add_stylesheet_dependencies
-        run "yarn add blacklight-frontend@#{blacklight_yarn_version}"
         run "yarn add bootstrap@\"^#{bootstrap_yarn_version}\""
-        run 'yarn add leaflet'
       end
 
       # Needed for the stylesheets
@@ -37,6 +35,8 @@ module Spotlight
           run "yarn add file:#{Spotlight::Engine.root}"
         elsif options[:test]
           run 'yarn link spotlight-frontend'
+          # yarn link doesn't install the linked package's dependencies; the stylesheets need leaflet
+          run 'yarn add leaflet'
 
         # If a branch was specified (e.g. you are running a template.rb build
         # against a test branch), use the latest version available on npm
@@ -74,14 +74,6 @@ module Spotlight
           CONTENT
         end
       end
-
-      private
-
-      def bootstrap_frontend_version
-        yarn_lock = File.read('yarn.lock')
-        bootstrap_entry = yarn_lock.match(/^"?bootstrap@.+:\n  version "(.+)"/)
-        bootstrap_entry ? bootstrap_entry[1] : nil
-      end
     end
   end
 end

data/lib/generators/spotlight/assets/propshaft_generator.rb

@@ -60,7 +60,6 @@ module Spotlight
       end
 
       def add_javascript
-        copy_file 'javascript/jquery-shim.js', 'app/javascript/jquery-shim.js'
         gsub_file 'app/javascript/application.js', 'import "controllers"', '// import "controllers"'
 
         # This may have been added from Blacklight, but it is a Spotlight dependency so ensure it is present.
@@ -83,9 +82,11 @@ module Spotlight
       end
 
       def configure_esbuild
-        # The main-fields option resolves a bundling issue with bootstrap/popper on esbuild.
-        custom_options = '--main-fields=main,module --alias:jquery=./app/javascript/jquery-shim.js'
-        custom_options = "#{custom_options} --preserve-symlinks" if options[:test]
+        return unless options[:test]
+
+        # A linked spotlight-frontend resolves imports from the Spotlight checkout's node_modules first.
+        # Its bootstrap would be a second copy, which causes issues (e.g., a click on a dropdown causes two competing actions)
+        custom_options = '--preserve-symlinks --alias:bootstrap=./node_modules/bootstrap'
         gsub_file 'package.json',
                   'esbuild app/javascript/*.* --bundle --sourcemap --format=esm --outdir=app/assets/builds --public-path=/assets',
                   "esbuild app/javascript/*.* --bundle --sourcemap --format=esm --outdir=app/assets/builds --public-path=/assets #{custom_options}"

data/lib/generators/spotlight/install_generator.rb

@@ -113,7 +113,7 @@ module Spotlight
 
     def add_osd_viewer
       unless Bundler.locked_gems.dependencies.key? 'blacklight-gallery'
-        gem 'blacklight-gallery', '~> 4.0'
+        gem 'blacklight-gallery', '>= 5.1', '< 7'
         bundle_install
       end
       generate 'blacklight_gallery:install'
@@ -182,9 +182,7 @@ module Spotlight
     private
 
     def bundle_install
-      inside destination_root do
-        Bundler.with_unbundled_env { run 'bundle install' }
-      end
+      Bundler.with_original_env { system 'bundle install' }
     end
   end
 end

data/lib/generators/spotlight/templates/catalog_controller.rb

@@ -8,7 +8,6 @@ class CatalogController < ApplicationController
   configure_blacklight do |config|
     ## Default parameters to send to solr for all search-like requests. See also SolrHelper#solr_search_params
     config.default_solr_params = {
-      qt: 'search',
       rows: 10,
       fl: '*'
     }

data/lib/generators/spotlight/templates/config/initializers/spotlight_initializer.rb

