@commercetools-frontend/application-config 20.12.1 → 21.0.0-rc.4

package/README.md

@@ -4,47 +4,4 @@
   <a href="https://www.npmjs.com/package/@commercetools-frontend/application-config"><img src="https://badgen.net/npm/v/@commercetools-frontend/application-config" alt="Latest release (latest dist-tag)" /></a> <a href="https://www.npmjs.com/package/@commercetools-frontend/application-config"><img src="https://badgen.net/npm/v/@commercetools-frontend/application-config/next" alt="Latest release (next dist-tag)" /></a> <a href="https://bundlephobia.com/result?p=@commercetools-frontend/application-config"><img src="https://badgen.net/bundlephobia/minzip/@commercetools-frontend/application-config" alt="Minified + GZipped size" /></a> <a href="https://github.com/commercetools/merchant-center-application-kit/blob/main/LICENSE"><img src="https://badgen.net/github/license/commercetools/merchant-center-application-kit" alt="GitHub license" /></a>
 </p>
 
-This package contains utilities for configuring Custom Applications.
-
-## Install
-
-```bash
-$ npm install --save @commercetools-frontend/application-config
-```
-
-## Configuration format
-
-A Custom Application must be configured with a single JSON configuration file. The file name can be one of:
-
-- `.custom-application-configrc`
-- `.custom-application-config.json`
-- `custom-application-config.json`
-
-The file is automatically loaded, as long as it is found in the project's root folder. For that, the package uses the [cosmiconfig](https://www.npmjs.com/package/cosmiconfig) library.
-
-The configuration file is in the format of a JSON schema that is also part of this package. The configuration file itself is validated when starting the Custom Application against the JSON schema.
-
-By default the configuration file uses the `NODE_ENV` variable to determine which configuration to use. This can be overridden by using the custom environment variable `MC_APP_ENV`.
-
-In the [test fixtures](./test/fixtures) folder you can see some examples of configuration.
-
-### JSON Schema
-
-To enable JSON schema validation for the Custom Application configuration, you can add a reference as a URL to the `schema.json` file provided in this package.
-
-**Example setup for VSCode**
-
-In the VSCode settings (either user settings or workspace settings), reference the schema JSON as described below:
-
-```json
-"json.schemas": [
-  {
-    "fileMatch": [
-      "/.custom-application-configrc",
-      "/.custom-application-config.json",
-      "/custom-application-config.json"
-    ],
-    "url": "https://docs.commercetools.com/custom-applications/schema.json"
-  }
-]
-```
+Check out the [documentation](https://docs.commercetools.com/custom-applications/api-reference/application-config) for more information.

package/dist/commercetools-frontend-application-config.cjs.dev.js

@@ -19,6 +19,7 @@ var path = require('path');
 var child_process = require('child_process');
 var cosmiconfig = require('cosmiconfig');
 var _Reflect$construct = require('@babel/runtime-corejs3/core-js-stable/reflect/construct');
+var _createClass = require('@babel/runtime-corejs3/helpers/createClass');
 var _classCallCheck = require('@babel/runtime-corejs3/helpers/classCallCheck');
 var _assertThisInitialized = require('@babel/runtime-corejs3/helpers/assertThisInitialized');
 var _inherits = require('@babel/runtime-corejs3/helpers/inherits');
@@ -82,7 +83,7 @@ var MissingOrInvalidConfigError = /*#__PURE__*/function (_Error) {
     return _this;
   }
 
-  return MissingOrInvalidConfigError;
+  return _createClass(MissingOrInvalidConfigError);
 }( /*#__PURE__*/_wrapNativeSuper(Error));
 
