npm - @commercetools-frontend/application-shell - Versions diffs - 20.13.0 → 21.0.0-rc.4 - Mend

@commercetools-frontend/application-shell 20.13.0 → 21.0.0-rc.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (58) hide show

package/README.md CHANGED Viewed

@@ -4,4 +4,4 @@
   <a href="https://www.npmjs.com/package/@commercetools-frontend/application-shell"><img src="https://badgen.net/npm/v/@commercetools-frontend/application-shell" alt="Latest release (latest dist-tag)" /></a> <a href="https://www.npmjs.com/package/@commercetools-frontend/application-shell"><img src="https://badgen.net/npm/v/@commercetools-frontend/application-shell/next" alt="Latest release (next dist-tag)" /></a> <a href="https://bundlephobia.com/result?p=@commercetools-frontend/application-shell"><img src="https://badgen.net/bundlephobia/minzip/@commercetools-frontend/application-shell" alt="Minified + GZipped size" /></a> <a href="https://github.com/commercetools/merchant-center-application-kit/blob/main/LICENSE"><img src="https://badgen.net/github/license/commercetools/merchant-center-application-kit" alt="GitHub license" /></a>
 </p>
-Check out the [documentation](https://docs.commercetools.com/custom-applications/components/application-shell) for more information.
+Check out the [documentation](https://docs.commercetools.com/custom-applications/api-reference/commercetools-frontend-application-shell) for more information.

package/dist/{application-entry-point-0e540c26.cjs.prod.js → application-entry-point-0480091d.cjs.prod.js} RENAMED Viewed

@@ -22,7 +22,7 @@ var omitEmpty = require('omit-empty-es');
 var notifications = require('@commercetools-frontend/notifications');
 var sdk = require('@commercetools-frontend/sdk');
 var constants = require('@commercetools-frontend/constants');
-var constants$1 = require('./constants-745aeeca.cjs.prod.js');
+var formatters = require('./formatters-a5bb12eb.cjs.prod.js');
 var reactNotifications = require('@commercetools-frontend/react-notifications');
 var _startsWithInstanceProperty = require('@babel/runtime-corejs3/core-js-stable/instance/starts-with');
 var _includesInstanceProperty = require('@babel/runtime-corejs3/core-js-stable/instance/includes');
@@ -57,6 +57,7 @@ require('prop-types');
 var react = require('react');
 var reactRouterDom = require('react-router-dom');
 var invariant = require('tiny-invariant');
+var permissions = require('@commercetools-frontend/permissions');
 var applicationComponents = require('@commercetools-frontend/application-components');
 var applicationShellConnectors = require('@commercetools-frontend/application-shell-connectors');
@@ -99,7 +100,7 @@ var _JSON$stringify__default = /*#__PURE__*/_interopDefault(_JSON$stringify);
 var invariant__default = /*#__PURE__*/_interopDefault(invariant);
 // NOTE: This string will be replaced on build time with the package version.
-var version = "20.13.0";
+var version = "21.0.0-rc.4";
 var isAddNotificationErrorAction = function isAddNotificationErrorAction(action) {
   var errorAction = action;
@@ -226,9 +227,9 @@ var messages = reactIntl.defineMessages({
   }
 });
-function ownKeys$4(object, enumerableOnly) { var keys = _Object$keys__default["default"](object); if (_Object$getOwnPropertySymbols__default["default"]) { var symbols = _Object$getOwnPropertySymbols__default["default"](object); if (enumerableOnly) { symbols = _filterInstanceProperty__default["default"](symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor__default["default"](object, sym).enumerable; }); } keys.push.apply(keys, symbols); } return keys; }
+function ownKeys$5(object, enumerableOnly) { var keys = _Object$keys__default["default"](object); if (_Object$getOwnPropertySymbols__default["default"]) { var symbols = _Object$getOwnPropertySymbols__default["default"](object); enumerableOnly && (symbols = _filterInstanceProperty__default["default"](symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor__default["default"](object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
-function _objectSpread$4(target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i] != null ? arguments[i] : {}; if (i % 2) { var _context; _forEachInstanceProperty__default["default"](_context = ownKeys$4(Object(source), true)).call(_context, function (key) { _defineProperty(target, key, source[key]); }); } else if (_Object$getOwnPropertyDescriptors__default["default"]) { _Object$defineProperties__default["default"](target, _Object$getOwnPropertyDescriptors__default["default"](source)); } else { var _context2; _forEachInstanceProperty__default["default"](_context2 = ownKeys$4(Object(source))).call(_context2, function (key) { _Object$defineProperty__default["default"](target, key, _Object$getOwnPropertyDescriptor__default["default"](source, key)); }); } } return target; }
+function _objectSpread$5(target) { for (var i = 1; i < arguments.length; i++) { var _context, _context2; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty__default["default"](_context = ownKeys$5(Object(source), !0)).call(_context, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors__default["default"] ? _Object$defineProperties__default["default"](target, _Object$getOwnPropertyDescriptors__default["default"](source)) : _forEachInstanceProperty__default["default"](_context2 = ownKeys$5(Object(source))).call(_context2, function (key) { _Object$defineProperty__default["default"](target, key, _Object$getOwnPropertyDescriptor__default["default"](source, key)); }); } return target; }
 var getPortalContainer = function getPortalContainer() {
   return document.querySelector("#".concat(REQUESTS_IN_FLIGHT_LOADER_DOM_ID));
@@ -240,7 +241,7 @@ var RequestsInFlightLoader = function RequestsInFlightLoader() {
   });
   if (!hasRequestsInFlight) return null;
   return /*#__PURE__*/ReactDOM__default["default"].createPortal(jsxRuntime.jsx(LoadingSpinner__default["default"], {
-    children: jsxRuntime.jsx(reactIntl.FormattedMessage, _objectSpread$4({}, messages.labelLoading))
+    children: jsxRuntime.jsx(reactIntl.FormattedMessage, _objectSpread$5({}, messages.labelLoading))
   }), getPortalContainer());
 };
@@ -282,7 +283,7 @@ var requestsInFlightReducer = (function (requestsInFlight, action) {
 });
 function selectTeamIdFromLocalStorage() {
-  return window.localStorage.getItem(constants$1.STORAGE_KEYS.ACTIVE_TEAM_ID) || undefined;
+  return window.localStorage.getItem(formatters.STORAGE_KEYS.ACTIVE_TEAM_ID) || undefined;
 }
 var staticUrlPathsInPositionOfProjectKey = ['login', 'logout', 'account']; // Attempt to extract the `:projectKey` from the URL.
