@commercetools-frontend/application-shell 21.0.0-rc.1 → 21.0.0-rc.6

package/README.md

@@ -4,4 +4,4 @@
   <a href="https://www.npmjs.com/package/@commercetools-frontend/application-shell"><img src="https://badgen.net/npm/v/@commercetools-frontend/application-shell" alt="Latest release (latest dist-tag)" /></a> <a href="https://www.npmjs.com/package/@commercetools-frontend/application-shell"><img src="https://badgen.net/npm/v/@commercetools-frontend/application-shell/next" alt="Latest release (next dist-tag)" /></a> <a href="https://bundlephobia.com/result?p=@commercetools-frontend/application-shell"><img src="https://badgen.net/bundlephobia/minzip/@commercetools-frontend/application-shell" alt="Minified + GZipped size" /></a> <a href="https://github.com/commercetools/merchant-center-application-kit/blob/main/LICENSE"><img src="https://badgen.net/github/license/commercetools/merchant-center-application-kit" alt="GitHub license" /></a>
 </p>
 
-Check out the [documentation](https://docs.commercetools.com/custom-applications/components/application-shell) for more information.
+Check out the [documentation](https://docs.commercetools.com/custom-applications/api-reference/commercetools-frontend-application-shell) for more information.

package/dist/{application-entry-point-58093e24.cjs.dev.js → application-entry-point-2c4677cb.cjs.dev.js}

@@ -22,7 +22,7 @@ var omitEmpty = require('omit-empty-es');
 var notifications = require('@commercetools-frontend/notifications');
 var sdk = require('@commercetools-frontend/sdk');
 var constants = require('@commercetools-frontend/constants');
-var constants$1 = require('./constants-fdbe0e9d.cjs.dev.js');
+var formatters = require('./formatters-e4b9b9dc.cjs.dev.js');
 var reactNotifications = require('@commercetools-frontend/react-notifications');
 var _startsWithInstanceProperty = require('@babel/runtime-corejs3/core-js-stable/instance/starts-with');
 var _includesInstanceProperty = require('@babel/runtime-corejs3/core-js-stable/instance/includes');
@@ -57,6 +57,7 @@ var _pt = require('prop-types');
 var react = require('react');
 var reactRouterDom = require('react-router-dom');
 var invariant = require('tiny-invariant');
+var permissions = require('@commercetools-frontend/permissions');
 var applicationComponents = require('@commercetools-frontend/application-components');
 var applicationShellConnectors = require('@commercetools-frontend/application-shell-connectors');
 
@@ -100,7 +101,7 @@ var _pt__default = /*#__PURE__*/_interopDefault(_pt);
 var invariant__default = /*#__PURE__*/_interopDefault(invariant);
 
 // NOTE: This string will be replaced on build time with the package version.
-var version = "21.0.0-rc.1";
+var version = "21.0.0-rc.6";
 
 var isAddNotificationErrorAction = function isAddNotificationErrorAction(action) {
   var errorAction = action;
@@ -228,9 +229,9 @@ var messages = reactIntl.defineMessages({
   }
 });
 
-function ownKeys$4(object, enumerableOnly) { var keys = _Object$keys__default["default"](object); if (_Object$getOwnPropertySymbols__default["default"]) { var symbols = _Object$getOwnPropertySymbols__default["default"](object); enumerableOnly && (symbols = _filterInstanceProperty__default["default"](symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor__default["default"](object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
+function ownKeys$5(object, enumerableOnly) { var keys = _Object$keys__default["default"](object); if (_Object$getOwnPropertySymbols__default["default"]) { var symbols = _Object$getOwnPropertySymbols__default["default"](object); enumerableOnly && (symbols = _filterInstanceProperty__default["default"](symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor__default["default"](object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
 
-function _objectSpread$4(target) { for (var i = 1; i < arguments.length; i++) { var _context, _context2; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty__default["default"](_context = ownKeys$4(Object(source), !0)).call(_context, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors__default["default"] ? _Object$defineProperties__default["default"](target, _Object$getOwnPropertyDescriptors__default["default"](source)) : _forEachInstanceProperty__default["default"](_context2 = ownKeys$4(Object(source))).call(_context2, function (key) { _Object$defineProperty__default["default"](target, key, _Object$getOwnPropertyDescriptor__default["default"](source, key)); }); } return target; }
+function _objectSpread$5(target) { for (var i = 1; i < arguments.length; i++) { var _context, _context2; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty__default["default"](_context = ownKeys$5(Object(source), !0)).call(_context, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors__default["default"] ? _Object$defineProperties__default["default"](target, _Object$getOwnPropertyDescriptors__default["default"](source)) : _forEachInstanceProperty__default["default"](_context2 = ownKeys$5(Object(source))).call(_context2, function (key) { _Object$defineProperty__default["default"](target, key, _Object$getOwnPropertyDescriptor__default["default"](source, key)); }); } return target; }
 
 var getPortalContainer = function getPortalContainer() {
   return process.env.NODE_ENV === 'test' ? document.body : document.querySelector("#".concat(REQUESTS_IN_FLIGHT_LOADER_DOM_ID));
@@ -242,7 +243,7 @@ var RequestsInFlightLoader = function RequestsInFlightLoader() {
   });
   if (!hasRequestsInFlight) return null;
   return /*#__PURE__*/ReactDOM__default["default"].createPortal(jsxRuntime.jsx(LoadingSpinner__default["default"], {
-    children: jsxRuntime.jsx(reactIntl.FormattedMessage, _objectSpread$4({}, messages.labelLoading))
+    children: jsxRuntime.jsx(reactIntl.FormattedMessage, _objectSpread$5({}, messages.labelLoading))
   }), getPortalContainer());
 };
 
@@ -284,7 +285,7 @@ var requestsInFlightReducer = (function (requestsInFlight, action) {
 });
 
 function selectTeamIdFromLocalStorage() {
-  return window.localStorage.getItem(constants$1.STORAGE_KEYS.ACTIVE_TEAM_ID) || undefined;
+  return window.localStorage.getItem(formatters.STORAGE_KEYS.ACTIVE_TEAM_ID) || undefined;
 }
 
 var staticUrlPathsInPositionOfProjectKey = ['login', 'logout', 'account']; // Attempt to extract the `:projectKey` from the URL.
@@ -397,47 +398,47 @@ function getMcApiUrl() {
 }
 
 var getSessionToken = function getSessionToken() {
-  return window.sessionStorage.getItem(constants$1.STORAGE_KEYS.SESSION_TOKEN);
+  return window.sessionStorage.getItem(formatters.STORAGE_KEYS.SESSION_TOKEN);
 };
 
 var setActiveSession = function setActiveSession(sessionToken) {
   if (!sessionToken) return;
-  window.sessionStorage.setItem(constants$1.STORAGE_KEYS.SESSION_TOKEN, sessionToken !== null && sessionToken !== void 0 ? sessionToken : '');
-  window.localStorage.setItem(constants$1.STORAGE_KEYS.LOGIN_STRATEGY, constants$1.LOGIN_STRATEGY_OIDC); // Remove flag for original workflow
+  window.sessionStorage.setItem(formatters.STORAGE_KEYS.SESSION_TOKEN, sessionToken !== null && sessionToken !== void 0 ? sessionToken : '');
+  window.localStorage.setItem(formatters.STORAGE_KEYS.LOGIN_STRATEGY, formatters.LOGIN_STRATEGY_OIDC); // Remove flag for original workflow
 