 // for instance in respect to both source files and dist files.
@@ -156,15 +157,20 @@ var schemaJson = {
 	},
 	properties: {
 		name: {
-			description: "The name of the Custom Application",
+			description: "See https://docs.commercetools.com/custom-applications/api-reference/application-config#name",
 			type: "string"
 		},
-		entryPointUriPath: {
-			description: "The unique route path of the Custom Application. This is the identifier that the Merchant Center Proxy uses to match the HTTP request and to forward it to the Custom Application URL. This value also needs to be used in the application client side routes. The value must be the same as the `navbarMenu.uriPath` in the `menu.json` and the application route path when registering the Custom Application. For example, if the Custom Application should be served at the route `/:projectKey/avengers`, the `entryPointUriPath` must be set to `avengers` and the same for the application routes.",
+		description: {
+			description: "See https://docs.commercetools.com/custom-applications/api-reference/application-config#description",
 			type: "string"
 		},
+		entryPointUriPath: {
+			description: "See https://docs.commercetools.com/custom-applications/api-reference/application-config#entrypointuripath",
+			type: "string",
+			pattern: "^[^\\-_]([0-9a-z]|[\\-_](?![\\-_])){2,64}[^\\-_]$"
+		},
 		cloudIdentifier: {
-			description: "The cloud identifier where the Custom Application is running. This value is used to derive the Merchant Center API URL. Alternatively you can use the `mcApiUrl` property.",
+			description: "See https://docs.commercetools.com/custom-applications/api-reference/application-config#cloudidentifier",
 			type: "string",
 			oneOf: [
 				{
@@ -182,16 +188,18 @@ var schemaJson = {
 			]
 		},
 		mcApiUrl: {
-			description: "The URL of the Merchant Center API. We usually recommend to use the `cloudIdentifier` option to avoid possible typos.",
+			description: "See https://docs.commercetools.com/custom-applications/api-reference/application-config#mcapiurl",
 			type: "string"
 		},
 		oAuthScopes: {
-			description: "The requested OAuth Scopes for this Custom Application.",
+			description: "See https://docs.commercetools.com/custom-applications/api-reference/application-config#oauthscopes",
 			type: "object",
 			properties: {
 				view: {
-					description: "The list of view-only OAuth Scopes (https://docs.commercetools.com/api/scopes).",
+					description: "See https://docs.commercetools.com/custom-applications/api-reference/application-config#oauthscopesview",
 					type: "array",
+					"default": [
+					],
 					items: {
 						type: "string",
 						pattern: "view_(.*)"
@@ -199,8 +207,10 @@ var schemaJson = {
 					uniqueItems: true
 				},
 				manage: {
-					description: "The list of manage-only OAuth Scopes (https://docs.commercetools.com/api/scopes).",
+					description: "See https://docs.commercetools.com/custom-applications/api-reference/application-config#oauthscopesmanage",
 					type: "array",
+					"default": [
+					],
 					items: {
 						type: "string",
 						pattern: "manage_(.*)"
@@ -215,62 +225,64 @@ var schemaJson = {
 			]
 		},
 		env: {
-			description: "This is an object of keys that represents different environments (for example `production`). The environment used depends on the environment variable `MC_APP_ENV`. If `MC_APP_ENV` isn't set then `NODE_ENV` will be used. If neither is set, it defaults to `development`",
+			description: "See https://docs.commercetools.com/custom-applications/api-reference/application-config#env",
 			type: "object",
 			properties: {
 				development: {
-					description: "Configuration for development only",
 					type: "object",
 					properties: {
 						initialProjectKey: {
-							description: "The initial project key that the Custom Application is requesting access for. This is only used in development.",
+							description: "See https://docs.commercetools.com/custom-applications/api-reference/application-config#envdevelopmentinitialprojectkey",
 							type: "string"
 						},
 						teamId: {
-							description: "The ID of an existing team. This can be used for granting access on behalf of the permissions assigned to that team and project.",
 							type: "string"
 						}
 					},
-					additionalProperties: false
+					additionalProperties: false,
+					required: [
+						"initialProjectKey"
+					]
 				},
 				production: {
-					description: "Configuration for production only",
 					type: "object",
 					properties: {
 						applicationId: {
-							description: "The ID of the Custom Application (when you register the application in the Merchant Center)",
+							description: "See https://docs.commercetools.com/custom-applications/api-reference/application-config#envproductionapplicationid",
 							type: "string"
 						},
 						url: {
-							description: "The URL where the Custom Application is hosted",
+							description: "See https://docs.commercetools.com/custom-applications/api-reference/application-config#envproductionurl",
 							type: "string"
 						},
 						cdnUrl: {
-							description: "The URL where the Custom Application static assets are hosted, like an external CDN. If the static assets are hosted alongside the Custom Application, you can omit this option and the Custom Application URL will be used instead.",
+							description: "See https://docs.commercetools.com/custom-applications/api-reference/application-config#envproductioncdnurl",
 							type: "string"
 						}
 					},
 					additionalProperties: false,
 					required: [
+						"applicationId",
 						"url"
 					]
 				}
 			},
 			additionalProperties: false,
 			required: [
+				"development",
 				"production"
 			]
 		},
 		additionalEnv: {
-			description: "Additional environment values unique to your Custom Application that are injected in the application context.",
+			description: "See https://docs.commercetools.com/custom-applications/api-reference/application-config#additionalenv",
 			type: "object"
 		},
 		headers: {
-			description: "Configuration for HTTP headers",
+			description: "See https://docs.commercetools.com/custom-applications/api-reference/application-config#headers",
 			type: "object",
 			properties: {
 				csp: {
-					description: "Configuration for the HTTP Content-Security-Policy header (https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy)",
+					description: "See https://docs.commercetools.com/custom-applications/api-reference/application-config#headerscsp",
 					type: "object",
 					properties: {
 						"connect-src": {
@@ -298,15 +310,15 @@ var schemaJson = {
 					]
 				},
 				featurePolicies: {
-					description: "Configuration for the HTTP Feature-Policy header (https://developer.mozilla.org/en-US/docs/Web/HTTP/Feature_Policy/Using_Feature_Policy)",
+					description: "See https://docs.commercetools.com/custom-applications/api-reference/application-config#headersfeaturepolicies",
 					type: "object"
 				},
 				permissionsPolicies: {
