@dani-builder/strapi-plugin-builder 0.11.0 → 0.12.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -1,5 +1,2 @@
|
|
|
1
|
-
export
|
|
2
|
-
export declare function isSafePreviewPath(path: string): boolean;
|
|
3
|
-
/** Verify the server-only shared key and bind both redirect and draft status. */
|
|
4
|
-
export declare function verifyPreviewToken(token: string | null, path: string | null, status: string | null, secret?: string | undefined, now?: number): boolean;
|
|
1
|
+
export { isSafePreviewPath, PREVIEW_TTL_SECONDS, verifyPreviewToken, } from "@dani-builder/strapi-client/preview";
|
|
5
2
|
//# sourceMappingURL=preview-token.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"preview-token.d.ts","sourceRoot":"","sources":["../../../server/src/preview-token.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"preview-token.d.ts","sourceRoot":"","sources":["../../../server/src/preview-token.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,qCAAqC,CAAC"}
|
|
@@ -1,55 +1,8 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.PREVIEW_TTL_SECONDS = void 0;
|
|
4
|
-
|
|
5
|
-
exports.
|
|
6
|
-
|
|
7
|
-
exports.
|
|
8
|
-
function isSafePreviewPath(path) {
|
|
9
|
-
return (path.startsWith('/') &&
|
|
10
|
-
!path.startsWith('//') &&
|
|
11
|
-
!/[\\#]/.test(path) &&
|
|
12
|
-
!Array.from(path).some((character) => character.charCodeAt(0) <= 32) &&
|
|
13
|
-
!/%(?:2f|5c|0[0-9a-f]|1[0-9a-f]|20)/i.test(path));
|
|
14
|
-
}
|
|
15
|
-
/** Verify the server-only shared key and bind both redirect and draft status. */
|
|
16
|
-
function verifyPreviewToken(token, path, status, secret = process.env.PREVIEW_SECRET, now = Date.now()) {
|
|
17
|
-
if (!secret ||
|
|
18
|
-
!token ||
|
|
19
|
-
!path ||
|
|
20
|
-
!['draft', 'published'].includes(status ?? ''))
|
|
21
|
-
return false;
|
|
22
|
-
if (!isSafePreviewPath(path))
|
|
23
|
-
return false;
|
|
24
|
-
const parts = token.split('.');
|
|
25
|
-
const payload = parts[0];
|
|
26
|
-
const signature = parts[1];
|
|
27
|
-
if (parts.length !== 2 ||
|
|
28
|
-
!payload ||
|
|
29
|
-
!signature ||
|
|
30
|
-
!/^[A-Za-z0-9_-]+$/.test(payload) ||
|
|
31
|
-
!/^[A-Za-z0-9_-]{43}$/.test(signature))
|
|
32
|
-
return false;
|
|
33
|
-
const expected = (0, node_crypto_1.createHmac)('sha256', secret).update(payload).digest();
|
|
34
|
-
const provided = Buffer.from(signature, 'base64url');
|
|
35
|
-
if (provided.length !== expected.length ||
|
|
36
|
-
!(0, node_crypto_1.timingSafeEqual)(provided, expected))
|
|
37
|
-
return false;
|
|
38
|
-
try {
|
|
39
|
-
const claims = JSON.parse(Buffer.from(payload, 'base64url').toString('utf8'));
|
|
40
|
-
if (typeof claims !== 'object' || claims === null)
|
|
41
|
-
return false;
|
|
42
|
-
const value = claims;
|
|
43
|
-
const seconds = Math.floor(now / 1000);
|
|
44
|
-
return (value.path === path &&
|
|
45
|
-
value.status === status &&
|
|
46
|
-
typeof value.exp === 'number' &&
|
|
47
|
-
Number.isInteger(value.exp) &&
|
|
48
|
-
value.exp > seconds &&
|
|
49
|
-
value.exp <= seconds + exports.PREVIEW_TTL_SECONDS);
|
|
50
|
-
}
|
|
51
|
-
catch {
|
|
52
|
-
return false;
|
|
53
|
-
}
|
|
54
|
-
}
|
|
3
|
+
exports.verifyPreviewToken = exports.PREVIEW_TTL_SECONDS = exports.isSafePreviewPath = void 0;
|
|
4
|
+
var preview_1 = require("@dani-builder/strapi-client/preview");
|
|
5
|
+
Object.defineProperty(exports, "isSafePreviewPath", { enumerable: true, get: function () { return preview_1.isSafePreviewPath; } });
|
|
6
|
+
Object.defineProperty(exports, "PREVIEW_TTL_SECONDS", { enumerable: true, get: function () { return preview_1.PREVIEW_TTL_SECONDS; } });
|
|
7
|
+
Object.defineProperty(exports, "verifyPreviewToken", { enumerable: true, get: function () { return preview_1.verifyPreviewToken; } });
|
|
55
8
|
//# sourceMappingURL=preview-token.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"preview-token.js","sourceRoot":"","sources":["../../../server/src/preview-token.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"preview-token.js","sourceRoot":"","sources":["../../../server/src/preview-token.ts"],"names":[],"mappings":";;;AAAA,+DAI6C;AAH3C,4GAAA,iBAAiB,OAAA;AACjB,8GAAA,mBAAmB,OAAA;AACnB,6GAAA,kBAAkB,OAAA"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@dani-builder/strapi-plugin-builder",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.12.1",
|
|
4
4
|
"description": "Daniworks Builder — reusable CMS components, content types, and smart API for Strapi v5",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"strapi": {
|
|
@@ -62,7 +62,9 @@
|
|
|
62
62
|
"url": "https://github.com/HJ-company/daniworks-builder-v2.git",
|
|
63
63
|
"directory": "packages/strapi-plugin-builder"
|
|
64
64
|
},
|
|
65
|
-
"dependencies": {
|
|
65
|
+
"dependencies": {
|
|
66
|
+
"@dani-builder/strapi-client": "^0.12.1"
|
|
67
|
+
},
|
|
66
68
|
"devDependencies": {
|
|
67
69
|
"@strapi/strapi": "5.54.0",
|
|
68
70
|
"@strapi/utils": "5.54.0",
|