@dylandepass/helix-product-pipeline 2.0.0 → 2.0.2

package/CHANGELOG.md

@@ -1,3 +1,20 @@
+## [2.0.2](https://github.com/adobe-rnd/helix-product-pipeline/compare/v2.0.1...v2.0.2) (2026-01-29)
+
+
+### Bug Fixes
+
+* allow generated jsonld to be overridden ([47f0e92](https://github.com/adobe-rnd/helix-product-pipeline/commit/47f0e9230c6c2d47588ff4815addbecc8d3b4379))
+
+## [2.0.1](https://github.com/adobe-rnd/helix-product-pipeline/compare/v2.0.0...v2.0.1) (2026-01-29)
+
+
+### Bug Fixes
+
+* assume authorization header value includes `token` ([20886f8](https://github.com/adobe-rnd/helix-product-pipeline/commit/20886f8224e4ca7a946eb2d927d6f625ec3fe3dc))
+* pass authorization headers to edge ([8640b6d](https://github.com/adobe-rnd/helix-product-pipeline/commit/8640b6d5ce22e31dd3701fd8197eef70efc780ae))
+* respect site authentication ([28a05ce](https://github.com/adobe-rnd/helix-product-pipeline/commit/28a05ce23e084035b8b4459f8ed37790798520c7))
+* return 401 body ([5bad55b](https://github.com/adobe-rnd/helix-product-pipeline/commit/5bad55b8a09bc6d538ae1e6787e6f413a9f5613a))
+
 # [2.0.0](https://github.com/adobe-rnd/helix-product-pipeline/compare/v1.9.3...v2.0.0) (2026-01-26)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dylandepass/helix-product-pipeline",
-  "version": "2.0.0",
+  "version": "2.0.2",
   "description": "Helix Product Pipeline",
   "main": "src/index.js",
   "types": "src/index.d.ts",

package/src/product-html-pipe.js

@@ -25,6 +25,7 @@ import renderHead from './steps/render-head.js';
 import tohtml from './steps/stringify-response.js';
 import fetch404 from './steps/fetch-404.js';
 import { setProductCacheHeaders } from './steps/set-cache-headers.js';
+import { getUnauthorizedBody } from './utils/http-response.js';
 
 export async function productHTMLPipe(state, req) {
   const { log } = state;
@@ -73,7 +74,7 @@ export async function productHTMLPipe(state, req) {
     await html(state);
     await renderHead(state);
 
-    await fetchEdgeContent(state, res);
+    await fetchEdgeContent(state, req, res);
     await renderBody(state, req, res);
     await renderJsonld(state, res);
     await addHeadingIds(state);
@@ -91,6 +92,10 @@ export async function productHTMLPipe(state, req) {
       res.status = 500;
     }
 
+    if (res.status === 401) {
+      res.body = getUnauthorizedBody();
+    }
+
     /* c8 ignore next */
     const level = res.status >= 500 ? 'error' : 'info';
     log[level](`pipeline status: ${res.status} ${res.error}`, e);

package/src/steps/fetch-404.js

@@ -9,6 +9,7 @@
  * OF ANY KIND, either express or implied. See the License for the specific language
  * governing permissions and limitations under the License.
  */
+import { PipelineStatusError } from '@adobe/helix-html-pipeline';
 import { extractLastModified, recordLastModified } from '../utils/last-modified.js';
 import { setProduct404CacheHeaders } from './set-cache-headers.js';
 
@@ -23,7 +24,17 @@ export default async function fetch404(state, req, res) {
   const {
     org, site, ref,
   } = state;
-  const ret = await fetch(`https://${ref}--${site}--${org}.aem.live/404.html`);
+
+  /** @type {Record<string, string>} */
+  const headers = {};
+  const authorization = req.headers.get('authorization');
+  if (authorization) {
+    headers.authorization = authorization;
+  }
+  const ret = await fetch(`https://${ref}--${site}--${org}.aem.live/404.html`, { headers });
+  if (ret.status === 401) {
+    throw new PipelineStatusError(401, 'unauthorized');
+  }
   if (ret.status === 200) {
     // override last-modified if source-last-modified is set
     const lastModified = extractLastModified(ret.headers);

package/src/steps/fetch-edge-product.js

@@ -10,15 +10,17 @@
  * governing permissions and limitations under the License.
  */
 
+import { PipelineStatusError } from '@adobe/helix-html-pipeline';
 import { extractLastModified, recordLastModified } from '../utils/last-modified.js';
 
 /**
  * Loads the content from either the content-bus and stores it in `state.content.edge`
  * @param {PipelineState} state
+ * @param {PipelineRequest} req
  * @param {PipelineResponse} res
  * @returns {Promise<void>}
  */
-export default async function fetchEdgeContent(state, res) {
+export default async function fetchEdgeContent(state, req, res) {
   const {
     info, org, site, ref, log,
   } = state;
@@ -26,7 +28,16 @@ export default async function fetchEdgeContent(state, res) {
 
   const contentUrl = `https://${ref}--${site}--${org}.aem.live${originalPath}.plain.html`;
   try {
-    const contentRes = await fetch(contentUrl);
+    /** @type {Record<string, string>} */
+    const headers = {};
+    const authorization = req.headers.get('authorization');
+    if (authorization) {
+      headers.authorization = authorization;
+    }
+    const contentRes = await fetch(contentUrl, { headers });
+    if (contentRes.status === 401) {
+      throw new PipelineStatusError(401, 'unauthorized');
+    }
     if (contentRes.status === 200) {
       state.content.edge = await contentRes.text();
 
@@ -39,6 +50,9 @@ export default async function fetchEdgeContent(state, res) {
       log.debug(`Edge content returned ${contentRes.status} for ${contentUrl}`);
     }
   } catch (e) {
+    if (e instanceof PipelineStatusError) {
+      throw e;
+    }
     log.debug(`Failed to fetch edge content from ${contentUrl}: ${e.message}`);
   }
 }

package/src/steps/render-jsonld.js

@@ -65,7 +65,14 @@ function renderOffer(state, variant, simple = false) {
   };
 }
 
-function convertToJsonLD(state, product) {
+export function convertToJsonLD(state, product) {
+  // If the product has a jsonld property, use it directly instead of generating
+  if (product.jsonld) {
+    return typeof product.jsonld === 'string'
+      ? product.jsonld
+      : JSON.stringify(product.jsonld, null, 2);
+  }
+
   const {
     sku,
     metaTitle,

package/src/utils/http-response.js

@@ -0,0 +1,27 @@
+/*
+ * Copyright 2025 Adobe. All rights reserved.
+ * This file is licensed to you under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License. You may obtain a copy
+ * of the License at http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under
+ * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+ * OF ANY KIND, either express or implied. See the License for the specific language
+ * governing permissions and limitations under the License.
+ */
+
+/*
+ * Returns the HTML body for a 401 Unauthorized response.
+ * Matches the format returned by Edge Delivery Services.
+ * @returns {string} HTML response body
+ */
+export function getUnauthorizedBody() {
+  return `<html>
+  <head>
+    <meta name="color-scheme" content="light dark" />
+  </head>
+  <body>
+    <pre style="word-wrap: break-word; white-space: pre-wrap;">401 Unauthorized</pre>
+  </body>
+</html>`;
+}