-					description: "Configuration for the HTTP Permissions-Policy header (https://github.com/w3c/webappsec-permissions-policy/blob/main/permissions-policy-explainer.md)",
+					description: "See https://docs.commercetools.com/custom-applications/api-reference/application-config#headerspermissionspolicies",
 					type: "object"
 				},
 				strictTransportSecurity: {
-					description: "Additional configuration for the HTTP Strict-Transport-Security header (https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security)",
+					description: "See https://docs.commercetools.com/custom-applications/api-reference/application-config#headersstricttransportsecurity",
 					type: "array",
 					items: {
 						"enum": [
@@ -317,25 +329,22 @@ var schemaJson = {
 					uniqueItems: true
 				}
 			},
-			additionalProperties: false,
-			required: [
-				"csp"
-			]
+			additionalProperties: false
+		},
+		icon: {
+			description: "See https://docs.commercetools.com/custom-applications/api-reference/application-config#icon",
+			type: "string"
 		},
-		menuLinks: {
-			description: "Configuration for the menu links on the left-side navbar.",
+		mainMenuLink: {
+			description: "See https://docs.commercetools.com/custom-applications/api-reference/application-config#mainmenulink",
 			type: "object",
 			properties: {
-				icon: {
-					description: "The SVG icon that represents this application. Pass the raw SVG string or a path to an SVG file, for example a relative path `${path:./app.svg}`, or a path from a module `${path:@commercetools-frontend/assets/application-icons/Rocket.svg}`.",
-					type: "string"
-				},
 				defaultLabel: {
-					description: "A default label to be rendered if there is no matching localized label for the user locale.",
+					description: "See https://docs.commercetools.com/custom-applications/api-reference/application-config#mainmenulinkdefaultlabel",
 					type: "string"
 				},
 				labelAllLocales: {
-					description: "Localized label based on the application locales available from the user profile.",
+					description: "See https://docs.commercetools.com/custom-applications/api-reference/application-config#mainmenulinklabelalllocales",
 					type: "array",
 					"default": [
 					],
@@ -354,7 +363,6 @@ var schemaJson = {
 								]
 							},
 							value: {
-								description: "A label for the specific locale or a reference to a translated message. For example `${intl:en:Menu.Avengers}` which looks for the message key `Menu.Avengers` in the `src/i18n/data/en.json`",
 								type: "string"
 							}
 						},
@@ -366,89 +374,86 @@ var schemaJson = {
 					}
 				},
 				permissions: {
-					description: "Set the visibility of the menu link. Users must have at least one permission to see the Custom Application in the Merchant Center menu.",
+					description: "See https://docs.commercetools.com/custom-applications/api-reference/application-config#mainmenulinkpermissions",
 					type: "array",
 					"default": [
 					],
 					items: {
 						type: "string"
 					}
-				},
-				submenuLinks: {
-					description: "Configuration for the submenu links on the left-side navbar.",
-					"default": [
-					],
-					type: "array",
-					items: {
-						type: "object",
-						properties: {
-							uriPath: {
-								description: "Route path relative to the entry point URI path of the Custom Application.",
-								type: "string"
-							},
-							defaultLabel: {
-								description: "A default label to be rendered if there is no matching localized label for the user locale.",
-								type: "string"
-							},
-							labelAllLocales: {
-								description: "Localized label based on the application locales available from the user profile.",
-								type: "array",
-								"default": [
-								],
-								items: {
-									type: "object",
-									properties: {
-										locale: {
-											type: "string",
-											"enum": [
-												"en",
-												"de",
-												"es",
-												"fr-FR",
-												"zh-CN",
-												"ja"
-											]
-										},
-										value: {
-											description: "A label for the specific locale or a reference to a translated message. For example `${intl:en:Menu.Avengers}` which looks for the message key `Menu.Avengers` in the `src/i18n/data/en.json`",
-											type: "string"
-										}
-									},
-									additionalProperties: false,
-									required: [
-										"locale",
-										"value"
-									]
-								}
-							},
-							permissions: {
-								description: "Set the visibility of the menu link. Users must have at least one permission to see the Custom Application in the Merchant Center menu.",
-								type: "array",
-								"default": [
-								],
-								items: {
-									type: "string"
-								}
-							}
-						},
-						additionalProperties: true,
-						required: [
-							"uriPath",
-							"defaultLabel",
-							"labelAllLocales",
-							"permissions"
-						]
-					}
 				}
 			},
 			additionalProperties: true,
 			required: [
-				"icon",
 				"defaultLabel",
 				"labelAllLocales",
-				"permissions",
-				"submenuLinks"
+				"permissions"
 			]
+		},
+		submenuLinks: {
+			description: "See https://docs.commercetools.com/custom-applications/api-reference/application-config#submenulinks",
+			"default": [
+			],
+			type: "array",
+			items: {
+				type: "object",
+				properties: {
+					uriPath: {
+						description: "See https://docs.commercetools.com/custom-applications/api-reference/application-config#submenulinksuripath",
+						type: "string"
+					},
+					defaultLabel: {
+						description: "See https://docs.commercetools.com/custom-applications/api-reference/application-config#submenulinksdefaultlabel",
+						type: "string"
+					},
+					labelAllLocales: {
+						description: "See https://docs.commercetools.com/custom-applications/api-reference/application-config#submenulinkslabelalllocales",
+						type: "array",
+						"default": [
+						],
+						items: {
+							type: "object",
+							properties: {
+								locale: {
+									type: "string",
+									"enum": [
+										"en",
+										"de",
+										"es",
+										"fr-FR",
+										"zh-CN",
+										"ja"
+									]
+								},
+								value: {
+									type: "string"
+								}
+							},
+							additionalProperties: false,
+							required: [
+								"locale",
+								"value"
+							]
+						}
+					},
+					permissions: {
+						description: "See https://docs.commercetools.com/custom-applications/api-reference/application-config#submenulinkspermissions",
+						type: "array",
+						"default": [
+						],
+						items: {
+							type: "string"
+						}
+					}
+				},
+				additionalProperties: true,
+				required: [
+					"uriPath",
+					"defaultLabel",
+					"labelAllLocales",
+					"permissions"
+				]
+			}
 		}
 	},
 	additionalProperties: true,
@@ -456,7 +461,11 @@ var schemaJson = {
 		"name",
 		"entryPointUriPath",
 		"cloudIdentifier",
-		"env"
+		"env",
+		"oAuthScopes",
+		"icon",
+		"mainMenuLink",
+		"submenuLinks"
 	]
 };
 
