@gov-cy/govcy-express-services 0.2.16 → 1.0.0-alpha.10

package/src/middleware/govcyFileViewHandler.mjs

@@ -0,0 +1,161 @@
+import { getPageConfigData } from "../utils/govcyLoadConfigData.mjs";
+import { evaluatePageConditions } from "../utils/govcyExpressions.mjs";
+import { getEnvVariable, getEnvVariableBool } from "../utils/govcyEnvVariables.mjs";
+import { ALLOWED_FILE_MIME_TYPES } from "../utils/govcyConstants.mjs";
+import { govcyApiRequest } from "../utils/govcyApiRequest.mjs";
+import * as dataLayer from "../utils/govcyDataLayer.mjs";
+import { logger } from '../utils/govcyLogger.mjs';
+import { handleMiddlewareError } from "../utils/govcyUtils.mjs";
+import { isMagicByteValid, pageContainsFileInput } from "../utils/govcyHandleFiles.mjs";
+
+export function govcyFileViewHandler() {
+    return async (req, res, next) => {
+        try {
+            const { siteId, pageUrl, elementName } = req.params;
+
+            // Create a deep copy of the service to avoid modifying the original
+            let serviceCopy = req.serviceData;
+
+            // Get the download file configuration
+            const downloadCfg = serviceCopy?.site?.fileDownloadAPIEndpoint;
+            // Check if download file configuration is available
+            if (!downloadCfg?.url || !downloadCfg?.clientKey || !downloadCfg?.serviceId) {
+                return handleMiddlewareError(`File download APU configuration not found`, 404, next);
+            }
+
+            // Environment vars
+            const allowSelfSignedCerts = getEnvVariableBool("ALLOW_SELF_SIGNED_CERTIFICATES", false);
+            let url = getEnvVariable(downloadCfg.url || "", false);
+            const clientKey = getEnvVariable(downloadCfg.clientKey || "", false);
+            const serviceId = getEnvVariable(downloadCfg.serviceId || "", false);
+            const dsfGtwKey = getEnvVariable(downloadCfg?.dsfgtwApiKey || "", "");
+            const method = (downloadCfg?.method || "GET").toLowerCase();
+
+            // Check if the upload API is configured correctly
+            if (!url || !clientKey) {
+                return handleMiddlewareError(`Missing environment variables for upload`, 404, next);
+            }
+
+
+            // ⤵️ Find the current page based on the URL
+            const page = getPageConfigData(serviceCopy, pageUrl);
+
+            // deep copy the page template to avoid modifying the original
+            const pageTemplateCopy = JSON.parse(JSON.stringify(page.pageTemplate));
+
+            // ----- Conditional logic comes here
+            // ✅ Skip this POST handler if the page's conditions evaluate to true (redirect away)
+            // const conditionResult = evaluatePageConditions(page, req.session, siteId, req);
+            // if (conditionResult.result === false) {
+            //     logger.debug("⛔️ Page condition evaluated to true on POST — skipping form save and redirecting:", conditionResult);
+            //     return handleMiddlewareError(`Page condition evaluated to true on POST — skipping form save and redirecting`, 404, next);
+            // }
+
+            // Validate the field: Only allow delete if the page contains a fileInput with the given name
+            const fileInputElement = pageContainsFileInput(pageTemplateCopy, elementName);
+            if (!fileInputElement) {
+                return handleMiddlewareError(`File input [${elementName}] not allowed on this page`, 404, next);
+            }
+
+            //check the reference number
+            const referenceNo = dataLayer.getSiteLoadDataReferenceNumber(req.session, siteId);
+            if (!referenceNo) {
+                return handleMiddlewareError(`Missing submission reference number`, 404, next);
+            }
+
+            //get element data 
+            const elementData = dataLayer.getFormDataValue(req.session, siteId, pageUrl, elementName)
+
+            // If the element data is not found, return an error response
