@c-rex/services 0.3.0-build.51 → 0.3.0-build.53

package/dist/read-models/index.d.mts

@@ -198,7 +198,10 @@ declare const resolveStaticPageResourceHref: (shortId: string) => Promise<string
  * informationSubjects): external links plus content-backed pages whose HTML is
  * fetched while the signed rendition URL is valid and cached alongside — so
  * nothing cached ever expires with the URL signature. Fetched with the
- * application token and cached server-side, shared across all users.
+ * application token and cached server-side, shared across all users. In
+ * user-login mode, an authenticated request is fetched with that user's token
+ * and bypasses the shared read-model cache so role/license-specific content
+ * cannot be served from another user's cache entry.
  * Consumers: footer menu, search-info modal, no-license message, ...
  *
  * API failures throw inside the cache (errors are not cached): while a stale

package/dist/read-models/index.d.ts

@@ -198,7 +198,10 @@ declare const resolveStaticPageResourceHref: (shortId: string) => Promise<string
  * informationSubjects): external links plus content-backed pages whose HTML is
  * fetched while the signed rendition URL is valid and cached alongside — so
  * nothing cached ever expires with the URL signature. Fetched with the
- * application token and cached server-side, shared across all users.
+ * application token and cached server-side, shared across all users. In
+ * user-login mode, an authenticated request is fetched with that user's token
+ * and bypasses the shared read-model cache so role/license-specific content
+ * cannot be served from another user's cache entry.
  * Consumers: footer menu, search-info modal, no-license message, ...
  *
  * API failures throw inside the cache (errors are not cached): while a stale

package/dist/read-models/index.js

@@ -1576,6 +1576,8 @@ var import_cache4 = require("next/cache");
 var import_requests5 = require("@c-rex/core/requests");
 var import_logger2 = require("@c-rex/core/logger");
 var import_constants2 = require("@c-rex/constants");
+var import_headers2 = require("next/headers");
+var import_sdk2 = require("@c-rex/core/sdk");
 var DEFAULT_SORT = ["-informationSubjects.id"];
 var DEFAULT_PAGE_SIZE = 100;
 var RENDITION_FETCH_TIMEOUT_MS = 5e3;
@@ -1713,9 +1715,23 @@ var getStaticPagesCached = (0, import_cache4.unstable_cache)(
     ]
   }
 );
+var getCurrentUserAuthToken = async () => {
+  try {
+    const config = new import_sdk2.CrexSDK().getServerConfig();
+    if (config.OIDC.tokenSource !== import_constants2.TOKEN_SOURCES.USER_LOGIN) return void 0;
+    const token = (await (0, import_headers2.cookies)()).get(import_constants2.CREX_TOKEN_HEADER_KEY)?.value.trim();
+    return token || void 0;
+  } catch {
+    return void 0;
+  }
+};
 var getStaticPages = async (query) => {
   try {
-    const pages = await getStaticPagesCached(query);
+    const authToken = await getCurrentUserAuthToken();
+    const pages = authToken ? await withServerRequestContext(
+      { skipCookieTokenLookup: true, authToken },
+      () => fetchStaticPages(query)
+    ) : await getStaticPagesCached(query);
     return { status: "ok", pages };
   } catch (error) {
     const logger = new import_logger2.CrexLogger();