@@ -395,47 +396,47 @@ function getMcApiUrl() {
 }
 var getSessionToken = function getSessionToken() {
-  return window.sessionStorage.getItem(constants$1.STORAGE_KEYS.SESSION_TOKEN);
+  return window.sessionStorage.getItem(formatters.STORAGE_KEYS.SESSION_TOKEN);
 };
 var setActiveSession = function setActiveSession(sessionToken) {
   if (!sessionToken) return;
-  window.sessionStorage.setItem(constants$1.STORAGE_KEYS.SESSION_TOKEN, sessionToken !== null && sessionToken !== void 0 ? sessionToken : '');
-  window.localStorage.setItem(constants$1.STORAGE_KEYS.LOGIN_STRATEGY, constants$1.LOGIN_STRATEGY_OIDC); // Remove flag for original workflow
+  window.sessionStorage.setItem(formatters.STORAGE_KEYS.SESSION_TOKEN, sessionToken !== null && sessionToken !== void 0 ? sessionToken : '');
+  window.localStorage.setItem(formatters.STORAGE_KEYS.LOGIN_STRATEGY, formatters.LOGIN_STRATEGY_OIDC); // Remove flag for original workflow
-  window.localStorage.removeItem(constants$1.STORAGE_KEYS.IS_AUTHENTICATED);
+  window.localStorage.removeItem(formatters.STORAGE_KEYS.IS_AUTHENTICATED);
 };
 var clearSession = function clearSession() {
-  window.sessionStorage.removeItem(constants$1.STORAGE_KEYS.SESSION_TOKEN);
-  window.sessionStorage.removeItem(constants$1.STORAGE_KEYS.SESSION_SCOPE);
-  window.sessionStorage.removeItem(constants$1.STORAGE_KEYS.IS_AUTHENTICATED);
+  window.sessionStorage.removeItem(formatters.STORAGE_KEYS.SESSION_TOKEN);
+  window.sessionStorage.removeItem(formatters.STORAGE_KEYS.SESSION_SCOPE);
+  window.sessionStorage.removeItem(formatters.STORAGE_KEYS.IS_AUTHENTICATED);
 };
 var getActiveProjectKey = function getActiveProjectKey() {
-  return window.localStorage.getItem(constants$1.STORAGE_KEYS.ACTIVE_PROJECT_KEY);
+  return window.localStorage.getItem(formatters.STORAGE_KEYS.ACTIVE_PROJECT_KEY);
 };
 var removeActiveProjectKey = function removeActiveProjectKey() {
-  window.localStorage.removeItem(constants$1.STORAGE_KEYS.ACTIVE_PROJECT_KEY);
+  window.localStorage.removeItem(formatters.STORAGE_KEYS.ACTIVE_PROJECT_KEY);
 };
 var setActiveProjectKey = function setActiveProjectKey(projectKey) {
-  window.localStorage.setItem(constants$1.STORAGE_KEYS.ACTIVE_PROJECT_KEY, projectKey);
+  window.localStorage.setItem(formatters.STORAGE_KEYS.ACTIVE_PROJECT_KEY, projectKey);
 };
 var getSessionScope = function getSessionScope() {
-  return window.sessionStorage.getItem(constants$1.STORAGE_KEYS.SESSION_SCOPE);
+  return window.sessionStorage.getItem(formatters.STORAGE_KEYS.SESSION_SCOPE);
 };
 var setSessionScope = function setSessionScope(scope) {
-  window.sessionStorage.setItem(constants$1.STORAGE_KEYS.SESSION_SCOPE, scope);
+  window.sessionStorage.setItem(formatters.STORAGE_KEYS.SESSION_SCOPE, scope);
 };
 var getSessionState = function getSessionState(stateId) {
   var _context;
-  var sessionStateKey = _concatInstanceProperty__default["default"](_context = "".concat(constants$1.STORAGE_KEYS.NONCE, "_")).call(_context, stateId);
+  var sessionStateKey = _concatInstanceProperty__default["default"](_context = "".concat(formatters.STORAGE_KEYS.NONCE, "_")).call(_context, stateId);
   var unparsedSessionState = window.sessionStorage.getItem(sessionStateKey);
@@ -455,14 +456,14 @@ var getSessionState = function getSessionState(stateId) {
 var setSessionState = function setSessionState(stateId, state) {
   var _context3;
-  var sessionStateKey = _concatInstanceProperty__default["default"](_context3 = "".concat(constants$1.STORAGE_KEYS.NONCE, "_")).call(_context3, stateId);
+  var sessionStateKey = _concatInstanceProperty__default["default"](_context3 = "".concat(formatters.STORAGE_KEYS.NONCE, "_")).call(_context3, stateId);
   window.sessionStorage.setItem(sessionStateKey, _JSON$stringify__default["default"](state));
 };
-function ownKeys$3(object, enumerableOnly) { var keys = _Object$keys__default["default"](object); if (_Object$getOwnPropertySymbols__default["default"]) { var symbols = _Object$getOwnPropertySymbols__default["default"](object); if (enumerableOnly) { symbols = _filterInstanceProperty__default["default"](symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor__default["default"](object, sym).enumerable; }); } keys.push.apply(keys, symbols); } return keys; }
+function ownKeys$4(object, enumerableOnly) { var keys = _Object$keys__default["default"](object); if (_Object$getOwnPropertySymbols__default["default"]) { var symbols = _Object$getOwnPropertySymbols__default["default"](object); enumerableOnly && (symbols = _filterInstanceProperty__default["default"](symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor__default["default"](object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
-function _objectSpread$3(target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i] != null ? arguments[i] : {}; if (i % 2) { var _context3; _forEachInstanceProperty__default["default"](_context3 = ownKeys$3(Object(source), true)).call(_context3, function (key) { _defineProperty(target, key, source[key]); }); } else if (_Object$getOwnPropertyDescriptors__default["default"]) { _Object$defineProperties__default["default"](target, _Object$getOwnPropertyDescriptors__default["default"](source)); } else { var _context4; _forEachInstanceProperty__default["default"](_context4 = ownKeys$3(Object(source))).call(_context4, function (key) { _Object$defineProperty__default["default"](target, key, _Object$getOwnPropertyDescriptor__default["default"](source, key)); }); } } return target; }
+function _objectSpread$4(target) { for (var i = 1; i < arguments.length; i++) { var _context3, _context4; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty__default["default"](_context3 = ownKeys$4(Object(source), !0)).call(_context3, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors__default["default"] ? _Object$defineProperties__default["default"](target, _Object$getOwnPropertyDescriptors__default["default"](source)) : _forEachInstanceProperty__default["default"](_context4 = ownKeys$4(Object(source))).call(_context4, function (key) { _Object$defineProperty__default["default"](target, key, _Object$getOwnPropertyDescriptor__default["default"](source, key)); }); } return target; }
 var identityStoreEnhancer = function identityStoreEnhancer(noop) {
   return noop;
@@ -475,7 +476,7 @@ var mergeObjectValues = function mergeObjectValues(object) {
     var _ref2 = _slicedToArray(_ref, 2),
         value = _ref2[1];
-    return _objectSpread$3(_objectSpread$3({}, acc), value);
+    return _objectSpread$4(_objectSpread$4({}, acc), value);
   }, {});
 };
@@ -489,7 +490,7 @@ var getAdditionalHeaders = function getAdditionalHeaders() {
   var _omitEmpty;
   var sessionToken = getSessionToken();
-  return omitEmpty__default["default"]((_omitEmpty = {}, _defineProperty(_omitEmpty, constants$1.SUPPORTED_HEADERS.AUTHORIZATION, sessionToken ? "Bearer ".concat(sessionToken) : undefined), _defineProperty(_omitEmpty, constants$1.SUPPORTED_HEADERS.X_APPLICATION_ID, window.app.applicationId), _defineProperty(_omitEmpty, constants$1.SUPPORTED_HEADERS.X_TEAM_ID, selectTeamIdFromLocalStorage()), _omitEmpty));
+  return omitEmpty__default["default"]((_omitEmpty = {}, _defineProperty(_omitEmpty, formatters.SUPPORTED_HEADERS.AUTHORIZATION, sessionToken ? "Bearer ".concat(sessionToken) : undefined), _defineProperty(_omitEmpty, formatters.SUPPORTED_HEADERS.X_APPLICATION_ID, window.app.applicationId), _defineProperty(_omitEmpty, formatters.SUPPORTED_HEADERS.X_TEAM_ID, selectTeamIdFromLocalStorage()), _omitEmpty));
 };
 var sdkMiddleware = sdk.createMiddleware({
@@ -520,7 +521,7 @@ var createInternalReducer = function createInternalReducer() {
   }); // NOTE: since we don't know in advance which reducers will be injected,
   // we pass an `unknown` type to express this uncertainty and make the compiler happy.