@@ -37,10 +37,18 @@
 # Spotlight::Engine.config.solr_fields.string_suffix = '_ssim'.freeze
 # Spotlight::Engine.config.solr_fields.text_suffix = '_tesim'.freeze
 # Spotlight::Engine.config.resource_global_id_field = :"#{config.solr_fields.prefix}spotlight_resource_id#{config.solr_fields.string_suffix}"
+# Exhibit custom field types; `form_field_type` and `component` control how the field renders on the upload and edit forms
+# Spotlight::Engine.config.custom_field_types = {
+#   vocab: { suffix: '_ssim', facetable: true },
+#   text: { suffix: '_tesim', form_field_type: :text_area, component: 'Spotlight::SidecarFormFieldComponent' }
+# }
 # Spotlight::Engine.config.full_image_field = :full_image_url_ssm
 # Spotlight::Engine.config.thumbnail_field = :thumbnail_url_ssm
 
 # ==> Uploaded item configuration
+# Add `is_multiple: true` to Spotlight::UploadFieldConfig arguments to allow for multivalued field data
+# Add `component: MyFieldComponent` to render the field with a custom component (default: Spotlight::SidecarFormFieldComponent)
+# If is_multiple is enabled, Spotlight will send the field to Solr as an array, so ensure that your Solr configurations support this
 # Spotlight::Engine.config.upload_fields = [
 #   Spotlight::UploadFieldConfig.new(
 #     field_name: Spotlight::Engine.config.upload_description_field,
@@ -60,6 +68,9 @@
 # Spotlight::Engine.config.uploader_storage = :file
 # Spotlight::Engine.config.allowed_upload_extensions = %w(jpg jpeg png)
 
+# Set a delimiter character for multivalued fields in CSV uploads (ex. "|") - disabled by default
+# Spotlight::Engine.config.csv_upload_multivalued_field_delimiter = nil
+
 # Spotlight::Engine.config.featured_image_thumb_size = [400, 300]
 # Spotlight::Engine.config.featured_image_square_size = [400, 400]
 
@@ -69,15 +80,16 @@
 # b) generate and download the JSON key and make it accessible to your application
 # (https://console.cloud.google.com/iam-admin/iam -> Service accounts -> click on service account -> keys)
 # c) set ga_property_id below to your site's property id (located in admin -> Property -> Property details upper right hand corner)
-# d) Set the ga_web_property_id. (located in admin -> Data collection and modification -> Web stream details and begins with G-)
+# d) Set the ga_measurement_id. (located in admin -> Data collection and modification -> Data Streams -> Web stream details and begins with G-)
 # e) (optional) set ga_date_range. This allows you throttle the dates the user can filter by.
 # ga_date_range values should use a Date object i.e. (Date.new(YYYY, MM, DD)).
-# ga_property_id is used for fetching analytics data from google's api, ga_web_property_id is used for sending events to GA analtyics
-# ga_web_property_id will probably change in V5 to ga_measurement_id for clarity
+# ga_measurement_id is used for sending events to GA analtyics
+# ga_web_property_id is deprecated, use ga_measurement_id instead
+# ga_property_id is used for fetching analytics data from google's api
 # Rails.application.config.to_prepare do
 #   Spotlight::Engine.config.analytics_provider = Spotlight::Analytics::Ga
 #   Spotlight::Engine.config.ga_json_key_path = nil
-#   Spotlight::Engine.config.ga_web_property_id = 'G-XXXXXXXXXX'
+#   Spotlight::Engine.config.ga_measurement_id = 'G-XXXXXXXXXX'
 #   Spotlight::Engine.config.ga_property_id = '12345678'
 #   Spotlight::Engine.config.ga_date_range = { 'start_date' => nil, 'end_date' => nil }
 #   Spotlight::Engine.config.ga_analytics_options = {}
@@ -103,3 +115,13 @@
 # Spotlight::Engine.config.page_configurations = {
 #   'my-local-config': ->(context) { context.my_custom_data_path(context.current_exhibit) }
 # }
+#
+# ==> Export Configuration
+# This determines what data is exported when a admin uses the exhibit export feature.
+# Spotlight::Engine.config.exports = {
+#   attachments: true,
+#   blacklight_configuration: true,
+#   config: true,
+#   pages: true,
+#   resources: false
+# }