-  window.localStorage.removeItem(constants$1.STORAGE_KEYS.IS_AUTHENTICATED);
+  window.localStorage.removeItem(formatters.STORAGE_KEYS.IS_AUTHENTICATED);
 };
 
 var clearSession = function clearSession() {
-  window.sessionStorage.removeItem(constants$1.STORAGE_KEYS.SESSION_TOKEN);
-  window.sessionStorage.removeItem(constants$1.STORAGE_KEYS.SESSION_SCOPE);
-  window.sessionStorage.removeItem(constants$1.STORAGE_KEYS.IS_AUTHENTICATED);
+  window.sessionStorage.removeItem(formatters.STORAGE_KEYS.SESSION_TOKEN);
+  window.sessionStorage.removeItem(formatters.STORAGE_KEYS.SESSION_SCOPE);
+  window.sessionStorage.removeItem(formatters.STORAGE_KEYS.IS_AUTHENTICATED);
 };
 
 var getActiveProjectKey = function getActiveProjectKey() {
-  return window.localStorage.getItem(constants$1.STORAGE_KEYS.ACTIVE_PROJECT_KEY);
+  return window.localStorage.getItem(formatters.STORAGE_KEYS.ACTIVE_PROJECT_KEY);
 };
 
 var removeActiveProjectKey = function removeActiveProjectKey() {
-  window.localStorage.removeItem(constants$1.STORAGE_KEYS.ACTIVE_PROJECT_KEY);
+  window.localStorage.removeItem(formatters.STORAGE_KEYS.ACTIVE_PROJECT_KEY);
 };
 
 var setActiveProjectKey = function setActiveProjectKey(projectKey) {
-  window.localStorage.setItem(constants$1.STORAGE_KEYS.ACTIVE_PROJECT_KEY, projectKey);
+  window.localStorage.setItem(formatters.STORAGE_KEYS.ACTIVE_PROJECT_KEY, projectKey);
 };
 
 var getSessionScope = function getSessionScope() {
-  return window.sessionStorage.getItem(constants$1.STORAGE_KEYS.SESSION_SCOPE);
+  return window.sessionStorage.getItem(formatters.STORAGE_KEYS.SESSION_SCOPE);
 };
 
 var setSessionScope = function setSessionScope(scope) {
-  window.sessionStorage.setItem(constants$1.STORAGE_KEYS.SESSION_SCOPE, scope);
+  window.sessionStorage.setItem(formatters.STORAGE_KEYS.SESSION_SCOPE, scope);
 };
 
 var getSessionState = function getSessionState(stateId) {
   var _context;
 
-  var sessionStateKey = _concatInstanceProperty__default["default"](_context = "".concat(constants$1.STORAGE_KEYS.NONCE, "_")).call(_context, stateId);
+  var sessionStateKey = _concatInstanceProperty__default["default"](_context = "".concat(formatters.STORAGE_KEYS.NONCE, "_")).call(_context, stateId);
 
   var unparsedSessionState = window.sessionStorage.getItem(sessionStateKey);
 
@@ -464,14 +465,14 @@ var getSessionState = function getSessionState(stateId) {
 var setSessionState = function setSessionState(stateId, state) {
   var _context3;
 
-  var sessionStateKey = _concatInstanceProperty__default["default"](_context3 = "".concat(constants$1.STORAGE_KEYS.NONCE, "_")).call(_context3, stateId);
+  var sessionStateKey = _concatInstanceProperty__default["default"](_context3 = "".concat(formatters.STORAGE_KEYS.NONCE, "_")).call(_context3, stateId);
 
   window.sessionStorage.setItem(sessionStateKey, _JSON$stringify__default["default"](state));
 };
 
-function ownKeys$3(object, enumerableOnly) { var keys = _Object$keys__default["default"](object); if (_Object$getOwnPropertySymbols__default["default"]) { var symbols = _Object$getOwnPropertySymbols__default["default"](object); enumerableOnly && (symbols = _filterInstanceProperty__default["default"](symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor__default["default"](object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
+function ownKeys$4(object, enumerableOnly) { var keys = _Object$keys__default["default"](object); if (_Object$getOwnPropertySymbols__default["default"]) { var symbols = _Object$getOwnPropertySymbols__default["default"](object); enumerableOnly && (symbols = _filterInstanceProperty__default["default"](symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor__default["default"](object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
 
-function _objectSpread$3(target) { for (var i = 1; i < arguments.length; i++) { var _context3, _context4; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty__default["default"](_context3 = ownKeys$3(Object(source), !0)).call(_context3, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors__default["default"] ? _Object$defineProperties__default["default"](target, _Object$getOwnPropertyDescriptors__default["default"](source)) : _forEachInstanceProperty__default["default"](_context4 = ownKeys$3(Object(source))).call(_context4, function (key) { _Object$defineProperty__default["default"](target, key, _Object$getOwnPropertyDescriptor__default["default"](source, key)); }); } return target; }
+function _objectSpread$4(target) { for (var i = 1; i < arguments.length; i++) { var _context3, _context4; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty__default["default"](_context3 = ownKeys$4(Object(source), !0)).call(_context3, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors__default["default"] ? _Object$defineProperties__default["default"](target, _Object$getOwnPropertyDescriptors__default["default"](source)) : _forEachInstanceProperty__default["default"](_context4 = ownKeys$4(Object(source))).call(_context4, function (key) { _Object$defineProperty__default["default"](target, key, _Object$getOwnPropertyDescriptor__default["default"](source, key)); }); } return target; }
 
 var identityStoreEnhancer = function identityStoreEnhancer(noop) {
   return noop;
@@ -484,7 +485,7 @@ var mergeObjectValues = function mergeObjectValues(object) {
     var _ref2 = _slicedToArray(_ref, 2),
         value = _ref2[1];
 
-    return _objectSpread$3(_objectSpread$3({}, acc), value);
+    return _objectSpread$4(_objectSpread$4({}, acc), value);
   }, {});
 };
 