-  return redux.combineReducers(_objectSpread$3(_objectSpread$3({
+  return redux.combineReducers(_objectSpread$4(_objectSpread$4({
     requestsInFlight: requestsInFlightReducer,
     notifications: notifications.reducer
   }, injectedReducers), preloadedStateReducers));
@@ -563,9 +564,9 @@ var createReduxStore = function createReduxStore() {
 };
 var internalReduxStore = createReduxStore();
-function ownKeys$2(object, enumerableOnly) { var keys = _Object$keys__default["default"](object); if (_Object$getOwnPropertySymbols__default["default"]) { var symbols = _Object$getOwnPropertySymbols__default["default"](object); if (enumerableOnly) { symbols = _filterInstanceProperty__default["default"](symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor__default["default"](object, sym).enumerable; }); } keys.push.apply(keys, symbols); } return keys; }
+function ownKeys$3(object, enumerableOnly) { var keys = _Object$keys__default["default"](object); if (_Object$getOwnPropertySymbols__default["default"]) { var symbols = _Object$getOwnPropertySymbols__default["default"](object); enumerableOnly && (symbols = _filterInstanceProperty__default["default"](symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor__default["default"](object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
-function _objectSpread$2(target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i] != null ? arguments[i] : {}; if (i % 2) { var _context2; _forEachInstanceProperty__default["default"](_context2 = ownKeys$2(Object(source), true)).call(_context2, function (key) { _defineProperty(target, key, source[key]); }); } else if (_Object$getOwnPropertyDescriptors__default["default"]) { _Object$defineProperties__default["default"](target, _Object$getOwnPropertyDescriptors__default["default"](source)); } else { var _context3; _forEachInstanceProperty__default["default"](_context3 = ownKeys$2(Object(source))).call(_context3, function (key) { _Object$defineProperty__default["default"](target, key, _Object$getOwnPropertyDescriptor__default["default"](source, key)); }); } } return target; }
+function _objectSpread$3(target) { for (var i = 1; i < arguments.length; i++) { var _context2, _context3; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty__default["default"](_context2 = ownKeys$3(Object(source), !0)).call(_context2, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors__default["default"] ? _Object$defineProperties__default["default"](target, _Object$getOwnPropertyDescriptors__default["default"](source)) : _forEachInstanceProperty__default["default"](_context3 = ownKeys$3(Object(source))).call(_context3, function (key) { _Object$defineProperty__default["default"](target, key, _Object$getOwnPropertyDescriptor__default["default"](source, key)); }); } return target; }
 var getSkipTokenRetry = function getSkipTokenRetry(context) {
   var skipTokenRetry = Boolean(context.skipTokenRetry);
@@ -573,7 +574,7 @@ var getSkipTokenRetry = function getSkipTokenRetry(context) {
 };
 var forwardTokenRetryHeader = function forwardTokenRetryHeader(headers) {
-  return _objectSpread$2(_objectSpread$2({}, headers), {}, _defineProperty({}, constants$1.SUPPORTED_HEADERS.X_TOKEN_RETRY, 'true'));
+  return _objectSpread$3(_objectSpread$3({}, headers), {}, _defineProperty({}, formatters.SUPPORTED_HEADERS.X_TOKEN_RETRY, 'true'));
 }; // This link retries requests to the CTP API that have been rejected
 // because of an invalid/expired oauth token.