@@ -570,7 +579,7 @@ var getOrThrow = function getOrThrow(fn, errorMessage) {
  * Allows variable placeholders. Supported types are:
  * - `env`: For example `${env:MC_API_URL}`.
  * - `intl`: For example `${intl:en:Menu.title}`.
- * - `path`: For example `${path:./app.svg}`, or `${path:@commercetools-frontend/assets/application-icons/Rocket.svg}`.
+ * - `path`: For example `${path:./app.svg}`, or `${path:@commercetools-frontend/assets/application-icons/rocket.svg}`.
  */
 var variableSyntax = /\${([ ~:\w.'",\-/()@]+?)}/g;
 var envRefSyntax = /^env:/g;
@@ -687,9 +696,9 @@ var substituteVariablePlaceholders = function substituteVariablePlaceholders(con
   });
 };
 
-function ownKeys(object, enumerableOnly) { var keys = _Object$keys__default["default"](object); if (_Object$getOwnPropertySymbols__default["default"]) { var symbols = _Object$getOwnPropertySymbols__default["default"](object); if (enumerableOnly) { symbols = _filterInstanceProperty__default["default"](symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor__default["default"](object, sym).enumerable; }); } keys.push.apply(keys, symbols); } return keys; }
+function ownKeys(object, enumerableOnly) { var keys = _Object$keys__default["default"](object); if (_Object$getOwnPropertySymbols__default["default"]) { var symbols = _Object$getOwnPropertySymbols__default["default"](object); enumerableOnly && (symbols = _filterInstanceProperty__default["default"](symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor__default["default"](object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
 