@@ -498,7 +499,7 @@ var getAdditionalHeaders = function getAdditionalHeaders() {
   var _omitEmpty;
 
   var sessionToken = getSessionToken();
-  return omitEmpty__default["default"]((_omitEmpty = {}, _defineProperty(_omitEmpty, constants$1.SUPPORTED_HEADERS.AUTHORIZATION, sessionToken ? "Bearer ".concat(sessionToken) : undefined), _defineProperty(_omitEmpty, constants$1.SUPPORTED_HEADERS.X_APPLICATION_ID, window.app.applicationId), _defineProperty(_omitEmpty, constants$1.SUPPORTED_HEADERS.X_TEAM_ID, selectTeamIdFromLocalStorage()), _omitEmpty));
+  return omitEmpty__default["default"]((_omitEmpty = {}, _defineProperty(_omitEmpty, formatters.SUPPORTED_HEADERS.AUTHORIZATION, sessionToken ? "Bearer ".concat(sessionToken) : undefined), _defineProperty(_omitEmpty, formatters.SUPPORTED_HEADERS.X_APPLICATION_ID, window.app.applicationId), _defineProperty(_omitEmpty, formatters.SUPPORTED_HEADERS.X_TEAM_ID, selectTeamIdFromLocalStorage()), _omitEmpty));
 };
 
 var sdkMiddleware = sdk.createMiddleware({
@@ -529,7 +530,7 @@ var createInternalReducer = function createInternalReducer() {
   }); // NOTE: since we don't know in advance which reducers will be injected,
   // we pass an `unknown` type to express this uncertainty and make the compiler happy.
 
-  return redux.combineReducers(_objectSpread$3(_objectSpread$3({
+  return redux.combineReducers(_objectSpread$4(_objectSpread$4({
     requestsInFlight: requestsInFlightReducer,
     notifications: notifications.reducer
   }, injectedReducers), preloadedStateReducers));
@@ -572,9 +573,9 @@ var createReduxStore = function createReduxStore() {
 };
 var internalReduxStore = createReduxStore();
 
-function ownKeys$2(object, enumerableOnly) { var keys = _Object$keys__default["default"](object); if (_Object$getOwnPropertySymbols__default["default"]) { var symbols = _Object$getOwnPropertySymbols__default["default"](object); enumerableOnly && (symbols = _filterInstanceProperty__default["default"](symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor__default["default"](object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
+function ownKeys$3(object, enumerableOnly) { var keys = _Object$keys__default["default"](object); if (_Object$getOwnPropertySymbols__default["default"]) { var symbols = _Object$getOwnPropertySymbols__default["default"](object); enumerableOnly && (symbols = _filterInstanceProperty__default["default"](symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor__default["default"](object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
 
-function _objectSpread$2(target) { for (var i = 1; i < arguments.length; i++) { var _context2, _context3; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty__default["default"](_context2 = ownKeys$2(Object(source), !0)).call(_context2, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors__default["default"] ? _Object$defineProperties__default["default"](target, _Object$getOwnPropertyDescriptors__default["default"](source)) : _forEachInstanceProperty__default["default"](_context3 = ownKeys$2(Object(source))).call(_context3, function (key) { _Object$defineProperty__default["default"](target, key, _Object$getOwnPropertyDescriptor__default["default"](source, key)); }); } return target; }
+function _objectSpread$3(target) { for (var i = 1; i < arguments.length; i++) { var _context2, _context3; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty__default["default"](_context2 = ownKeys$3(Object(source), !0)).call(_context2, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors__default["default"] ? _Object$defineProperties__default["default"](target, _Object$getOwnPropertyDescriptors__default["default"](source)) : _forEachInstanceProperty__default["default"](_context3 = ownKeys$3(Object(source))).call(_context3, function (key) { _Object$defineProperty__default["default"](target, key, _Object$getOwnPropertyDescriptor__default["default"](source, key)); }); } return target; }
 
 var getSkipTokenRetry = function getSkipTokenRetry(context) {
   var skipTokenRetry = Boolean(context.skipTokenRetry);
@@ -582,7 +583,7 @@ var getSkipTokenRetry = function getSkipTokenRetry(context) {
 };
 
 var forwardTokenRetryHeader = function forwardTokenRetryHeader(headers) {
-  return _objectSpread$2(_objectSpread$2({}, headers), {}, _defineProperty({}, constants$1.SUPPORTED_HEADERS.X_TOKEN_RETRY, 'true'));
+  return _objectSpread$3(_objectSpread$3({}, headers), {}, _defineProperty({}, formatters.SUPPORTED_HEADERS.X_TOKEN_RETRY, 'true'));
 }; // This link retries requests to the CTP API that have been rejected
 // because of an invalid/expired oauth token.
 // To do so, we resend the request with the header "X-Force-Token: true"
@@ -593,7 +594,7 @@ var forwardTokenRetryHeader = function forwardTokenRetryHeader(headers) {
 var getDoesGraphQLTargetSupportTokenRetry = function getDoesGraphQLTargetSupportTokenRetry(context) {
   var _context$headers, _context$headers2, _context;
 
-  var graphQLTarget = ((_context$headers = context.headers) === null || _context$headers === void 0 ? void 0 : _context$headers[constants$1.SUPPORTED_HEADERS.X_GRAPHQL_TARGET]) || ((_context$headers2 = context.headers) === null || _context$headers2 === void 0 ? void 0 : _context$headers2[constants$1.SUPPORTED_HEADERS.X_GRAPHQL_TARGET.toLowerCase()]);
+  var graphQLTarget = ((_context$headers = context.headers) === null || _context$headers === void 0 ? void 0 : _context$headers[formatters.SUPPORTED_HEADERS.X_GRAPHQL_TARGET]) || ((_context$headers2 = context.headers) === null || _context$headers2 === void 0 ? void 0 : _context$headers2[formatters.SUPPORTED_HEADERS.X_GRAPHQL_TARGET.toLowerCase()]);
   return Boolean(graphQLTarget && _includesInstanceProperty__default["default"](_context = [constants.GRAPHQL_TARGETS.COMMERCETOOLS_PLATFORM, constants.GRAPHQL_TARGETS.ADMINISTRATION_SERVICE, constants.GRAPHQL_TARGETS.SETTINGS_SERVICE, constants.GRAPHQL_TARGETS.MERCHANT_CENTER_BACKEND]).call(_context, graphQLTarget));
 };
 
@@ -673,9 +674,9 @@ var errorLink = error.onError(function (_ref) {
   return;
 });
 
-function ownKeys$1(object, enumerableOnly) { var keys = _Object$keys__default["default"](object); if (_Object$getOwnPropertySymbols__default["default"]) { var symbols = _Object$getOwnPropertySymbols__default["default"](object); enumerableOnly && (symbols = _filterInstanceProperty__default["default"](symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor__default["default"](object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
+function ownKeys$2(object, enumerableOnly) { var keys = _Object$keys__default["default"](object); if (_Object$getOwnPropertySymbols__default["default"]) { var symbols = _Object$getOwnPropertySymbols__default["default"](object); enumerableOnly && (symbols = _filterInstanceProperty__default["default"](symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor__default["default"](object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
 