 // To do so, we resend the request with the header "X-Force-Token: true"
@@ -584,7 +585,7 @@ var forwardTokenRetryHeader = function forwardTokenRetryHeader(headers) {
 var getDoesGraphQLTargetSupportTokenRetry = function getDoesGraphQLTargetSupportTokenRetry(context) {
   var _context$headers, _context$headers2, _context;
-  var graphQLTarget = ((_context$headers = context.headers) === null || _context$headers === void 0 ? void 0 : _context$headers[constants$1.SUPPORTED_HEADERS.X_GRAPHQL_TARGET]) || ((_context$headers2 = context.headers) === null || _context$headers2 === void 0 ? void 0 : _context$headers2[constants$1.SUPPORTED_HEADERS.X_GRAPHQL_TARGET.toLowerCase()]);
+  var graphQLTarget = ((_context$headers = context.headers) === null || _context$headers === void 0 ? void 0 : _context$headers[formatters.SUPPORTED_HEADERS.X_GRAPHQL_TARGET]) || ((_context$headers2 = context.headers) === null || _context$headers2 === void 0 ? void 0 : _context$headers2[formatters.SUPPORTED_HEADERS.X_GRAPHQL_TARGET.toLowerCase()]);
   return Boolean(graphQLTarget && _includesInstanceProperty__default["default"](_context = [constants.GRAPHQL_TARGETS.COMMERCETOOLS_PLATFORM, constants.GRAPHQL_TARGETS.ADMINISTRATION_SERVICE, constants.GRAPHQL_TARGETS.SETTINGS_SERVICE, constants.GRAPHQL_TARGETS.MERCHANT_CENTER_BACKEND]).call(_context, graphQLTarget));
 };
@@ -664,9 +665,9 @@ var errorLink = error.onError(function (_ref) {
   return;
 });
-function ownKeys$1(object, enumerableOnly) { var keys = _Object$keys__default["default"](object); if (_Object$getOwnPropertySymbols__default["default"]) { var symbols = _Object$getOwnPropertySymbols__default["default"](object); if (enumerableOnly) { symbols = _filterInstanceProperty__default["default"](symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor__default["default"](object, sym).enumerable; }); } keys.push.apply(keys, symbols); } return keys; }
+function ownKeys$2(object, enumerableOnly) { var keys = _Object$keys__default["default"](object); if (_Object$getOwnPropertySymbols__default["default"]) { var symbols = _Object$getOwnPropertySymbols__default["default"](object); enumerableOnly && (symbols = _filterInstanceProperty__default["default"](symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor__default["default"](object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
-function _objectSpread$1(target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i] != null ? arguments[i] : {}; if (i % 2) { var _context5; _forEachInstanceProperty__default["default"](_context5 = ownKeys$1(Object(source), true)).call(_context5, function (key) { _defineProperty(target, key, source[key]); }); } else if (_Object$getOwnPropertyDescriptors__default["default"]) { _Object$defineProperties__default["default"](target, _Object$getOwnPropertyDescriptors__default["default"](source)); } else { var _context6; _forEachInstanceProperty__default["default"](_context6 = ownKeys$1(Object(source))).call(_context6, function (key) { _Object$defineProperty__default["default"](target, key, _Object$getOwnPropertyDescriptor__default["default"](source, key)); }); } } return target; }
+function _objectSpread$2(target) { for (var i = 1; i < arguments.length; i++) { var _context5, _context6; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty__default["default"](_context5 = ownKeys$2(Object(source), !0)).call(_context5, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors__default["default"] ? _Object$defineProperties__default["default"](target, _Object$getOwnPropertyDescriptors__default["default"](source)) : _forEachInstanceProperty__default["default"](_context6 = ownKeys$2(Object(source))).call(_context6, function (key) { _Object$defineProperty__default["default"](target, key, _Object$getOwnPropertyDescriptor__default["default"](source, key)); }); } return target; }
 var isKnownGraphQlTarget = function isKnownGraphQlTarget(target) {
   var _context;
@@ -678,13 +679,13 @@ var getAppliedForwardToHeaders = function getAppliedForwardToHeaders(apolloConte
   if (apolloContext.forwardToConfig) {
     var _context2, _apolloContext$forwar, _objectSpread3;
-    return _objectSpread$1(_objectSpread$1({}, _reduceInstanceProperty__default["default"](_context2 = _Object$entries__default["default"]((_apolloContext$forwar = apolloContext.forwardToConfig.headers) !== null && _apolloContext$forwar !== void 0 ? _apolloContext$forwar : {})).call(_context2, function (customForwardHeaders, _ref) {
+    return _objectSpread$2(_objectSpread$2({}, _reduceInstanceProperty__default["default"](_context2 = _Object$entries__default["default"]((_apolloContext$forwar = apolloContext.forwardToConfig.headers) !== null && _apolloContext$forwar !== void 0 ? _apolloContext$forwar : {})).call(_context2, function (customForwardHeaders, _ref) {
       var _ref2 = _slicedToArray(_ref, 2),
           headerName = _ref2[0],
           headerValue = _ref2[1];
-      return _objectSpread$1(_objectSpread$1({}, customForwardHeaders), {}, _defineProperty({}, "x-forward-header-".concat(headerName), headerValue));
-    }, {})), {}, (_objectSpread3 = {}, _defineProperty(_objectSpread3, constants$1.SUPPORTED_HEADERS.ACCEPT_VERSION, apolloContext.forwardToConfig.version), _defineProperty(_objectSpread3, constants$1.SUPPORTED_HEADERS.X_FORWARD_TO, apolloContext.forwardToConfig.uri), _objectSpread3));
+      return _objectSpread$2(_objectSpread$2({}, customForwardHeaders), {}, _defineProperty({}, "x-forward-header-".concat(headerName), headerValue));
+    }, {})), {}, (_objectSpread3 = {}, _defineProperty(_objectSpread3, formatters.SUPPORTED_HEADERS.ACCEPT_VERSION, apolloContext.forwardToConfig.version), _defineProperty(_objectSpread3, formatters.SUPPORTED_HEADERS.X_FORWARD_TO, apolloContext.forwardToConfig.uri), _objectSpread3));
   }
   return {};
@@ -716,9 +717,9 @@ var headerLink = new client.ApolloLink(function (operation, forward) {
   var sessionToken = getSessionToken();
   operation.setContext({
     credentials: 'include',
-    headers: omitEmpty__default["default"](_objectSpread$1(_objectSpread$1({}, apolloContext.headers), {}, (_objectSpread4 = {}, _defineProperty(_objectSpread4, constants$1.SUPPORTED_HEADERS.AUTHORIZATION, sessionToken ? "Bearer ".concat(sessionToken) : undefined), _defineProperty(_objectSpread4, constants$1.SUPPORTED_HEADERS.X_PROJECT_KEY, projectKey), _defineProperty(_objectSpread4, constants$1.SUPPORTED_HEADERS.X_CORRELATION_ID, getCorrelationId({
+    headers: omitEmpty__default["default"](_objectSpread$2(_objectSpread$2({}, apolloContext.headers), {}, (_objectSpread4 = {}, _defineProperty(_objectSpread4, formatters.SUPPORTED_HEADERS.AUTHORIZATION, sessionToken ? "Bearer ".concat(sessionToken) : undefined), _defineProperty(_objectSpread4, formatters.SUPPORTED_HEADERS.X_PROJECT_KEY, projectKey), _defineProperty(_objectSpread4, formatters.SUPPORTED_HEADERS.X_CORRELATION_ID, getCorrelationId({
       userId: userId
-    })), _defineProperty(_objectSpread4, constants$1.SUPPORTED_HEADERS.X_GRAPHQL_TARGET, graphQlTarget), _defineProperty(_objectSpread4, constants$1.SUPPORTED_HEADERS.X_GRAPHQL_OPERATION_NAME, operation.operationName), _defineProperty(_objectSpread4, constants$1.SUPPORTED_HEADERS.X_TEAM_ID, teamId), _defineProperty(_objectSpread4, constants$1.SUPPORTED_HEADERS.X_APPLICATION_ID, window.app.applicationId), _defineProperty(_objectSpread4, constants$1.SUPPORTED_HEADERS.X_FEATURE_FLAG, featureFlag), _objectSpread4), getAppliedForwardToHeaders(apolloContext)))
+    })), _defineProperty(_objectSpread4, formatters.SUPPORTED_HEADERS.X_GRAPHQL_TARGET, graphQlTarget), _defineProperty(_objectSpread4, formatters.SUPPORTED_HEADERS.X_GRAPHQL_OPERATION_NAME, operation.operationName), _defineProperty(_objectSpread4, formatters.SUPPORTED_HEADERS.X_TEAM_ID, teamId), _defineProperty(_objectSpread4, formatters.SUPPORTED_HEADERS.X_APPLICATION_ID, window.app.applicationId), _defineProperty(_objectSpread4, formatters.SUPPORTED_HEADERS.X_FEATURE_FLAG, featureFlag), _objectSpread4), getAppliedForwardToHeaders(apolloContext)))
   });