-function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i] != null ? arguments[i] : {}; if (i % 2) { var _context3; _forEachInstanceProperty__default["default"](_context3 = ownKeys(Object(source), true)).call(_context3, function (key) { _defineProperty(target, key, source[key]); }); } else if (_Object$getOwnPropertyDescriptors__default["default"]) { _Object$defineProperties__default["default"](target, _Object$getOwnPropertyDescriptors__default["default"](source)); } else { var _context4; _forEachInstanceProperty__default["default"](_context4 = ownKeys(Object(source))).call(_context4, function (key) { _Object$defineProperty__default["default"](target, key, _Object$getOwnPropertyDescriptor__default["default"](source, key)); }); } } return target; }
+function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var _context3, _context4; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty__default["default"](_context3 = ownKeys(Object(source), !0)).call(_context3, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors__default["default"] ? _Object$defineProperties__default["default"](target, _Object$getOwnPropertyDescriptors__default["default"](source)) : _forEachInstanceProperty__default["default"](_context4 = ownKeys(Object(source))).call(_context4, function (key) { _Object$defineProperty__default["default"](target, key, _Object$getOwnPropertyDescriptor__default["default"](source, key)); }); } return target; }
 // TODO: make it configurable.
 var developmentPort = 3001;
 var developmentAppUrl = "http://localhost:".concat(developmentPort);
@@ -705,7 +714,7 @@ var omitDevConfigIfEmpty = function omitDevConfigIfEmpty(devConfig) {
 var cachedConfig;
 
 var processConfig = function processConfig() {
-  var _ref2, _processEnv$MC_APP_EN, _appConfig$additional, _ref3, _appConfig$env$develo, _appConfig$env$develo2, _appConfig$headers, _appConfig$headers2, _context2, _appConfig$headers3, _appConfig$headers4;
+  var _ref2, _processEnv$MC_APP_EN, _appConfig$additional, _ref3, _context, _appConfig$env$develo, _appConfig$headers, _appConfig$headers2, _appConfig$headers2$c, _context2, _appConfig$headers3, _appConfig$headers3$c, _appConfig$headers4, _appConfig$headers4$c;
 
   var _ref = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {},
       _ref$disableCache = _ref.disableCache,
@@ -726,9 +735,7 @@ var processConfig = function processConfig() {
     applicationPath: applicationPath
   });
   var additionalAppEnv = (_appConfig$additional = appConfig.additionalEnv) !== null && _appConfig$additional !== void 0 ? _appConfig$additional : {};
-  var revision = (_ref3 = additionalAppEnv.revision) !== null && _ref3 !== void 0 ? _ref3 : ''; // Feature flags
-
-  var isOidcForDevelopmentEnabled = Boolean(JSON.parse(processEnv.ENABLE_OIDC_FOR_DEVELOPMENT || 'false')); // Parse all the supported URLs, which gets implicitly validated
+  var revision = (_ref3 = additionalAppEnv.revision) !== null && _ref3 !== void 0 ? _ref3 : ''; // Parse all the supported URLs, which gets implicitly validated
 
   var envAppUrl = isProd ? appConfig.env.production.url : developmentAppUrl;
   var appUrl = getOrThrow(function () {
@@ -747,37 +754,27 @@ var processConfig = function processConfig() {
   // This is important to determine to which URL the MC should redirect to
   // after successful login.
 