-function _objectSpread$1(target) { for (var i = 1; i < arguments.length; i++) { var _context5, _context6; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty__default["default"](_context5 = ownKeys$1(Object(source), !0)).call(_context5, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors__default["default"] ? _Object$defineProperties__default["default"](target, _Object$getOwnPropertyDescriptors__default["default"](source)) : _forEachInstanceProperty__default["default"](_context6 = ownKeys$1(Object(source))).call(_context6, function (key) { _Object$defineProperty__default["default"](target, key, _Object$getOwnPropertyDescriptor__default["default"](source, key)); }); } return target; }
+function _objectSpread$2(target) { for (var i = 1; i < arguments.length; i++) { var _context5, _context6; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty__default["default"](_context5 = ownKeys$2(Object(source), !0)).call(_context5, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors__default["default"] ? _Object$defineProperties__default["default"](target, _Object$getOwnPropertyDescriptors__default["default"](source)) : _forEachInstanceProperty__default["default"](_context6 = ownKeys$2(Object(source))).call(_context6, function (key) { _Object$defineProperty__default["default"](target, key, _Object$getOwnPropertyDescriptor__default["default"](source, key)); }); } return target; }
 
 var isKnownGraphQlTarget = function isKnownGraphQlTarget(target) {
   var _context;
@@ -687,13 +688,13 @@ var getAppliedForwardToHeaders = function getAppliedForwardToHeaders(apolloConte
   if (apolloContext.forwardToConfig) {
     var _context2, _apolloContext$forwar, _objectSpread3;
 
-    return _objectSpread$1(_objectSpread$1({}, _reduceInstanceProperty__default["default"](_context2 = _Object$entries__default["default"]((_apolloContext$forwar = apolloContext.forwardToConfig.headers) !== null && _apolloContext$forwar !== void 0 ? _apolloContext$forwar : {})).call(_context2, function (customForwardHeaders, _ref) {
+    return _objectSpread$2(_objectSpread$2({}, _reduceInstanceProperty__default["default"](_context2 = _Object$entries__default["default"]((_apolloContext$forwar = apolloContext.forwardToConfig.headers) !== null && _apolloContext$forwar !== void 0 ? _apolloContext$forwar : {})).call(_context2, function (customForwardHeaders, _ref) {
       var _ref2 = _slicedToArray(_ref, 2),
           headerName = _ref2[0],
           headerValue = _ref2[1];
 
-      return _objectSpread$1(_objectSpread$1({}, customForwardHeaders), {}, _defineProperty({}, "x-forward-header-".concat(headerName), headerValue));
-    }, {})), {}, (_objectSpread3 = {}, _defineProperty(_objectSpread3, constants$1.SUPPORTED_HEADERS.ACCEPT_VERSION, apolloContext.forwardToConfig.version), _defineProperty(_objectSpread3, constants$1.SUPPORTED_HEADERS.X_FORWARD_TO, apolloContext.forwardToConfig.uri), _objectSpread3));
+      return _objectSpread$2(_objectSpread$2({}, customForwardHeaders), {}, _defineProperty({}, "x-forward-header-".concat(headerName), headerValue));
+    }, {})), {}, (_objectSpread3 = {}, _defineProperty(_objectSpread3, formatters.SUPPORTED_HEADERS.ACCEPT_VERSION, apolloContext.forwardToConfig.version), _defineProperty(_objectSpread3, formatters.SUPPORTED_HEADERS.X_FORWARD_TO, apolloContext.forwardToConfig.uri), _objectSpread3));
   }
 
   return {};
@@ -725,9 +726,9 @@ var headerLink = new client.ApolloLink(function (operation, forward) {
   var sessionToken = getSessionToken();
   operation.setContext({
     credentials: 'include',
-    headers: omitEmpty__default["default"](_objectSpread$1(_objectSpread$1({}, apolloContext.headers), {}, (_objectSpread4 = {}, _defineProperty(_objectSpread4, constants$1.SUPPORTED_HEADERS.AUTHORIZATION, sessionToken ? "Bearer ".concat(sessionToken) : undefined), _defineProperty(_objectSpread4, constants$1.SUPPORTED_HEADERS.X_PROJECT_KEY, projectKey), _defineProperty(_objectSpread4, constants$1.SUPPORTED_HEADERS.X_CORRELATION_ID, getCorrelationId({
+    headers: omitEmpty__default["default"](_objectSpread$2(_objectSpread$2({}, apolloContext.headers), {}, (_objectSpread4 = {}, _defineProperty(_objectSpread4, formatters.SUPPORTED_HEADERS.AUTHORIZATION, sessionToken ? "Bearer ".concat(sessionToken) : undefined), _defineProperty(_objectSpread4, formatters.SUPPORTED_HEADERS.X_PROJECT_KEY, projectKey), _defineProperty(_objectSpread4, formatters.SUPPORTED_HEADERS.X_CORRELATION_ID, getCorrelationId({
       userId: userId
-    })), _defineProperty(_objectSpread4, constants$1.SUPPORTED_HEADERS.X_GRAPHQL_TARGET, graphQlTarget), _defineProperty(_objectSpread4, constants$1.SUPPORTED_HEADERS.X_GRAPHQL_OPERATION_NAME, operation.operationName), _defineProperty(_objectSpread4, constants$1.SUPPORTED_HEADERS.X_TEAM_ID, teamId), _defineProperty(_objectSpread4, constants$1.SUPPORTED_HEADERS.X_APPLICATION_ID, window.app.applicationId), _defineProperty(_objectSpread4, constants$1.SUPPORTED_HEADERS.X_FEATURE_FLAG, featureFlag), _objectSpread4), getAppliedForwardToHeaders(apolloContext)))
+    })), _defineProperty(_objectSpread4, formatters.SUPPORTED_HEADERS.X_GRAPHQL_TARGET, graphQlTarget), _defineProperty(_objectSpread4, formatters.SUPPORTED_HEADERS.X_GRAPHQL_OPERATION_NAME, operation.operationName), _defineProperty(_objectSpread4, formatters.SUPPORTED_HEADERS.X_TEAM_ID, teamId), _defineProperty(_objectSpread4, formatters.SUPPORTED_HEADERS.X_APPLICATION_ID, window.app.applicationId), _defineProperty(_objectSpread4, formatters.SUPPORTED_HEADERS.X_FEATURE_FLAG, featureFlag), _objectSpread4), getAppliedForwardToHeaders(apolloContext)))
   });
   return _mapInstanceProperty__default["default"](_context4 = forward(operation)).call(_context4, function (response) {
     var _context$response, _context$response$hea;
@@ -763,9 +764,9 @@ var tokenRetryLink = new retry.RetryLink({
 
 var _context;
 