data/lib/generators/spotlight/templates/solr/conf/schema.xml

@@ -1,5 +1,5 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<schema name="Hydra" version="1.5">
+<schema name="Spotlight-default" version="1.6">
   <!-- NOTE: various comments and unused configuration possibilities have been purged
      from this file.  Please refer to http://wiki.apache.org/solr/SchemaXml,
      as well as the default schema file included with Solr -->
@@ -190,11 +190,12 @@
   <copyField source="id" dest="id_ng" maxChars="3000"/>
   <copyField source="full_title_tesim" dest="full_title_ng" maxChars="3000"/>
   <copyField source="*_tesim" dest="all_text_timv" maxChars="3000"/>
+  <copyField source="*_tags_ssim" dest="all_text_timv" maxChars="3000"/>
 
   <types>
     <fieldType name="string" class="solr.StrField" sortMissingLast="true" />
     <fieldType name="boolean" class="solr.BoolField" sortMissingLast="true"/>
-    <fieldType name="rand" class="solr.RandomSortField" omitNorms="true"/>
+    <fieldType name="rand" class="solr.RandomSortField"/>
 
     <!-- Default numeric field types.  -->
     <fieldType name="int" class="solr.TrieIntField" precisionStep="0" positionIncrementGap="0"/>
@@ -236,7 +237,7 @@
     <fieldType name="location_rpt" class="solr.SpatialRecursivePrefixTreeFieldType"
       geo="true" distErrPct="0.025" maxDistErr="0.000009" distanceUnits="degrees" />
 
-    <fieldType name="text" class="solr.TextField" omitNorms="false">
+    <fieldType name="text" class="solr.TextField">
       <analyzer>
         <tokenizer class="solr.ICUTokenizerFactory"/>
         <filter class="solr.ICUFoldingFilterFactory"/>  <!-- NFKC, case folding, diacritics removed -->

data/lib/generators/spotlight/templates/solr/conf/solrconfig.xml

@@ -6,7 +6,7 @@
 
   <abortOnConfigurationError>${solr.abortOnConfigurationError:true}</abortOnConfigurationError>
 
-  <luceneMatchVersion>6.1.0</luceneMatchVersion>
+  <luceneMatchVersion>9.0.0</luceneMatchVersion>
 
   <directoryFactory name="DirectoryFactory" class="${solr.directoryFactory:solr.StandardDirectoryFactory}"/>
 
@@ -16,14 +16,9 @@
     </updateLog>
   </updateHandler>
 
-  <!-- solr lib dirs: needed for Solr 8 compatibility but ignored in solr 9.8 and above -->
-  <lib dir="${solr.install.dir:../../../..}/modules/analysis-extras/lib" />
-  <lib dir="${solr.install.dir:../../../..}/contrib/analysis-extras/lib" />
-  <lib dir="${solr.install.dir:../../../..}/contrib/analysis-extras/lucene-libs" />
-
   <dataDir>${solr.data.dir:}</dataDir>
 
-  <requestHandler name="search" class="solr.SearchHandler" default="true">
+  <requestHandler name="/select" class="solr.SearchHandler">
     <!-- default values for query parameters can be specified, these
          will be overridden by parameters in the request
       -->
@@ -188,7 +183,7 @@
 
   <requestHandler name="/replication" class="solr.ReplicationHandler" startup="lazy" />
 