+            if (!elementData || !elementData?.sha256 || !elementData?.fileId) {
+                return handleMiddlewareError(`File input [${elementName}] data not found on this page`, 404, next);
+            }
+
+            // Construct the URL with tag being the elementName
+            url += `/${encodeURIComponent(referenceNo)}/${encodeURIComponent(elementData.fileId)}/${encodeURIComponent(elementData.sha256)}`;
+
+            // Get the user
+            const user = dataLayer.getUser(req.session);
+            // Perform the upload request
+            const response = await govcyApiRequest(
+                method,
+                url,
+                {},
+                true,
+                user,
+                {
+                    accept: "text/plain",
+                    "client-key": clientKey,
+                    "service-id": serviceId,
+                    ...(dsfGtwKey !== "" && { "dsfgtw-api-key": dsfGtwKey })
+                },
+                3,
+                allowSelfSignedCerts
+            );
+
+            // If not succeeded, handle error
+            if (!response?.Succeeded) {
+                return handleMiddlewareError(`fileDownloadAPIEndpoint returned succeeded false`, 500, next);
+            }
+
+            // Check if the response contains the expected data
+            if (!response?.Data?.contentType || !response?.Data?.fileName || !response?.Data?.base64) {
+                return handleMiddlewareError(`fileDownloadAPIEndpoint - Missing contentType, fileName or base64 in response data`, 500, next);
+            }
+
+            // Get filename
+            const filename = response?.Data?.fileName || "filename";
+            const fallbackFilename = asciiFallback(filename);
+            const utf8Filename = encodeRFC5987(filename);
+
+            // Decode base64 to binary
+            const fileBuffer = Buffer.from(response.Data.base64, 'base64');
+
+            // file type checks
+            // 1. Check declared mimetype
+            if (!ALLOWED_FILE_MIME_TYPES.includes(response?.Data?.contentType)) {
+                return handleMiddlewareError(`fileDownloadAPIEndpoint - Invalid file type (MIME not allowed)`, 500, next);
+            }
+
+            // 2. Check actual file content (magic bytes) matches claimed MIME type
+            if (!isMagicByteValid(fileBuffer, response?.Data?.contentType)) {
+                return handleMiddlewareError(`fileDownloadAPIEndpoint - Invalid file type (magic byte mismatch)`, 500, next);
+            }
+
+            // Check if Buffer is empty
+            if (!fileBuffer || fileBuffer.length === 0) {
+                return handleMiddlewareError(`fileDownloadAPIEndpoint - File is empty or invalid`, 500, next);
+            }
+            // Send the file to the browser
+            res.type(response?.Data?.contentType);
+            res.setHeader(
+                'Content-Disposition',
+                `inline; filename="${fallbackFilename}"; filename*=UTF-8''${utf8Filename}`
+            );
+            res.send(fileBuffer);
+
+        } catch (error) {
+            logger.error("Error in govcyViewFileHandler middleware:", error.message);
+            return next(error); // Pass the error to the next middleware
+        }
+    };
+}
+
+//------------------------------------------------------------------------------
+// Helper functions
+// rfc5987 encoding for filename*
+function encodeRFC5987(str) {
+    return encodeURIComponent(str)
+        .replace(/['()*]/g, c => '%' + c.charCodeAt(0).toString(16).toUpperCase())
+        .replace(/%(7C|60|5E)/g, (m, p) => '%' + p); // | ` ^
+}
+
+// ASCII fallback for old browsers
+function asciiFallback(str) {
+    return str
+        .replace(/[^\x20-\x7E]/g, '')     // strip non-ASCII
+        .replace(/[/\\?%*:|"<>]/g, '-')   // reserved chars
+        .replace(/[\r\n]/g, ' ')          // drop newlines
+        .replace(/"/g, "'")               // no quotes
+        || 'download';
+}