   return _mapInstanceProperty__default["default"](_context4 = forward(operation)).call(_context4, function (response) {
     var _context$response, _context$response$hea;
@@ -754,9 +755,9 @@ var tokenRetryLink = new retry.RetryLink({
 var _context;
-function ownKeys(object, enumerableOnly) { var keys = _Object$keys__default["default"](object); if (_Object$getOwnPropertySymbols__default["default"]) { var symbols = _Object$getOwnPropertySymbols__default["default"](object); if (enumerableOnly) { symbols = _filterInstanceProperty__default["default"](symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor__default["default"](object, sym).enumerable; }); } keys.push.apply(keys, symbols); } return keys; }
+function ownKeys$1(object, enumerableOnly) { var keys = _Object$keys__default["default"](object); if (_Object$getOwnPropertySymbols__default["default"]) { var symbols = _Object$getOwnPropertySymbols__default["default"](object); enumerableOnly && (symbols = _filterInstanceProperty__default["default"](symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor__default["default"](object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
-function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i] != null ? arguments[i] : {}; if (i % 2) { var _context4; _forEachInstanceProperty__default["default"](_context4 = ownKeys(Object(source), true)).call(_context4, function (key) { _defineProperty(target, key, source[key]); }); } else if (_Object$getOwnPropertyDescriptors__default["default"]) { _Object$defineProperties__default["default"](target, _Object$getOwnPropertyDescriptors__default["default"](source)); } else { var _context5; _forEachInstanceProperty__default["default"](_context5 = ownKeys(Object(source))).call(_context5, function (key) { _Object$defineProperty__default["default"](target, key, _Object$getOwnPropertyDescriptor__default["default"](source, key)); }); } } return target; }
+function _objectSpread$1(target) { for (var i = 1; i < arguments.length; i++) { var _context4, _context5; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty__default["default"](_context4 = ownKeys$1(Object(source), !0)).call(_context4, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors__default["default"] ? _Object$defineProperties__default["default"](target, _Object$getOwnPropertyDescriptors__default["default"](source)) : _forEachInstanceProperty__default["default"](_context5 = ownKeys$1(Object(source))).call(_context5, function (key) { _Object$defineProperty__default["default"](target, key, _Object$getOwnPropertyDescriptor__default["default"](source, key)); }); } return target; }
 var userAgent = createHttpUserAgent__default["default"]({
   name: 'apollo-client',
   // version: apolloVersion,
@@ -819,9 +820,9 @@ var createApolloClient = function createApolloClient() {
   return new client.ApolloClient({
     link: link,
     // https://www.apollographql.com/docs/react/caching/cache-configuration/
-    cache: new client.InMemoryCache(_objectSpread(_objectSpread({}, customCacheConfig), {}, {
+    cache: new client.InMemoryCache(_objectSpread$1(_objectSpread$1({}, customCacheConfig), {}, {
       // https://www.apollographql.com/docs/react/caching/cache-configuration/#generating-unique-identifiers
-      typePolicies: _objectSpread({
+      typePolicies: _objectSpread$1({
         // CTP types with `key` as identifier
         Project: {
           keyFields: ['key']
@@ -920,6 +921,40 @@ var RouteCatchAll = function RouteCatchAll() {
   });
 };
+function ownKeys(object, enumerableOnly) { var keys = _Object$keys__default["default"](object); if (_Object$getOwnPropertySymbols__default["default"]) { var symbols = _Object$getOwnPropertySymbols__default["default"](object); enumerableOnly && (symbols = _filterInstanceProperty__default["default"](symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor__default["default"](object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
+function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var _context, _context2; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty__default["default"](_context = ownKeys(Object(source), !0)).call(_context, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors__default["default"] ? _Object$defineProperties__default["default"](target, _Object$getOwnPropertyDescriptors__default["default"](source)) : _forEachInstanceProperty__default["default"](_context2 = ownKeys(Object(source))).call(_context2, function (key) { _Object$defineProperty__default["default"](target, key, _Object$getOwnPropertyDescriptor__default["default"](source, key)); }); } return target; }
+var ApplicationRouteWithPermissionCheck = function ApplicationRouteWithPermissionCheck(props) {
+  var permissionKeys = formatters.entryPointUriPathToPermissionKeys(props.environment.entryPointUriPath); // Require View permission to render the application.
+  var canView = permissions.useIsAuthorized({
+    demandedPermissions: [permissionKeys.View]
+  });
+  if (canView) {
+    return jsxRuntime.jsx(jsxRuntime.Fragment, {
+      children: react.Children.only(props.children)
+    });
+  }
+  return jsxRuntime.jsx(applicationComponents.PageUnauthorized, {});
+};
+ApplicationRouteWithPermissionCheck.propTypes = {};
+var ApplicationRoute = function ApplicationRoute(props) {
+  if (props.disableRoutePermissionCheck) {
+    return jsxRuntime.jsx(jsxRuntime.Fragment, {
+      children: react.Children.only(props.children)
+    });
+  }
+  return jsxRuntime.jsx(ApplicationRouteWithPermissionCheck, _objectSpread({}, props));
+};
+ApplicationRoute.propTypes = {};
 var ApplicationEntryPoint = function ApplicationEntryPoint(props) {
   // If the `children` prop is used (instead of the `render` prop),
   // we pre-configure the application entry point routes to avoid
@@ -931,7 +966,7 @@ var ApplicationEntryPoint = function ApplicationEntryPoint(props) {
       // application routes when you open the browser at http://localhost:3001
       null , jsxRuntime.jsx(reactRouterDom.Route, {
         path: "/:projectKey/".concat(entryPointUriPath),
-        children: react.Children.only(props.children)
+        children: jsxRuntime.jsx(ApplicationRoute, _objectSpread({}, props))
       }), jsxRuntime.jsx(RouteCatchAll, {})]
     });
   } // We still support the `render` prop, for backwards compatibility

package/dist/{application-entry-point-fa443a5c.esm.js → application-entry-point-15f08ea9.esm.js} RENAMED Viewed

@@ -20,7 +20,7 @@ import omitEmpty from 'omit-empty-es';
 import { ADD_NOTIFICATION, removeNotification, REMOVE_NOTIFICATION, reducer, middleware } from '@commercetools-frontend/notifications';
 import { createMiddleware } from '@commercetools-frontend/sdk';
 import { HIDE_ALL_PAGE_NOTIFICATIONS, NOTIFICATION_KINDS_PAGE, SHOW_LOADING, HIDE_LOADING, GRAPHQL_TARGETS, STATUS_CODES, LOGOUT_REASONS } from '@commercetools-frontend/constants';
-import { S as STORAGE_KEYS, L as LOGIN_STRATEGY_OIDC, c as SUPPORTED_HEADERS } from './constants-33a16227.esm.js';
+import { S as STORAGE_KEYS, L as LOGIN_STRATEGY_OIDC, d as SUPPORTED_HEADERS, e as entryPointUriPathToPermissionKeys } from './formatters-1c23c0a9.esm.js';
 import { selectPageNotifications } from '@commercetools-frontend/react-notifications';
 import _startsWithInstanceProperty from '@babel/runtime-corejs3/core-js-stable/instance/starts-with';
 import _includesInstanceProperty from '@babel/runtime-corejs3/core-js-stable/instance/includes';
@@ -55,11 +55,12 @@ import _pt from 'prop-types';
 import { useEffect, Children } from 'react';
 import { Route, Switch, Redirect } from 'react-router-dom';
 import invariant from 'tiny-invariant';
-import { PageNotFound } from '@commercetools-frontend/application-components';
+import { useIsAuthorized } from '@commercetools-frontend/permissions';
+import { PageNotFound, PageUnauthorized } from '@commercetools-frontend/application-components';
 import { useApplicationContext } from '@commercetools-frontend/application-shell-connectors';
 // NOTE: This string will be replaced on build time with the package version.