-  <requestDispatcher handleSelect="true" >
+  <requestDispatcher>
     <requestParsers enableRemoteStreaming="true" multipartUploadLimitInKB="2048" />
   </requestDispatcher>
 

data/lib/migration/page_language.rb

@@ -9,8 +9,6 @@ module Migration
       new.run
     end
 
-    def initialize; end
-
     def run
       migrate_pages
     end

data/lib/spotlight/engine.rb

@@ -8,8 +8,6 @@ require 'devise_invitable'
 
 require 'activejob-status'
 require 'blacklight'
-require 'faraday'
-require 'faraday/follow_redirects'
 require 'friendly_id'
 require 'i18n/active_record'
 require 'paper_trail'
@@ -119,10 +117,13 @@ module Spotlight
     config.solr_fields.string_suffix = '_ssim'
     config.solr_fields.text_suffix = '_tesim'
 
-    # Suffixes for exhibit-specific solr fields
+    # Suffixes for exhibit-specific solr fields. Each type may also set:
+    #   form_field_type: the form builder method used for the input (default: :text_field)
+    #   component: the component used to render the field on the upload and edit forms
+    #              (default: Spotlight::SidecarFormFieldComponent)
     config.custom_field_types = {
       vocab: { suffix: '_ssim', facetable: true },
-      text: { suffix: '_tesim' }
+      text: { suffix: '_tesim', form_field_type: :text_area }
     }
 
     config.resource_global_id_field = :"#{config.solr_fields.prefix}spotlight_resource_id#{config.solr_fields.string_suffix}"
@@ -132,6 +133,9 @@ module Spotlight
     config.full_image_field = :full_image_url_ssm
     config.thumbnail_field = :thumbnail_url_ssm
 
+    # Set delimiter character for multivalued fields in CSV uploads
+    config.csv_upload_multivalued_field_delimiter = nil
+
     Spotlight::Engine.config.site_tags = nil
 
     # Defaults to the blacklight_config.index.title_field:
@@ -197,10 +201,12 @@ module Spotlight
     # b) generate and download the JSON key and make it accessible to your application
     # (https://console.cloud.google.com/iam-admin/iam -> Service accounts -> click on service account -> keys)
     # c) set ga_property_id below to your site's property id (located in admin -> Property -> Property details upper right hand corner)
-    # d) Set the ga_web_property_id. (located in admin -> Data collection and modification -> Web stream details and begins with G-)
-    # ga_property_id is used for fetching analytics data from google's api, ga_web_property_id is used for sending events to GA analtyics
-    # ga_web_property_id will probably change in V5 to ga_measurement_id for clarity
+    # d) Set the ga_measurement_id. (located in admin -> Data collection and modification -> Data Streams -> Web stream details and begins with G-)
+    # ga_measurement_id is used for sending events to GA analytics
+    # ga_web_property_id is deprecated, use ga_measurement_id instead
+    # ga_property_id is used for fetching analytics data from google's api
     config.ga_json_key_path = nil
+    config.ga_measurement_id = nil
     config.ga_web_property_id = nil
     config.ga_property_id = nil
     config.ga_analytics_options = {}
@@ -208,6 +214,16 @@ module Spotlight
     config.ga_date_range = { 'start_date' => nil, 'end_date' => nil }
     config.ga_debug_mode = false
 
+    # Remove this in a future release
+    config.after_initialize do
+      if Spotlight::Engine.config.ga_web_property_id.present?
+        Spotlight.deprecator.warn(
+          'Spotlight::Engine.config.ga_web_property_id is deprecated and will be removed in a future version. ' \
+          'Use Spotlight::Engine.config.ga_measurement_id instead.'
+        )
+      end
+    end
+
     config.max_pages = 1000
 
     Blacklight::Engine.config.inject_blacklight_helpers = false
@@ -223,7 +239,8 @@ module Spotlight
       nl: 'Nederlands',
       'pt-BR': 'Português brasileiro',
       sq: 'Shqip',
-      zh: '中文'
+      zh: '中文',
+      ja: '日本語'
     }
 