package/src/middleware/govcyFormsPostHandler.mjs

@@ -6,6 +6,7 @@ import { logger } from "../utils/govcyLogger.mjs";
 import { handleMiddlewareError } from "../utils/govcyUtils.mjs";
 import { getFormData } from "../utils/govcyFormHandling.mjs"
 import { evaluatePageConditions } from "../utils/govcyExpressions.mjs"; 
+import { tempSaveIfConfigured } from "../utils/govcyTempSave.mjs";
 
 
 /**
@@ -42,7 +43,7 @@ export function govcyFormsPostHandler() {
             }
     
             // const formData = req.body; // Submitted data
-            const formData = getFormData(formElement.params.elements, req.body); // Submitted data
+            const formData = getFormData(formElement.params.elements, req.body, req.session, siteId, pageUrl); // Submitted data
 
             // ☑️ Start validation from top-level form elements
             const validationErrors = validateFormElements(formElement.params.elements, formData);
@@ -59,7 +60,12 @@ export function govcyFormsPostHandler() {
     
             //⤴️ Store validated form data in session
             dataLayer.storePageData(req.session, siteId, pageUrl, formData);
-
+            
+            // 🔄 Fire-and-forget temporary save (non-blocking)
+            (async () => {
+                try { await tempSaveIfConfigured(req.session, service, siteId); }
+                catch (e) { /* already logged internally */ }
+            })();
             
             logger.debug("✅ Form submitted successfully:", dataLayer.getPageData(req.session, siteId, pageUrl), req);
             logger.info("✅ Form submitted successfully:", req.originalUrl);

package/src/middleware/govcyHttpErrorHandler.mjs

@@ -3,6 +3,8 @@ import * as govcyResources from "../resources/govcyResources.mjs";
 import * as dataLayer from "../utils/govcyDataLayer.mjs";
 import { logger } from "../utils/govcyLogger.mjs";
 import { whatsIsMyEnvironment } from '../utils/govcyEnvVariables.mjs';
+import { errorResponse } from '../utils/govcyApiResponse.mjs';
+import { isApiRequest } from '../utils/govcyApiDetection.mjs';
 
 /**
  * Middleware function to handle HTTP errors and render appropriate error pages.
@@ -49,9 +51,8 @@ export function govcyHttpErrorHandler(err, req, res, next) {
 
     res.status(statusCode);
 
-    // Return JSON if the request expects it
-    if (req.headers.accept && req.headers.accept.includes("application/json")) {
-        return res.json({ error: message });
+    if (isApiRequest(req)) {
+        return res.status(statusCode).json(errorResponse(statusCode, message));
     }
 
     // Render an error page for non-JSON requests

package/src/middleware/govcyLoadSubmissionData.mjs

@@ -0,0 +1,22 @@
+import { logger } from "../utils/govcyLogger.mjs";
+import { govcyLoadSubmissionDataAPIs } from "../utils/govcyLoadSubmissionDataAPIs.mjs";
+/**
+ * Middleware to load submission data from APIs.
+ * This middleware fetches submission data from configured APIs and stores it in the session. 
+ * @returns {function} Middleware function to load submission data from APIs
+ */
+export function govcyLoadSubmissionData() {
+    return async (req, res, next) => {
+        try {
+            const service = req.serviceData;
+            // Extract siteId from request
+            const { siteId } = req.params;
+
+            return await govcyLoadSubmissionDataAPIs(req.session, service, siteId, next);
+            
+        } catch (error) {
+            logger.error("Error in govcyLoadSubmissionData middleware:", error.message);
+            return next(error); // Pass the error to the next middleware
+        }
+    }
+}

package/src/middleware/govcyPageHandler.mjs

@@ -53,6 +53,9 @@ export function govcyPageHandler() {
             element.params.method = "POST";
             // ➕ Add CSRF token
             element.params.elements.push(govcyResources.csrfTokenInput(req.csrfToken()));
+            // // ➕ Add siteId and pageUrl to form data
+            // element.params.elements.push(govcyResources.siteAndPageInput(siteId, pageUrl, req.globalLang));
+            // ➕ Add govcyFormsJs script to the form
             element.params.elements.push(govcyResources.staticResources.elements["govcyFormsJs"]);
 
             // 🔍 Find the first button with `prototypeNavigate`
@@ -88,7 +91,7 @@ export function govcyPageHandler() {
             }
             //--------- End of Handle Validation Errors ---------
             
-            populateFormData(element.params.elements, theData,validationErrors);
+            populateFormData(element.params.elements, theData,validationErrors, req.session, siteId, pageUrl, req.globalLang, null, req.query.route);
             // if there are validation errors, add an error summary
             if (validationErrors?.errorSummary?.length > 0) {
               element.params.elements.unshift(govcyResources.errorSummary(validationErrors.errorSummary));
@@ -117,3 +120,4 @@ export function govcyPageHandler() {
     }
   };
 }
+