-var version = "20.13.0";
+var version = "21.0.0-rc.4";
 var isAddNotificationErrorAction = function isAddNotificationErrorAction(action) {
   var errorAction = action;
@@ -187,9 +188,9 @@ var messages = defineMessages({
   }
 });
-function ownKeys$4(object, enumerableOnly) { var keys = _Object$keys(object); if (_Object$getOwnPropertySymbols) { var symbols = _Object$getOwnPropertySymbols(object); if (enumerableOnly) { symbols = _filterInstanceProperty(symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor(object, sym).enumerable; }); } keys.push.apply(keys, symbols); } return keys; }
+function ownKeys$5(object, enumerableOnly) { var keys = _Object$keys(object); if (_Object$getOwnPropertySymbols) { var symbols = _Object$getOwnPropertySymbols(object); enumerableOnly && (symbols = _filterInstanceProperty(symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor(object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
-function _objectSpread$4(target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i] != null ? arguments[i] : {}; if (i % 2) { var _context; _forEachInstanceProperty(_context = ownKeys$4(Object(source), true)).call(_context, function (key) { _defineProperty(target, key, source[key]); }); } else if (_Object$getOwnPropertyDescriptors) { _Object$defineProperties(target, _Object$getOwnPropertyDescriptors(source)); } else { var _context2; _forEachInstanceProperty(_context2 = ownKeys$4(Object(source))).call(_context2, function (key) { _Object$defineProperty(target, key, _Object$getOwnPropertyDescriptor(source, key)); }); } } return target; }
+function _objectSpread$5(target) { for (var i = 1; i < arguments.length; i++) { var _context, _context2; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty(_context = ownKeys$5(Object(source), !0)).call(_context, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors ? _Object$defineProperties(target, _Object$getOwnPropertyDescriptors(source)) : _forEachInstanceProperty(_context2 = ownKeys$5(Object(source))).call(_context2, function (key) { _Object$defineProperty(target, key, _Object$getOwnPropertyDescriptor(source, key)); }); } return target; }
 var getPortalContainer = function getPortalContainer() {
   return process.env.NODE_ENV === 'test' ? document.body : document.querySelector("#".concat(REQUESTS_IN_FLIGHT_LOADER_DOM_ID));
@@ -201,7 +202,7 @@ var RequestsInFlightLoader = function RequestsInFlightLoader() {
   });
   if (!hasRequestsInFlight) return null;
   return /*#__PURE__*/ReactDOM.createPortal(jsx(LoadingSpinner, {
-    children: jsx(FormattedMessage, _objectSpread$4({}, messages.labelLoading))
+    children: jsx(FormattedMessage, _objectSpread$5({}, messages.labelLoading))
   }), getPortalContainer());
 };
@@ -428,9 +429,9 @@ var setSessionState = function setSessionState(stateId, state) {
   window.sessionStorage.setItem(sessionStateKey, _JSON$stringify(state));
 };
-function ownKeys$3(object, enumerableOnly) { var keys = _Object$keys(object); if (_Object$getOwnPropertySymbols) { var symbols = _Object$getOwnPropertySymbols(object); if (enumerableOnly) { symbols = _filterInstanceProperty(symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor(object, sym).enumerable; }); } keys.push.apply(keys, symbols); } return keys; }
+function ownKeys$4(object, enumerableOnly) { var keys = _Object$keys(object); if (_Object$getOwnPropertySymbols) { var symbols = _Object$getOwnPropertySymbols(object); enumerableOnly && (symbols = _filterInstanceProperty(symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor(object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
-function _objectSpread$3(target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i] != null ? arguments[i] : {}; if (i % 2) { var _context3; _forEachInstanceProperty(_context3 = ownKeys$3(Object(source), true)).call(_context3, function (key) { _defineProperty(target, key, source[key]); }); } else if (_Object$getOwnPropertyDescriptors) { _Object$defineProperties(target, _Object$getOwnPropertyDescriptors(source)); } else { var _context4; _forEachInstanceProperty(_context4 = ownKeys$3(Object(source))).call(_context4, function (key) { _Object$defineProperty(target, key, _Object$getOwnPropertyDescriptor(source, key)); }); } } return target; }
+function _objectSpread$4(target) { for (var i = 1; i < arguments.length; i++) { var _context3, _context4; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty(_context3 = ownKeys$4(Object(source), !0)).call(_context3, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors ? _Object$defineProperties(target, _Object$getOwnPropertyDescriptors(source)) : _forEachInstanceProperty(_context4 = ownKeys$4(Object(source))).call(_context4, function (key) { _Object$defineProperty(target, key, _Object$getOwnPropertyDescriptor(source, key)); }); } return target; }
 var identityStoreEnhancer = function identityStoreEnhancer(noop) {
   return noop;
@@ -443,7 +444,7 @@ var mergeObjectValues = function mergeObjectValues(object) {
     var _ref2 = _slicedToArray(_ref, 2),
         value = _ref2[1];
-    return _objectSpread$3(_objectSpread$3({}, acc), value);
+    return _objectSpread$4(_objectSpread$4({}, acc), value);
   }, {});
 };
@@ -488,7 +489,7 @@ var createInternalReducer = function createInternalReducer() {
   }); // NOTE: since we don't know in advance which reducers will be injected,
   // we pass an `unknown` type to express this uncertainty and make the compiler happy.