-function ownKeys(object, enumerableOnly) { var keys = _Object$keys__default["default"](object); if (_Object$getOwnPropertySymbols__default["default"]) { var symbols = _Object$getOwnPropertySymbols__default["default"](object); enumerableOnly && (symbols = _filterInstanceProperty__default["default"](symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor__default["default"](object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
+function ownKeys$1(object, enumerableOnly) { var keys = _Object$keys__default["default"](object); if (_Object$getOwnPropertySymbols__default["default"]) { var symbols = _Object$getOwnPropertySymbols__default["default"](object); enumerableOnly && (symbols = _filterInstanceProperty__default["default"](symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor__default["default"](object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
 
-function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var _context4, _context5; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty__default["default"](_context4 = ownKeys(Object(source), !0)).call(_context4, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors__default["default"] ? _Object$defineProperties__default["default"](target, _Object$getOwnPropertyDescriptors__default["default"](source)) : _forEachInstanceProperty__default["default"](_context5 = ownKeys(Object(source))).call(_context5, function (key) { _Object$defineProperty__default["default"](target, key, _Object$getOwnPropertyDescriptor__default["default"](source, key)); }); } return target; }
+function _objectSpread$1(target) { for (var i = 1; i < arguments.length; i++) { var _context4, _context5; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty__default["default"](_context4 = ownKeys$1(Object(source), !0)).call(_context4, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors__default["default"] ? _Object$defineProperties__default["default"](target, _Object$getOwnPropertyDescriptors__default["default"](source)) : _forEachInstanceProperty__default["default"](_context5 = ownKeys$1(Object(source))).call(_context5, function (key) { _Object$defineProperty__default["default"](target, key, _Object$getOwnPropertyDescriptor__default["default"](source, key)); }); } return target; }
 var userAgent = createHttpUserAgent__default["default"]({
   name: 'apollo-client',
   // version: apolloVersion,
@@ -828,9 +829,9 @@ var createApolloClient = function createApolloClient() {
   return new client.ApolloClient({
     link: link,
     // https://www.apollographql.com/docs/react/caching/cache-configuration/
-    cache: new client.InMemoryCache(_objectSpread(_objectSpread({}, customCacheConfig), {}, {
+    cache: new client.InMemoryCache(_objectSpread$1(_objectSpread$1({}, customCacheConfig), {}, {
       // https://www.apollographql.com/docs/react/caching/cache-configuration/#generating-unique-identifiers
-      typePolicies: _objectSpread({
+      typePolicies: _objectSpread$1({
         // CTP types with `key` as identifier
         Project: {
           keyFields: ['key']
@@ -929,6 +930,48 @@ var RouteCatchAll = function RouteCatchAll() {
   });
 };
 
+function ownKeys(object, enumerableOnly) { var keys = _Object$keys__default["default"](object); if (_Object$getOwnPropertySymbols__default["default"]) { var symbols = _Object$getOwnPropertySymbols__default["default"](object); enumerableOnly && (symbols = _filterInstanceProperty__default["default"](symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor__default["default"](object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
+
+function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var _context, _context2; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty__default["default"](_context = ownKeys(Object(source), !0)).call(_context, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors__default["default"] ? _Object$defineProperties__default["default"](target, _Object$getOwnPropertyDescriptors__default["default"](source)) : _forEachInstanceProperty__default["default"](_context2 = ownKeys(Object(source))).call(_context2, function (key) { _Object$defineProperty__default["default"](target, key, _Object$getOwnPropertyDescriptor__default["default"](source, key)); }); } return target; }
+
+var ApplicationRouteWithPermissionCheck = function ApplicationRouteWithPermissionCheck(props) {
+  var permissionKeys = formatters.entryPointUriPathToPermissionKeys(props.environment.entryPointUriPath); // Require View permission to render the application.
+
+  var canView = permissions.useIsAuthorized({
+    demandedPermissions: [permissionKeys.View]
+  });
+
+  if (canView) {
+    return jsxRuntime.jsx(jsxRuntime.Fragment, {
+      children: react.Children.only(props.children)
+    });
+  }
+
+  return jsxRuntime.jsx(applicationComponents.PageUnauthorized, {});
+};
+
+ApplicationRouteWithPermissionCheck.propTypes = process.env.NODE_ENV !== "production" ? {
+  disableRoutePermissionCheck: _pt__default["default"].bool,
+  render: _pt__default["default"].func,
+  children: _pt__default["default"].node
+} : {};
+
+var ApplicationRoute = function ApplicationRoute(props) {
+  if (props.disableRoutePermissionCheck) {
+    return jsxRuntime.jsx(jsxRuntime.Fragment, {
+      children: react.Children.only(props.children)
+    });
+  }
+
+  return jsxRuntime.jsx(ApplicationRouteWithPermissionCheck, _objectSpread({}, props));
+};
+
+ApplicationRoute.propTypes = process.env.NODE_ENV !== "production" ? {
+  disableRoutePermissionCheck: _pt__default["default"].bool,
+  render: _pt__default["default"].func,
+  children: _pt__default["default"].node
+} : {};
+
 var ApplicationEntryPoint = function ApplicationEntryPoint(props) {
   // If the `children` prop is used (instead of the `render` prop),
   // we pre-configure the application entry point routes to avoid
@@ -944,7 +987,7 @@ var ApplicationEntryPoint = function ApplicationEntryPoint(props) {
         to: "/:projectKey/".concat(entryPointUriPath)
       }), jsxRuntime.jsx(reactRouterDom.Route, {
         path: "/:projectKey/".concat(entryPointUriPath),
-        children: react.Children.only(props.children)
+        children: jsxRuntime.jsx(ApplicationRoute, _objectSpread({}, props))
       }), jsxRuntime.jsx(RouteCatchAll, {})]
     });
   } // We still support the `render` prop, for backwards compatibility
@@ -963,6 +1006,7 @@ var ApplicationEntryPoint = function ApplicationEntryPoint(props) {
 };
 
 ApplicationEntryPoint.propTypes = process.env.NODE_ENV !== "production" ? {
+  disableRoutePermissionCheck: _pt__default["default"].bool,
   render: _pt__default["default"].func,
   children: _pt__default["default"].node
 } : {};

package/dist/{application-entry-point-43e5d2d3.esm.js → application-entry-point-a47dc2c3.esm.js}