-  var applicationId = isOidcForDevelopmentEnabled ? "__local:".concat(appConfig.entryPointUriPath) : undefined;
-
-  if (isProd) {
-    // TODO: decide if we do require the application ID or not.
-    if (appConfig.env.production.applicationId) {
-      var _context;
-
-      applicationId = _concatInstanceProperty__default["default"](_context = "".concat(appConfig.env.production.applicationId, ":")).call(_context, appConfig.entryPointUriPath);
-    } else {
-      // As long as we don't require the application ID in production, we should
-      // fall back to unset the value.
-      applicationId = undefined;
-    }
-  }
-
+  var applicationId = isProd ? _concatInstanceProperty__default["default"](_context = "".concat(appConfig.env.production.applicationId, ":")).call(_context, appConfig.entryPointUriPath) : "__local:".concat(appConfig.entryPointUriPath);
   var developmentConfig = isProd ? undefined : omitDevConfigIfEmpty({
-    oidc: isOidcForDevelopmentEnabled ? omitEmpty__default["default"]({
+    oidc: omitEmpty__default["default"]({
       authorizeUrl: [// In case the MC API url points to localhost, we need to point
       // to a local running dev login page to handle the workflow properly.
       mcApiUrl.hostname === 'localhost' ? mcApiUrl.origin.replace(mcApiUrl.port, String(developmentPort)) : mcApiUrl.origin.replace('mc-api', 'mc'), '/login/authorize'].join(''),
-      initialProjectKey: (_appConfig$env$develo = appConfig.env.development) === null || _appConfig$env$develo === void 0 ? void 0 : _appConfig$env$develo.initialProjectKey,
-      teamId: (_appConfig$env$develo2 = appConfig.env.development) === null || _appConfig$env$develo2 === void 0 ? void 0 : _appConfig$env$develo2.teamId,
+      initialProjectKey: // For the `account` application, we should unset the projectKey.
+      appConfig.entryPointUriPath === 'account' ? undefined : appConfig.env.development.initialProjectKey,
+      teamId: (_appConfig$env$develo = appConfig.env.development) === null || _appConfig$env$develo === void 0 ? void 0 : _appConfig$env$develo.teamId,
       oAuthScopes: appConfig.oAuthScopes
-    }) : undefined,
-    menuLinks: appConfig.menuLinks,
+    }),
+    menuLinks: _objectSpread(_objectSpread({
+      icon: appConfig.icon
+    }, appConfig.mainMenuLink), {}, {
+      submenuLinks: appConfig.submenuLinks
+    }),
     // @ts-expect-error: the `accountLinks` is not explicitly typed as it's only used by the account app.
     accountLinks: appConfig.accountLinks
   });
   cachedConfig = {
     env: _objectSpread(_objectSpread(_objectSpread({}, omitEmpty__default["default"](additionalAppEnv)), {}, {
-      // TODO: how else should we provide the app identifier?
       applicationId: applicationId,
       applicationName: appConfig.name,
       entryPointUriPath: appConfig.entryPointUriPath
@@ -794,9 +791,9 @@ var processConfig = function processConfig() {
     }),
     headers: _objectSpread(_objectSpread({}, appConfig.headers), {}, {
       csp: _objectSpread(_objectSpread({}, (_appConfig$headers = appConfig.headers) === null || _appConfig$headers === void 0 ? void 0 : _appConfig$headers.csp), {}, {
-        'connect-src': getUniqueValues((_appConfig$headers2 = appConfig.headers) === null || _appConfig$headers2 === void 0 ? void 0 : _appConfig$headers2.csp['connect-src'], _concatInstanceProperty__default["default"](_context2 = [mcApiUrl.origin]).call(_context2, isProd ? [appUrl.href] : [])),
-        'script-src': getUniqueValues((_appConfig$headers3 = appConfig.headers) === null || _appConfig$headers3 === void 0 ? void 0 : _appConfig$headers3.csp['script-src'], isProd ? [appUrl.href, cdnUrl.href] : []),
-        'style-src': getUniqueValues((_appConfig$headers4 = appConfig.headers) === null || _appConfig$headers4 === void 0 ? void 0 : _appConfig$headers4.csp['style-src'], isProd ? [appUrl.href, cdnUrl.href] : [])
+        'connect-src': getUniqueValues((_appConfig$headers2 = appConfig.headers) === null || _appConfig$headers2 === void 0 ? void 0 : (_appConfig$headers2$c = _appConfig$headers2.csp) === null || _appConfig$headers2$c === void 0 ? void 0 : _appConfig$headers2$c['connect-src'], _concatInstanceProperty__default["default"](_context2 = [mcApiUrl.origin]).call(_context2, isProd ? [appUrl.href] : [])),
+        'script-src': getUniqueValues((_appConfig$headers3 = appConfig.headers) === null || _appConfig$headers3 === void 0 ? void 0 : (_appConfig$headers3$c = _appConfig$headers3.csp) === null || _appConfig$headers3$c === void 0 ? void 0 : _appConfig$headers3$c['script-src'], isProd ? [appUrl.href, cdnUrl.href] : []),
+        'style-src': getUniqueValues((_appConfig$headers4 = appConfig.headers) === null || _appConfig$headers4 === void 0 ? void 0 : (_appConfig$headers4$c = _appConfig$headers4.csp) === null || _appConfig$headers4$c === void 0 ? void 0 : _appConfig$headers4$c['style-src'], isProd ? [appUrl.href, cdnUrl.href] : [])
       })
     })
   };