-  return combineReducers(_objectSpread$3(_objectSpread$3({
+  return combineReducers(_objectSpread$4(_objectSpread$4({
     requestsInFlight: requestsInFlightReducer,
     notifications: reducer
   }, injectedReducers), preloadedStateReducers));
@@ -531,9 +532,9 @@ var createReduxStore = function createReduxStore() {
 };
 var internalReduxStore = createReduxStore();
-function ownKeys$2(object, enumerableOnly) { var keys = _Object$keys(object); if (_Object$getOwnPropertySymbols) { var symbols = _Object$getOwnPropertySymbols(object); if (enumerableOnly) { symbols = _filterInstanceProperty(symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor(object, sym).enumerable; }); } keys.push.apply(keys, symbols); } return keys; }
+function ownKeys$3(object, enumerableOnly) { var keys = _Object$keys(object); if (_Object$getOwnPropertySymbols) { var symbols = _Object$getOwnPropertySymbols(object); enumerableOnly && (symbols = _filterInstanceProperty(symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor(object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
-function _objectSpread$2(target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i] != null ? arguments[i] : {}; if (i % 2) { var _context2; _forEachInstanceProperty(_context2 = ownKeys$2(Object(source), true)).call(_context2, function (key) { _defineProperty(target, key, source[key]); }); } else if (_Object$getOwnPropertyDescriptors) { _Object$defineProperties(target, _Object$getOwnPropertyDescriptors(source)); } else { var _context3; _forEachInstanceProperty(_context3 = ownKeys$2(Object(source))).call(_context3, function (key) { _Object$defineProperty(target, key, _Object$getOwnPropertyDescriptor(source, key)); }); } } return target; }
+function _objectSpread$3(target) { for (var i = 1; i < arguments.length; i++) { var _context2, _context3; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty(_context2 = ownKeys$3(Object(source), !0)).call(_context2, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors ? _Object$defineProperties(target, _Object$getOwnPropertyDescriptors(source)) : _forEachInstanceProperty(_context3 = ownKeys$3(Object(source))).call(_context3, function (key) { _Object$defineProperty(target, key, _Object$getOwnPropertyDescriptor(source, key)); }); } return target; }
 var getSkipTokenRetry = function getSkipTokenRetry(context) {
   var skipTokenRetry = Boolean(context.skipTokenRetry);
@@ -541,7 +542,7 @@ var getSkipTokenRetry = function getSkipTokenRetry(context) {
 };
 var forwardTokenRetryHeader = function forwardTokenRetryHeader(headers) {
-  return _objectSpread$2(_objectSpread$2({}, headers), {}, _defineProperty({}, SUPPORTED_HEADERS.X_TOKEN_RETRY, 'true'));
+  return _objectSpread$3(_objectSpread$3({}, headers), {}, _defineProperty({}, SUPPORTED_HEADERS.X_TOKEN_RETRY, 'true'));
 }; // This link retries requests to the CTP API that have been rejected
 // because of an invalid/expired oauth token.
 // To do so, we resend the request with the header "X-Force-Token: true"
@@ -632,9 +633,9 @@ var errorLink = onError(function (_ref) {
   return;
 });
-function ownKeys$1(object, enumerableOnly) { var keys = _Object$keys(object); if (_Object$getOwnPropertySymbols) { var symbols = _Object$getOwnPropertySymbols(object); if (enumerableOnly) { symbols = _filterInstanceProperty(symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor(object, sym).enumerable; }); } keys.push.apply(keys, symbols); } return keys; }
+function ownKeys$2(object, enumerableOnly) { var keys = _Object$keys(object); if (_Object$getOwnPropertySymbols) { var symbols = _Object$getOwnPropertySymbols(object); enumerableOnly && (symbols = _filterInstanceProperty(symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor(object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
-function _objectSpread$1(target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i] != null ? arguments[i] : {}; if (i % 2) { var _context5; _forEachInstanceProperty(_context5 = ownKeys$1(Object(source), true)).call(_context5, function (key) { _defineProperty(target, key, source[key]); }); } else if (_Object$getOwnPropertyDescriptors) { _Object$defineProperties(target, _Object$getOwnPropertyDescriptors(source)); } else { var _context6; _forEachInstanceProperty(_context6 = ownKeys$1(Object(source))).call(_context6, function (key) { _Object$defineProperty(target, key, _Object$getOwnPropertyDescriptor(source, key)); }); } } return target; }
+function _objectSpread$2(target) { for (var i = 1; i < arguments.length; i++) { var _context5, _context6; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty(_context5 = ownKeys$2(Object(source), !0)).call(_context5, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors ? _Object$defineProperties(target, _Object$getOwnPropertyDescriptors(source)) : _forEachInstanceProperty(_context6 = ownKeys$2(Object(source))).call(_context6, function (key) { _Object$defineProperty(target, key, _Object$getOwnPropertyDescriptor(source, key)); }); } return target; }
 var isKnownGraphQlTarget = function isKnownGraphQlTarget(target) {
   var _context;
@@ -646,12 +647,12 @@ var getAppliedForwardToHeaders = function getAppliedForwardToHeaders(apolloConte
   if (apolloContext.forwardToConfig) {
     var _context2, _apolloContext$forwar, _objectSpread3;
-    return _objectSpread$1(_objectSpread$1({}, _reduceInstanceProperty(_context2 = _Object$entries((_apolloContext$forwar = apolloContext.forwardToConfig.headers) !== null && _apolloContext$forwar !== void 0 ? _apolloContext$forwar : {})).call(_context2, function (customForwardHeaders, _ref) {
+    return _objectSpread$2(_objectSpread$2({}, _reduceInstanceProperty(_context2 = _Object$entries((_apolloContext$forwar = apolloContext.forwardToConfig.headers) !== null && _apolloContext$forwar !== void 0 ? _apolloContext$forwar : {})).call(_context2, function (customForwardHeaders, _ref) {
       var _ref2 = _slicedToArray(_ref, 2),
           headerName = _ref2[0],
           headerValue = _ref2[1];
-      return _objectSpread$1(_objectSpread$1({}, customForwardHeaders), {}, _defineProperty({}, "x-forward-header-".concat(headerName), headerValue));
+      return _objectSpread$2(_objectSpread$2({}, customForwardHeaders), {}, _defineProperty({}, "x-forward-header-".concat(headerName), headerValue));
     }, {})), {}, (_objectSpread3 = {}, _defineProperty(_objectSpread3, SUPPORTED_HEADERS.ACCEPT_VERSION, apolloContext.forwardToConfig.version), _defineProperty(_objectSpread3, SUPPORTED_HEADERS.X_FORWARD_TO, apolloContext.forwardToConfig.uri), _objectSpread3));
   }
@@ -684,7 +685,7 @@ var headerLink = new ApolloLink(function (operation, forward) {
   var sessionToken = getSessionToken();
   operation.setContext({
     credentials: 'include',