@@ -20,7 +20,7 @@ import omitEmpty from 'omit-empty-es';
 import { ADD_NOTIFICATION, removeNotification, REMOVE_NOTIFICATION, reducer, middleware } from '@commercetools-frontend/notifications';
 import { createMiddleware } from '@commercetools-frontend/sdk';
 import { HIDE_ALL_PAGE_NOTIFICATIONS, NOTIFICATION_KINDS_PAGE, SHOW_LOADING, HIDE_LOADING, GRAPHQL_TARGETS, STATUS_CODES, LOGOUT_REASONS } from '@commercetools-frontend/constants';
-import { S as STORAGE_KEYS, L as LOGIN_STRATEGY_OIDC, c as SUPPORTED_HEADERS } from './constants-33a16227.esm.js';
+import { S as STORAGE_KEYS, L as LOGIN_STRATEGY_OIDC, d as SUPPORTED_HEADERS, e as entryPointUriPathToPermissionKeys } from './formatters-1c23c0a9.esm.js';
 import { selectPageNotifications } from '@commercetools-frontend/react-notifications';
 import _startsWithInstanceProperty from '@babel/runtime-corejs3/core-js-stable/instance/starts-with';
 import _includesInstanceProperty from '@babel/runtime-corejs3/core-js-stable/instance/includes';
@@ -55,11 +55,12 @@ import _pt from 'prop-types';
 import { useEffect, Children } from 'react';
 import { Route, Switch, Redirect } from 'react-router-dom';
 import invariant from 'tiny-invariant';
-import { PageNotFound } from '@commercetools-frontend/application-components';
+import { useIsAuthorized } from '@commercetools-frontend/permissions';
+import { PageNotFound, PageUnauthorized } from '@commercetools-frontend/application-components';
 import { useApplicationContext } from '@commercetools-frontend/application-shell-connectors';
 
 // NOTE: This string will be replaced on build time with the package version.
-var version = "21.0.0-rc.1";
+var version = "21.0.0-rc.6";
 
 var isAddNotificationErrorAction = function isAddNotificationErrorAction(action) {
   var errorAction = action;
@@ -187,9 +188,9 @@ var messages = defineMessages({
   }
 });
 
-function ownKeys$4(object, enumerableOnly) { var keys = _Object$keys(object); if (_Object$getOwnPropertySymbols) { var symbols = _Object$getOwnPropertySymbols(object); enumerableOnly && (symbols = _filterInstanceProperty(symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor(object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
+function ownKeys$5(object, enumerableOnly) { var keys = _Object$keys(object); if (_Object$getOwnPropertySymbols) { var symbols = _Object$getOwnPropertySymbols(object); enumerableOnly && (symbols = _filterInstanceProperty(symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor(object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
 
-function _objectSpread$4(target) { for (var i = 1; i < arguments.length; i++) { var _context, _context2; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty(_context = ownKeys$4(Object(source), !0)).call(_context, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors ? _Object$defineProperties(target, _Object$getOwnPropertyDescriptors(source)) : _forEachInstanceProperty(_context2 = ownKeys$4(Object(source))).call(_context2, function (key) { _Object$defineProperty(target, key, _Object$getOwnPropertyDescriptor(source, key)); }); } return target; }
+function _objectSpread$5(target) { for (var i = 1; i < arguments.length; i++) { var _context, _context2; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty(_context = ownKeys$5(Object(source), !0)).call(_context, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors ? _Object$defineProperties(target, _Object$getOwnPropertyDescriptors(source)) : _forEachInstanceProperty(_context2 = ownKeys$5(Object(source))).call(_context2, function (key) { _Object$defineProperty(target, key, _Object$getOwnPropertyDescriptor(source, key)); }); } return target; }
 
 var getPortalContainer = function getPortalContainer() {
   return process.env.NODE_ENV === 'test' ? document.body : document.querySelector("#".concat(REQUESTS_IN_FLIGHT_LOADER_DOM_ID));
@@ -201,7 +202,7 @@ var RequestsInFlightLoader = function RequestsInFlightLoader() {
   });
   if (!hasRequestsInFlight) return null;
   return /*#__PURE__*/ReactDOM.createPortal(jsx(LoadingSpinner, {
-    children: jsx(FormattedMessage, _objectSpread$4({}, messages.labelLoading))
+    children: jsx(FormattedMessage, _objectSpread$5({}, messages.labelLoading))
   }), getPortalContainer());
 };
 
@@ -428,9 +429,9 @@ var setSessionState = function setSessionState(stateId, state) {
   window.sessionStorage.setItem(sessionStateKey, _JSON$stringify(state));
 };
 
-function ownKeys$3(object, enumerableOnly) { var keys = _Object$keys(object); if (_Object$getOwnPropertySymbols) { var symbols = _Object$getOwnPropertySymbols(object); enumerableOnly && (symbols = _filterInstanceProperty(symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor(object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
+function ownKeys$4(object, enumerableOnly) { var keys = _Object$keys(object); if (_Object$getOwnPropertySymbols) { var symbols = _Object$getOwnPropertySymbols(object); enumerableOnly && (symbols = _filterInstanceProperty(symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor(object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
 
-function _objectSpread$3(target) { for (var i = 1; i < arguments.length; i++) { var _context3, _context4; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty(_context3 = ownKeys$3(Object(source), !0)).call(_context3, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors ? _Object$defineProperties(target, _Object$getOwnPropertyDescriptors(source)) : _forEachInstanceProperty(_context4 = ownKeys$3(Object(source))).call(_context4, function (key) { _Object$defineProperty(target, key, _Object$getOwnPropertyDescriptor(source, key)); }); } return target; }
+function _objectSpread$4(target) { for (var i = 1; i < arguments.length; i++) { var _context3, _context4; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty(_context3 = ownKeys$4(Object(source), !0)).call(_context3, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors ? _Object$defineProperties(target, _Object$getOwnPropertyDescriptors(source)) : _forEachInstanceProperty(_context4 = ownKeys$4(Object(source))).call(_context4, function (key) { _Object$defineProperty(target, key, _Object$getOwnPropertyDescriptor(source, key)); }); } return target; }
 
 var identityStoreEnhancer = function identityStoreEnhancer(noop) {
   return noop;
@@ -443,7 +444,7 @@ var mergeObjectValues = function mergeObjectValues(object) {
     var _ref2 = _slicedToArray(_ref, 2),
         value = _ref2[1];
 
-    return _objectSpread$3(_objectSpread$3({}, acc), value);
+    return _objectSpread$4(_objectSpread$4({}, acc), value);
   }, {});
 };
 
@@ -488,7 +489,7 @@ var createInternalReducer = function createInternalReducer() {
   }); // NOTE: since we don't know in advance which reducers will be injected,
   // we pass an `unknown` type to express this uncertainty and make the compiler happy.
 
