@ckeditor/ckeditor5-ckbox 0.0.0-nightly-20250316.0 → 0.0.0-nightly-20250318.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ckeditor/ckeditor5-ckbox",
-  "version": "0.0.0-nightly-20250316.0",
+  "version": "0.0.0-nightly-20250318.0",
   "description": "CKBox integration for CKEditor 5.",
   "keywords": [
     "ckeditor",
@@ -13,15 +13,15 @@
   "type": "module",
   "main": "src/index.js",
   "dependencies": {
-    "@ckeditor/ckeditor5-cloud-services": "0.0.0-nightly-20250316.0",
-    "@ckeditor/ckeditor5-core": "0.0.0-nightly-20250316.0",
-    "@ckeditor/ckeditor5-engine": "0.0.0-nightly-20250316.0",
-    "@ckeditor/ckeditor5-icons": "0.0.0-nightly-20250316.0",
-    "@ckeditor/ckeditor5-image": "0.0.0-nightly-20250316.0",
-    "@ckeditor/ckeditor5-ui": "0.0.0-nightly-20250316.0",
-    "@ckeditor/ckeditor5-upload": "0.0.0-nightly-20250316.0",
-    "@ckeditor/ckeditor5-utils": "0.0.0-nightly-20250316.0",
-    "ckeditor5": "0.0.0-nightly-20250316.0",
+    "@ckeditor/ckeditor5-cloud-services": "0.0.0-nightly-20250318.0",
+    "@ckeditor/ckeditor5-core": "0.0.0-nightly-20250318.0",
+    "@ckeditor/ckeditor5-engine": "0.0.0-nightly-20250318.0",
+    "@ckeditor/ckeditor5-icons": "0.0.0-nightly-20250318.0",
+    "@ckeditor/ckeditor5-image": "0.0.0-nightly-20250318.0",
+    "@ckeditor/ckeditor5-ui": "0.0.0-nightly-20250318.0",
+    "@ckeditor/ckeditor5-upload": "0.0.0-nightly-20250318.0",
+    "@ckeditor/ckeditor5-utils": "0.0.0-nightly-20250318.0",
+    "ckeditor5": "0.0.0-nightly-20250318.0",
     "blurhash": "2.0.5",
     "es-toolkit": "1.32.0"
   },

package/src/ckboxutils.d.ts

@@ -51,4 +51,9 @@ export default class CKBoxUtils extends Plugin {
      * If the API returns limited results, the method will collect all items.
      */
     private _getAvailableCategories;
+    /**
+     * Authorize private categories access to the CKBox service. Request sets cookie for the current domain,
+     * that allows user to preview images from private categories.
+     */
+    private _authorizePrivateCategoriesAccess;
 }

package/src/ckboxutils.js

@@ -81,6 +81,13 @@ export default class CKBoxUtils extends Plugin {
         else {
             this._token = cloudServices.registerTokenUrl(ckboxTokenUrl);
         }
+        // Grant access to private categories after token is fetched. This is done within the same promise chain
+        // to ensure all services using the token have access to private categories.
+        // This step is critical as previewing images from private categories requires proper cookies.
+        this._token = this._token.then(async (token) => {
+            await this._authorizePrivateCategoriesAccess(token.value);
+            return token;
+        });
     }
     /**
      * Returns a token used by the CKBox plugin for communication with the CKBox service.
@@ -190,4 +197,19 @@ export default class CKBoxUtils extends Plugin {
             });
         }
     }
+    /**
+     * Authorize private categories access to the CKBox service. Request sets cookie for the current domain,
+     * that allows user to preview images from private categories.
+     */
+    async _authorizePrivateCategoriesAccess(token) {
+        const serviceUrl = this.editor.config.get('ckbox.serviceOrigin');
+        const formData = new FormData();
+        formData.set('token', token);
+        await fetch(`${serviceUrl}/categories/authorizePrivateAccess`, {
+            method: 'POST',
+            credentials: 'include',
+            mode: 'no-cors',
+            body: formData
+        });
+    }
 }