@407dev/cms-astro 0.1.0

package/src/middleware/preview.ts

@@ -0,0 +1,206 @@
+import { createCmsClient, getClient } from '../client';
+import { buildBridgeScript } from '../preview/bridge-script';
+import { isDraftMode, runWithDraftBundle, setActiveDraftBundle } from '../runtime/store';
+import type { CmsClient, ContentBundle } from '../types';
+
+export interface PreviewMiddlewareOptions {
+  client?: CmsClient;
+  siteId?: string;
+  contentUrl?: string;
+  /** @deprecated Site hosts no longer verify preview tokens. Ignored outside astro dev. */
+  previewSecret?: string;
+  editorOrigins?: string[];
+}
+
+interface PreviewContextLocals {
+  __cms_is_draft?: boolean;
+  __cms_draft_bundle?: ContentBundle;
+  [key: string]: unknown;
+}
+
+export interface PreviewMiddlewareContext {
+  request: Request;
+  url?: URL;
+  locals?: PreviewContextLocals;
+  rewrite?: (path: string) => Promise<Response> | undefined;
+}
+
+export function createPreviewMiddleware(options: PreviewMiddlewareOptions = {}) {
+  let client = options.client;
+
+  return async (
+    context: PreviewMiddlewareContext,
+    next: () => Promise<Response>,
+  ): Promise<Response> => {
+    const globalWithCms = globalThis as typeof globalThis & {
+      __CMS_IS_REWRITING__?: boolean;
+    };
+
+    // If already running within an active draft bundle context or internal rewrite, pass through
+    if (
+      (typeof globalThis !== 'undefined' && globalWithCms.__CMS_IS_REWRITING__) ||
+      isDraftMode() ||
+      context.locals?.__cms_is_draft
+    ) {
+      return next();
+    }
+
+    const rawUrl = context.url;
+    const url =
+      rawUrl && typeof rawUrl.href === 'string'
+        ? new URL(rawUrl.href)
+        : rawUrl && typeof (rawUrl as unknown as { pathname?: string }).pathname === 'string'
+          ? rawUrl
+          : new URL(context.request?.url || '/', 'http://localhost');
+    const pathname = url.pathname || '/';
+    const isPreviewRoute = pathname === '/_preview' || pathname.startsWith('/_preview/');
+
+    const previewToken =
+      (rawUrl?.searchParams?.get ? rawUrl.searchParams.get('preview_token') : null) ||
+      (url?.searchParams?.get ? url.searchParams.get('preview_token') : null) ||
+      (context.request?.headers?.get ? context.request.headers.get('x-preview-token') : null);
+
+    if (!isPreviewRoute && !previewToken) {
+      return next();
+    }
+
+    if (!client) {
+      client = getClient() || undefined;
+    }
+
+    if (!client) {
+      const metaEnv = (import.meta as unknown as { env?: Record<string, string | undefined> }).env;
+      const siteId =
+        options.siteId ||
+        (typeof process !== 'undefined' && process.env?.CMS_SITE_ID) ||
+        (typeof import.meta !== 'undefined' && metaEnv?.CMS_SITE_ID) ||
+        '';
+      const contentUrl =
+        options.contentUrl ||
+        (typeof process !== 'undefined' && process.env?.CMS_CONTENT_URL) ||
+        (typeof import.meta !== 'undefined' && metaEnv?.CMS_CONTENT_URL) ||
+        '';
+      if (siteId && contentUrl) {
+        client = createCmsClient({
+          siteId,
+          contentUrl,
+        });
+      }
+    }
+
+    if (!previewToken) {
+      return new Response('Preview token is missing', {
+        status: 400,
+        headers: {
+          'Cache-Control': 'private, no-store',
+          'X-Robots-Tag': 'noindex, nofollow',
+        },
+      });
+    }
+
+    if (!client) {
+      return new Response('CMS client is missing or not configured', {
+        status: 500,
+        headers: {
+          'Cache-Control': 'private, no-store',
+          'X-Robots-Tag': 'noindex, nofollow',
+        },
+      });
+    }
+
+    let draftBundle: ContentBundle;
+    try {
+      draftBundle = await client.getBundle({ previewToken });
+    } catch (_err) {
+      return new Response('Preview token is not valid for this site', {
+        status: 404,
+        headers: {
+          'Cache-Control': 'private, no-store',
+          'X-Robots-Tag': 'noindex, nofollow',
+        },
+      });
+    }
+
+    // Run downstream request within the draft bundle context
+    if (context.locals) {
+      context.locals.__cms_is_draft = true;
+      context.locals.__cms_draft_bundle = draftBundle;
+    }
+
+    let finalResponse: Response;
+    setActiveDraftBundle(draftBundle);
+    try {
+      finalResponse = await runWithDraftBundle(draftBundle, async () => {
+        let response: Response;
+        if (isPreviewRoute) {
+          const basePath = pathname.replace(/^\/_preview/, '') || '/';
+          if (typeof context.rewrite === 'function') {
+            if (typeof globalThis !== 'undefined') {
+              globalWithCms.__CMS_IS_REWRITING__ = true;
+            }
+            try {
+              const rewritten = await context.rewrite(basePath);
+              if (rewritten) {
+                response = rewritten as Response;
+              } else {
+                response = await next();
+              }
+            } finally {
+              if (typeof globalThis !== 'undefined') {
+                globalWithCms.__CMS_IS_REWRITING__ = false;
+              }
+            }
+          } else {
+            response = await next();
+          }
+        } else {
+          response = await next();
+        }
+
+        const contentType = response?.headers?.get ? response.headers.get('content-type') : '';
+        const isStaticAsset = Boolean(
+          pathname.match(/\.(js|css|png|jpg|jpeg|gif|svg|ico|webp|woff|woff2|ttf|json|map)$/i),
+        );
+        const isHtml =
+          (typeof contentType === 'string' && contentType.includes('text/html')) ||
+          (!contentType && !isStaticAsset);
+
+        if (isHtml) {
+          const html = await response.text();
+          const bridgeScript = buildBridgeScript({ editorOrigins: options.editorOrigins });
+          const scriptTag = `<script>${bridgeScript}</script>`;
+          const modifiedHtml = html.includes('</body>')
+            ? html.replace('</body>', `${scriptTag}</body>`)
+            : `${html}${scriptTag}`;
+
+          const newHeaders = new Headers(response.headers);
+          if (!newHeaders.has('content-type')) {
+            newHeaders.set('content-type', 'text/html; charset=utf-8');
+          }
+          newHeaders.delete('content-length');
+          newHeaders.set('Cache-Control', 'private, no-store, no-cache, must-revalidate');
+          newHeaders.set('X-Robots-Tag', 'noindex, nofollow');
+
+          return new Response(modifiedHtml, {
+            status: response.status,
+            statusText: response.statusText,
+            headers: newHeaders,
+          });
+        }
+
+        const nonHtmlHeaders = new Headers(response.headers);
+        nonHtmlHeaders.set('Cache-Control', 'private, no-store, no-cache, must-revalidate');
+        nonHtmlHeaders.set('X-Robots-Tag', 'noindex, nofollow');
+        return new Response(response.body, {
+          status: response.status,
+          statusText: response.statusText,
+          headers: nonHtmlHeaders,
+        });
+      });
+    } finally {
+      setActiveDraftBundle(null);
+    }
+
+    return finalResponse;
+  };
+}