-  return combineReducers(_objectSpread$3(_objectSpread$3({
+  return combineReducers(_objectSpread$4(_objectSpread$4({
     requestsInFlight: requestsInFlightReducer,
     notifications: reducer
   }, injectedReducers), preloadedStateReducers));
@@ -531,9 +532,9 @@ var createReduxStore = function createReduxStore() {
 };
 var internalReduxStore = createReduxStore();
 
-function ownKeys$2(object, enumerableOnly) { var keys = _Object$keys(object); if (_Object$getOwnPropertySymbols) { var symbols = _Object$getOwnPropertySymbols(object); enumerableOnly && (symbols = _filterInstanceProperty(symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor(object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
+function ownKeys$3(object, enumerableOnly) { var keys = _Object$keys(object); if (_Object$getOwnPropertySymbols) { var symbols = _Object$getOwnPropertySymbols(object); enumerableOnly && (symbols = _filterInstanceProperty(symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor(object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
 
-function _objectSpread$2(target) { for (var i = 1; i < arguments.length; i++) { var _context2, _context3; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty(_context2 = ownKeys$2(Object(source), !0)).call(_context2, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors ? _Object$defineProperties(target, _Object$getOwnPropertyDescriptors(source)) : _forEachInstanceProperty(_context3 = ownKeys$2(Object(source))).call(_context3, function (key) { _Object$defineProperty(target, key, _Object$getOwnPropertyDescriptor(source, key)); }); } return target; }
+function _objectSpread$3(target) { for (var i = 1; i < arguments.length; i++) { var _context2, _context3; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty(_context2 = ownKeys$3(Object(source), !0)).call(_context2, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors ? _Object$defineProperties(target, _Object$getOwnPropertyDescriptors(source)) : _forEachInstanceProperty(_context3 = ownKeys$3(Object(source))).call(_context3, function (key) { _Object$defineProperty(target, key, _Object$getOwnPropertyDescriptor(source, key)); }); } return target; }
 
 var getSkipTokenRetry = function getSkipTokenRetry(context) {
   var skipTokenRetry = Boolean(context.skipTokenRetry);
@@ -541,7 +542,7 @@ var getSkipTokenRetry = function getSkipTokenRetry(context) {
 };
 
 var forwardTokenRetryHeader = function forwardTokenRetryHeader(headers) {
-  return _objectSpread$2(_objectSpread$2({}, headers), {}, _defineProperty({}, SUPPORTED_HEADERS.X_TOKEN_RETRY, 'true'));
+  return _objectSpread$3(_objectSpread$3({}, headers), {}, _defineProperty({}, SUPPORTED_HEADERS.X_TOKEN_RETRY, 'true'));
 }; // This link retries requests to the CTP API that have been rejected
 // because of an invalid/expired oauth token.
 // To do so, we resend the request with the header "X-Force-Token: true"
@@ -632,9 +633,9 @@ var errorLink = onError(function (_ref) {
   return;
 });
 
-function ownKeys$1(object, enumerableOnly) { var keys = _Object$keys(object); if (_Object$getOwnPropertySymbols) { var symbols = _Object$getOwnPropertySymbols(object); enumerableOnly && (symbols = _filterInstanceProperty(symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor(object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
+function ownKeys$2(object, enumerableOnly) { var keys = _Object$keys(object); if (_Object$getOwnPropertySymbols) { var symbols = _Object$getOwnPropertySymbols(object); enumerableOnly && (symbols = _filterInstanceProperty(symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor(object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
 
-function _objectSpread$1(target) { for (var i = 1; i < arguments.length; i++) { var _context5, _context6; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty(_context5 = ownKeys$1(Object(source), !0)).call(_context5, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors ? _Object$defineProperties(target, _Object$getOwnPropertyDescriptors(source)) : _forEachInstanceProperty(_context6 = ownKeys$1(Object(source))).call(_context6, function (key) { _Object$defineProperty(target, key, _Object$getOwnPropertyDescriptor(source, key)); }); } return target; }
+function _objectSpread$2(target) { for (var i = 1; i < arguments.length; i++) { var _context5, _context6; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty(_context5 = ownKeys$2(Object(source), !0)).call(_context5, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors ? _Object$defineProperties(target, _Object$getOwnPropertyDescriptors(source)) : _forEachInstanceProperty(_context6 = ownKeys$2(Object(source))).call(_context6, function (key) { _Object$defineProperty(target, key, _Object$getOwnPropertyDescriptor(source, key)); }); } return target; }
 
 var isKnownGraphQlTarget = function isKnownGraphQlTarget(target) {
   var _context;
@@ -646,12 +647,12 @@ var getAppliedForwardToHeaders = function getAppliedForwardToHeaders(apolloConte
   if (apolloContext.forwardToConfig) {
     var _context2, _apolloContext$forwar, _objectSpread3;
 
-    return _objectSpread$1(_objectSpread$1({}, _reduceInstanceProperty(_context2 = _Object$entries((_apolloContext$forwar = apolloContext.forwardToConfig.headers) !== null && _apolloContext$forwar !== void 0 ? _apolloContext$forwar : {})).call(_context2, function (customForwardHeaders, _ref) {
+    return _objectSpread$2(_objectSpread$2({}, _reduceInstanceProperty(_context2 = _Object$entries((_apolloContext$forwar = apolloContext.forwardToConfig.headers) !== null && _apolloContext$forwar !== void 0 ? _apolloContext$forwar : {})).call(_context2, function (customForwardHeaders, _ref) {
       var _ref2 = _slicedToArray(_ref, 2),
           headerName = _ref2[0],
           headerValue = _ref2[1];
 
-      return _objectSpread$1(_objectSpread$1({}, customForwardHeaders), {}, _defineProperty({}, "x-forward-header-".concat(headerName), headerValue));
+      return _objectSpread$2(_objectSpread$2({}, customForwardHeaders), {}, _defineProperty({}, "x-forward-header-".concat(headerName), headerValue));
     }, {})), {}, (_objectSpread3 = {}, _defineProperty(_objectSpread3, SUPPORTED_HEADERS.ACCEPT_VERSION, apolloContext.forwardToConfig.version), _defineProperty(_objectSpread3, SUPPORTED_HEADERS.X_FORWARD_TO, apolloContext.forwardToConfig.uri), _objectSpread3));
   }
 