     # Whitelisting the available_locales is necessary here, as any dependency we
@@ -272,6 +289,8 @@ module Spotlight
       Blacklight::Configuration.default_values[:search_state_fields] ||= []
       Blacklight::Configuration.default_values[:search_state_fields] += %i[id exhibit_id browse_category_id]
       Blacklight::Configuration.default_values[:skip_link_component] = Spotlight::SkipLinkComponent
+      Blacklight::Configuration.default_values[:header_component] = Spotlight::HeaderComponent
+      Blacklight::Configuration.property :exhibit_navbar_component, default: Spotlight::ExhibitNavbarComponent
     end
 
     # make blacklight configuration play nice with bootstrap_form
@@ -301,7 +320,7 @@ module Spotlight
       blacklight_configuration: true,
       config: true,
       pages: true,
-      resources: true
+      resources: false # see https://github.com/projectblacklight/spotlight/issues/3641
     }
 
     config.reindexing_batch_size = nil

data/lib/spotlight/search_state.rb

@@ -1,19 +1,15 @@
 # frozen_string_literal: true
 
 module Spotlight
-  # Override Blacklight::SearchState to use exhibit-specific routes for documents
-  class SearchState < SimpleDelegator
-    attr_reader :current_exhibit
-
-    def initialize(search_state, current_exhibit)
-      super(search_state)
-      @current_exhibit = current_exhibit
-    end
-
+  # Override Blacklight::SearchState to use exhibit-specific routes for documents.
+  #
+  # This must remain the app's search_state_class (set in Spotlight::Controller) for
+  # url_for_document to add exhibit context to document routes.
+  class SearchState < Blacklight::SearchState
     def url_for_document(document, options = {})
-      return super unless current_exhibit
+      return super unless controller.respond_to?(:current_exhibit) && controller.current_exhibit
 
-      [controller.spotlight, current_exhibit, document]
+      [controller.spotlight, controller.current_exhibit, document]
     end
   end
 end

data/lib/spotlight/upload_field_config.rb

@@ -9,13 +9,18 @@ module Spotlight
   class UploadFieldConfig
     attr_reader :blacklight_options, :field_name, :form_field_type
 
-    def initialize(field_name:, blacklight_options: {}, form_field_type: :text_field, label: nil, solr_fields: nil)
+    # rubocop:disable Metrics/ParameterLists
+    def initialize(field_name:, blacklight_options: {}, form_field_type: :text_field, solr_fields: nil, label: nil, is_multiple: false,
+                   component: nil)
       @blacklight_options = blacklight_options
       @field_name = field_name
       @form_field_type = form_field_type
       @solr_fields = solr_fields
       @label = label || field_name
+      @is_multiple = is_multiple
+      @component = component
     end
+    # rubocop:enable Metrics/ParameterLists
 
     # Allows a proc to be set as the label
     def label
@@ -24,6 +29,19 @@ module Spotlight
       @label
     end
 
+    # rubocop:disable Naming/PredicatePrefix
+    def is_multiple?
+      @is_multiple
+    end
+    # rubocop:enable Naming/PredicatePrefix
+
+    # The component used to render the field on the upload and edit forms
+    def component
+      return Spotlight::SidecarFormFieldComponent if @component.blank?
+
+      @component.is_a?(String) ? @component.constantize : @component
+    end
+
     # aliasing for backwards compatability and consistency with blacklight config
     alias solr_field field_name
 

data/lib/spotlight/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Spotlight
-  VERSION = '5.3.2'
+  VERSION = '6.0.0.rc2'
 end

data/lib/spotlight.rb

@@ -7,6 +7,6 @@ require 'spotlight/engine'
 # Spotlight
 module Spotlight
   def self.deprecator
-    @deprecator ||= ActiveSupport::Deprecation.new('6.0', 'blacklight-spotlight')
+    @deprecator ||= ActiveSupport::Deprecation.new('7.0', 'blacklight-spotlight')
   end
 end

data/spec/support/features/capybara_wait_metadata_helper.rb

@@ -5,7 +5,9 @@ module CapybaraWaitMetadataHelper
 
   included do
     around do |example|
-      using_wait_time example.metadata[:max_wait_time] || Capybara.default_max_wait_time do
+      next example.run unless example.metadata.key?(:max_wait_time)
+
+      using_wait_time example.metadata[:max_wait_time] do
         example.run
       end
     end

data/spec/support/features/test_features_helpers.rb

@@ -51,11 +51,34 @@ module Spotlight
       expect(page).to have_css('.st-blocks.st-ready')
     end
 