-    headers: omitEmpty(_objectSpread$1(_objectSpread$1({}, apolloContext.headers), {}, (_objectSpread4 = {}, _defineProperty(_objectSpread4, SUPPORTED_HEADERS.AUTHORIZATION, sessionToken ? "Bearer ".concat(sessionToken) : undefined), _defineProperty(_objectSpread4, SUPPORTED_HEADERS.X_PROJECT_KEY, projectKey), _defineProperty(_objectSpread4, SUPPORTED_HEADERS.X_CORRELATION_ID, getCorrelationId({
+    headers: omitEmpty(_objectSpread$2(_objectSpread$2({}, apolloContext.headers), {}, (_objectSpread4 = {}, _defineProperty(_objectSpread4, SUPPORTED_HEADERS.AUTHORIZATION, sessionToken ? "Bearer ".concat(sessionToken) : undefined), _defineProperty(_objectSpread4, SUPPORTED_HEADERS.X_PROJECT_KEY, projectKey), _defineProperty(_objectSpread4, SUPPORTED_HEADERS.X_CORRELATION_ID, getCorrelationId({
       userId: userId
     })), _defineProperty(_objectSpread4, SUPPORTED_HEADERS.X_GRAPHQL_TARGET, graphQlTarget), _defineProperty(_objectSpread4, SUPPORTED_HEADERS.X_GRAPHQL_OPERATION_NAME, operation.operationName), _defineProperty(_objectSpread4, SUPPORTED_HEADERS.X_TEAM_ID, teamId), _defineProperty(_objectSpread4, SUPPORTED_HEADERS.X_APPLICATION_ID, window.app.applicationId), _defineProperty(_objectSpread4, SUPPORTED_HEADERS.X_FEATURE_FLAG, featureFlag), _objectSpread4), getAppliedForwardToHeaders(apolloContext)))
   });
@@ -722,9 +723,9 @@ var tokenRetryLink = new RetryLink({
 var _context;
-function ownKeys(object, enumerableOnly) { var keys = _Object$keys(object); if (_Object$getOwnPropertySymbols) { var symbols = _Object$getOwnPropertySymbols(object); if (enumerableOnly) { symbols = _filterInstanceProperty(symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor(object, sym).enumerable; }); } keys.push.apply(keys, symbols); } return keys; }
+function ownKeys$1(object, enumerableOnly) { var keys = _Object$keys(object); if (_Object$getOwnPropertySymbols) { var symbols = _Object$getOwnPropertySymbols(object); enumerableOnly && (symbols = _filterInstanceProperty(symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor(object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
-function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i] != null ? arguments[i] : {}; if (i % 2) { var _context4; _forEachInstanceProperty(_context4 = ownKeys(Object(source), true)).call(_context4, function (key) { _defineProperty(target, key, source[key]); }); } else if (_Object$getOwnPropertyDescriptors) { _Object$defineProperties(target, _Object$getOwnPropertyDescriptors(source)); } else { var _context5; _forEachInstanceProperty(_context5 = ownKeys(Object(source))).call(_context5, function (key) { _Object$defineProperty(target, key, _Object$getOwnPropertyDescriptor(source, key)); }); } } return target; }
+function _objectSpread$1(target) { for (var i = 1; i < arguments.length; i++) { var _context4, _context5; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty(_context4 = ownKeys$1(Object(source), !0)).call(_context4, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors ? _Object$defineProperties(target, _Object$getOwnPropertyDescriptors(source)) : _forEachInstanceProperty(_context5 = ownKeys$1(Object(source))).call(_context5, function (key) { _Object$defineProperty(target, key, _Object$getOwnPropertyDescriptor(source, key)); }); } return target; }
 var userAgent = createHttpUserAgent({
   name: 'apollo-client',
   // version: apolloVersion,
@@ -787,9 +788,9 @@ var createApolloClient = function createApolloClient() {
   return new ApolloClient({
     link: link,
     // https://www.apollographql.com/docs/react/caching/cache-configuration/
-    cache: new InMemoryCache(_objectSpread(_objectSpread({}, customCacheConfig), {}, {
+    cache: new InMemoryCache(_objectSpread$1(_objectSpread$1({}, customCacheConfig), {}, {
       // https://www.apollographql.com/docs/react/caching/cache-configuration/#generating-unique-identifiers
-      typePolicies: _objectSpread({
+      typePolicies: _objectSpread$1({
         // CTP types with `key` as identifier
         Project: {
           keyFields: ['key']
@@ -888,6 +889,48 @@ var RouteCatchAll = function RouteCatchAll() {
   });
 };
+function ownKeys(object, enumerableOnly) { var keys = _Object$keys(object); if (_Object$getOwnPropertySymbols) { var symbols = _Object$getOwnPropertySymbols(object); enumerableOnly && (symbols = _filterInstanceProperty(symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor(object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
+function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var _context, _context2; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty(_context = ownKeys(Object(source), !0)).call(_context, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors ? _Object$defineProperties(target, _Object$getOwnPropertyDescriptors(source)) : _forEachInstanceProperty(_context2 = ownKeys(Object(source))).call(_context2, function (key) { _Object$defineProperty(target, key, _Object$getOwnPropertyDescriptor(source, key)); }); } return target; }
+var ApplicationRouteWithPermissionCheck = function ApplicationRouteWithPermissionCheck(props) {
+  var permissionKeys = entryPointUriPathToPermissionKeys(props.environment.entryPointUriPath); // Require View permission to render the application.
+  var canView = useIsAuthorized({
+    demandedPermissions: [permissionKeys.View]
+  });
+  if (canView) {
+    return jsx(Fragment, {
+      children: Children.only(props.children)
+    });
+  }
+  return jsx(PageUnauthorized, {});
+};
+ApplicationRouteWithPermissionCheck.propTypes = process.env.NODE_ENV !== "production" ? {
+  disableRoutePermissionCheck: _pt.bool,
+  render: _pt.func,
+  children: _pt.node
+} : {};
+var ApplicationRoute = function ApplicationRoute(props) {
+  if (props.disableRoutePermissionCheck) {
+    return jsx(Fragment, {
+      children: Children.only(props.children)
+    });
+  }
+  return jsx(ApplicationRouteWithPermissionCheck, _objectSpread({}, props));
+};
+ApplicationRoute.propTypes = process.env.NODE_ENV !== "production" ? {
+  disableRoutePermissionCheck: _pt.bool,
+  render: _pt.func,
+  children: _pt.node
+} : {};
 var ApplicationEntryPoint = function ApplicationEntryPoint(props) {
   // If the `children` prop is used (instead of the `render` prop),
   // we pre-configure the application entry point routes to avoid
@@ -903,7 +946,7 @@ var ApplicationEntryPoint = function ApplicationEntryPoint(props) {
         to: "/:projectKey/".concat(entryPointUriPath)
       }), jsx(Route, {
         path: "/:projectKey/".concat(entryPointUriPath),
-        children: Children.only(props.children)
+        children: jsx(ApplicationRoute, _objectSpread({}, props))
       }), jsx(RouteCatchAll, {})]
     });
   } // We still support the `render` prop, for backwards compatibility
@@ -922,6 +965,7 @@ var ApplicationEntryPoint = function ApplicationEntryPoint(props) {
 };
 ApplicationEntryPoint.propTypes = process.env.NODE_ENV !== "production" ? {
+  disableRoutePermissionCheck: _pt.bool,
   render: _pt.func,
   children: _pt.node
 } : {};