@@ -684,7 +685,7 @@ var headerLink = new ApolloLink(function (operation, forward) {
   var sessionToken = getSessionToken();
   operation.setContext({
     credentials: 'include',
-    headers: omitEmpty(_objectSpread$1(_objectSpread$1({}, apolloContext.headers), {}, (_objectSpread4 = {}, _defineProperty(_objectSpread4, SUPPORTED_HEADERS.AUTHORIZATION, sessionToken ? "Bearer ".concat(sessionToken) : undefined), _defineProperty(_objectSpread4, SUPPORTED_HEADERS.X_PROJECT_KEY, projectKey), _defineProperty(_objectSpread4, SUPPORTED_HEADERS.X_CORRELATION_ID, getCorrelationId({
+    headers: omitEmpty(_objectSpread$2(_objectSpread$2({}, apolloContext.headers), {}, (_objectSpread4 = {}, _defineProperty(_objectSpread4, SUPPORTED_HEADERS.AUTHORIZATION, sessionToken ? "Bearer ".concat(sessionToken) : undefined), _defineProperty(_objectSpread4, SUPPORTED_HEADERS.X_PROJECT_KEY, projectKey), _defineProperty(_objectSpread4, SUPPORTED_HEADERS.X_CORRELATION_ID, getCorrelationId({
       userId: userId
     })), _defineProperty(_objectSpread4, SUPPORTED_HEADERS.X_GRAPHQL_TARGET, graphQlTarget), _defineProperty(_objectSpread4, SUPPORTED_HEADERS.X_GRAPHQL_OPERATION_NAME, operation.operationName), _defineProperty(_objectSpread4, SUPPORTED_HEADERS.X_TEAM_ID, teamId), _defineProperty(_objectSpread4, SUPPORTED_HEADERS.X_APPLICATION_ID, window.app.applicationId), _defineProperty(_objectSpread4, SUPPORTED_HEADERS.X_FEATURE_FLAG, featureFlag), _objectSpread4), getAppliedForwardToHeaders(apolloContext)))
   });
@@ -722,9 +723,9 @@ var tokenRetryLink = new RetryLink({
 
 var _context;
 
-function ownKeys(object, enumerableOnly) { var keys = _Object$keys(object); if (_Object$getOwnPropertySymbols) { var symbols = _Object$getOwnPropertySymbols(object); enumerableOnly && (symbols = _filterInstanceProperty(symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor(object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
+function ownKeys$1(object, enumerableOnly) { var keys = _Object$keys(object); if (_Object$getOwnPropertySymbols) { var symbols = _Object$getOwnPropertySymbols(object); enumerableOnly && (symbols = _filterInstanceProperty(symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor(object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
 
-function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var _context4, _context5; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty(_context4 = ownKeys(Object(source), !0)).call(_context4, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors ? _Object$defineProperties(target, _Object$getOwnPropertyDescriptors(source)) : _forEachInstanceProperty(_context5 = ownKeys(Object(source))).call(_context5, function (key) { _Object$defineProperty(target, key, _Object$getOwnPropertyDescriptor(source, key)); }); } return target; }
+function _objectSpread$1(target) { for (var i = 1; i < arguments.length; i++) { var _context4, _context5; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty(_context4 = ownKeys$1(Object(source), !0)).call(_context4, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors ? _Object$defineProperties(target, _Object$getOwnPropertyDescriptors(source)) : _forEachInstanceProperty(_context5 = ownKeys$1(Object(source))).call(_context5, function (key) { _Object$defineProperty(target, key, _Object$getOwnPropertyDescriptor(source, key)); }); } return target; }
 var userAgent = createHttpUserAgent({
   name: 'apollo-client',
   // version: apolloVersion,
@@ -787,9 +788,9 @@ var createApolloClient = function createApolloClient() {
   return new ApolloClient({
     link: link,
     // https://www.apollographql.com/docs/react/caching/cache-configuration/
-    cache: new InMemoryCache(_objectSpread(_objectSpread({}, customCacheConfig), {}, {
+    cache: new InMemoryCache(_objectSpread$1(_objectSpread$1({}, customCacheConfig), {}, {
       // https://www.apollographql.com/docs/react/caching/cache-configuration/#generating-unique-identifiers
-      typePolicies: _objectSpread({
+      typePolicies: _objectSpread$1({
         // CTP types with `key` as identifier
         Project: {
           keyFields: ['key']
@@ -888,6 +889,48 @@ var RouteCatchAll = function RouteCatchAll() {
   });
 };
 
+function ownKeys(object, enumerableOnly) { var keys = _Object$keys(object); if (_Object$getOwnPropertySymbols) { var symbols = _Object$getOwnPropertySymbols(object); enumerableOnly && (symbols = _filterInstanceProperty(symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor(object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
+
+function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var _context, _context2; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty(_context = ownKeys(Object(source), !0)).call(_context, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors ? _Object$defineProperties(target, _Object$getOwnPropertyDescriptors(source)) : _forEachInstanceProperty(_context2 = ownKeys(Object(source))).call(_context2, function (key) { _Object$defineProperty(target, key, _Object$getOwnPropertyDescriptor(source, key)); }); } return target; }
+
+var ApplicationRouteWithPermissionCheck = function ApplicationRouteWithPermissionCheck(props) {
+  var permissionKeys = entryPointUriPathToPermissionKeys(props.environment.entryPointUriPath); // Require View permission to render the application.
+
+  var canView = useIsAuthorized({
+    demandedPermissions: [permissionKeys.View]
+  });
+
+  if (canView) {
+    return jsx(Fragment, {
+      children: Children.only(props.children)
+    });
+  }
+
+  return jsx(PageUnauthorized, {});
+};
+
+ApplicationRouteWithPermissionCheck.propTypes = process.env.NODE_ENV !== "production" ? {
+  disableRoutePermissionCheck: _pt.bool,
+  render: _pt.func,
+  children: _pt.node
+} : {};
+
+var ApplicationRoute = function ApplicationRoute(props) {
+  if (props.disableRoutePermissionCheck) {
+    return jsx(Fragment, {
+      children: Children.only(props.children)
+    });
+  }
+
+  return jsx(ApplicationRouteWithPermissionCheck, _objectSpread({}, props));
+};
+
+ApplicationRoute.propTypes = process.env.NODE_ENV !== "production" ? {
+  disableRoutePermissionCheck: _pt.bool,
+  render: _pt.func,
+  children: _pt.node
+} : {};
+
 var ApplicationEntryPoint = function ApplicationEntryPoint(props) {
   // If the `children` prop is used (instead of the `render` prop),
   // we pre-configure the application entry point routes to avoid
@@ -903,7 +946,7 @@ var ApplicationEntryPoint = function ApplicationEntryPoint(props) {
         to: "/:projectKey/".concat(entryPointUriPath)
       }), jsx(Route, {
         path: "/:projectKey/".concat(entryPointUriPath),
-        children: Children.only(props.children)
+        children: jsx(ApplicationRoute, _objectSpread({}, props))
       }), jsx(RouteCatchAll, {})]
     });
   } // We still support the `render` prop, for backwards compatibility
@@ -922,6 +965,7 @@ var ApplicationEntryPoint = function ApplicationEntryPoint(props) {
 };
 
 ApplicationEntryPoint.propTypes = process.env.NODE_ENV !== "production" ? {
+  disableRoutePermissionCheck: _pt.bool,
   render: _pt.func,
   children: _pt.node
 } : {};