+    # Run the block (e.g. submitting a form) and wait for Turbo to render the
+    # new page, so later steps don't act on the old one. Waiting for something
+    # like an enabled submit button isn't enough: Turbo disables the submitter
+    # only while the request is in flight, so the old page can satisfy the
+    # check before the submission starts and again after it finishes. Turbo
+    # replaces the body on every render, so wait for the marked body to go
+    # away.
+    def expect_new_page
+      page.execute_script("document.body.setAttribute('data-previous-page', '')")
+      yield
+      expect(page).to have_no_css('body[data-previous-page]')
+      expect(page).to have_no_css('html[aria-busy]')
+    end
+
+    # Headless Chrome blocks real clipboard access, so replace writeText
+    # with a shim that stashes its argument on window for assertion.
+    def stub_clipboard
+      page.execute_script(<<~JS)
+        window.__copied = null
+        navigator.clipboard.writeText = (text) => { window.__copied = text; return Promise.resolve() }
+      JS
+    end
+
     def save_page_changes
       click_button('Save changes')
       # verify that the page was created.
       expect(page).to have_css('.alert-info', text: 'was successfully updated')
-      expect(page).to have_no_selector('.alert-danger')
+      expect(page).to have_no_css('.alert-danger')
     end
 
     # Capybara's HTML5 drag emulation sends the drag events to a given element. This drags

data/spec/support/iiif_manifest_fixtures.rb

@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+
+# JavaScript feature specs load IIIF manifests from the browser, which WebMock
+# can't intercept. Serve fixture manifests from the Capybara app server instead
+# so specs don't depend on network access to external IIIF servers.
+module IiifManifestFixtures
+  PATH = '/iiif_manifest_fixtures'
+  DIR = File.expand_path('../fixtures/iiif_manifests', __dir__)
+
+  # Point the autocomplete responses for documents that have a fixture manifest
+  # (spec/fixtures/iiif_manifests/<document_id>.json) at that fixture. The controller
+  # instance is created by the app server, so it can only be reached with any_instance.
+  def stub_iiif_manifests
+    allow_any_instance_of(Spotlight::CatalogController).to( # rubocop:disable RSpec/AnyInstance
+      receive(:autocomplete_json_response_for_document).and_wrap_original do |original, doc|
+        response = original.call(doc)
+        response[:iiif_manifest] = "#{PATH}/#{doc.id}.json" if response[:iiif_manifest] && File.exist?(File.join(DIR, "#{doc.id}.json"))
+        response
+      end
+    )
+  end
+end
+
+app = Capybara.app
+Capybara.app = Rack::Builder.new do
+  map(IiifManifestFixtures::PATH) { run Rack::Files.new(IiifManifestFixtures::DIR) }
+  run app
+end
+
+RSpec.configure do |config|
+  config.include IiifManifestFixtures, type: :feature
+  config.before(type: :feature, js: true) { stub_iiif_manifests }
+end

data/spec/support/stub_dns_resolution.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+# Avoid real DNS lookups when SsrfFilter checks IIIF URLs. Hostnames resolve to
+# an arbitrary public address (WebMock intercepts the request, so nothing
+# connects to it); IP literals resolve to themselves.
+RSpec.configure do |config|
+  config.before do
+    stub_const('SsrfFilter::DEFAULT_RESOLVER', lambda do |host|
+      [IPAddr.new(host.match?(Resolv::AddressRegex) ? host : '1.1.1.1')]
+    end)
+  end
+end