package/src/public/js/govcyFiles.js

@@ -0,0 +1,197 @@
+// 🔍 Select all file inputs that have the .govcy-file-upload class
+var fileInputs = document.querySelectorAll('input[type="file"].govcy-file-upload');
+
+// 🔁 Loop over each file input and attach a change event listener
+fileInputs.forEach(function(input) {
+  input.addEventListener('change', _uploadFileEventHandler);
+});
+
+
+/**
+ * Handles the upload of a file event
+ *
+ * @param {object} event The event
+ */
+function _uploadFileEventHandler(event) {
+  var input = event.target;
+  var messages = {
+    "uploadSuccesful": {
+      "el": "Το αρχείο ανεβαστηκε",
+      "en": "File uploaded successfully",
+      "tr": "File uploaded successfully"
+    },
+    "uploadFailed": {
+      "el": "Αποτυχια ανεβασης",
+      "en": "File upload failed",
+      "tr": "File upload failed"
+    },
+    "uploadFailed406": {
+      "el": "Το επιλεγμένο αρχείο είναι κενό",
+      "en": "The selected file is empty",
+      "tr": "The selected file is empty"
+    },
+    "uploadFailed407": {
+      "el": "Το επιλεγμένο αρχείο πρέπει να είναι JPG, JPEG, PNG ή PDF",
+      "en": "The selected file must be a JPG, JPEG, PNG or PDF",
+      "tr": "The selected file must be a JPG, JPEG, PNG or PDF"
+    },
+    "uploadFailed408": {
+      "el": "Το επιλεγμένο αρχείο πρέπει να είναι JPG, JPEG, PNG ή PDF",
+      "en": "The selected file must be a JPG, JPEG, PNG or PDF",
+      "tr": "The selected file must be a JPG, JPEG, PNG or PDF"
+    },
+    "uploadFailed409": {
+      "el": "Το επιλεγμένο αρχείο πρέπει να είναι μικρότερο από 5MB",
+      "en": "The selected file must be smaller than 5MB",
+      "tr": "The selected file must be smaller than 5MB"
+    }
+  };
+
+  // 🔐 Get the CSRF token from a hidden input field (generated by your backend)
+  var csrfEl = document.querySelector('input[type="hidden"][name="_csrf"]');
+  var csrfToken = csrfEl ? csrfEl.value : '';
+
+  // 🔧 Define siteId and pageUrl (you can dynamically extract these later)
+  var siteId = window._govcySiteId || "";
+  var pageUrl = window._govcyPageUrl || "";
+  var lang = window._govcyLang || "el";
+
+  // 📦 Grab the selected file
+  var file = event.target.files[0];
+  var elementName = input.name; // Form field's `name` attribute
+  var elementId = input.id;     // Form field's `id` attribute
+
+  if (!file) return; // Exit if no file was selected
+
+  // 🧵 Prepare form-data payload for the API
+  var formData = new FormData();
+  formData.append('file', file);               // Attach the actual file
+  formData.append('elementName', elementName); // Attach the field name for backend lookup
+
+  // 🚀 CHANGED: using fetch instead of axios.post
+  fetch(`/apis/${siteId}/${pageUrl}/upload`, {
+    method: "POST",
+    headers: {
+      "X-CSRF-Token": csrfToken // 🔐 Pass CSRF token in custom header
+    },
+    body: formData
+  })
+    .then(function(response) {
+      // 🚀 CHANGED: fetch does not auto-throw on error codes → check manually
+      if (!response.ok) {
+        return response.json().then(function(errData) {
+          throw { response: { data: errData } };
+        });
+      }
+      return response.json();
+    })
+    .then(function(data) {
+      // ✅ Success response
+      var sha256 = data.Data.sha256;
+      var fileId = data.Data.fileId;
+
+      // 📝 Store returned metadata in hidden fields if needed
+      // document.querySelector('[name="' + elementName + 'Attachment[fileId]"]').value = fileId;
+      // document.querySelector('[name="' + elementName + 'Attachment[sha256]"]').value = sha256;
+
+      // Render the file view
+      _renderFileElement("fileView", elementId, elementName, fileId, sha256, null);
+
+      // Accessibility: Update ARIA live region with success message
+      var statusRegion = document.getElementById('_govcy-upload-status');
+      if (statusRegion) {
+        setTimeout(function() {
+          statusRegion.textContent = messages.uploadSuccesful[lang];
+        }, 200);
+        setTimeout(function() {
+          statusRegion.textContent = '';
+        }, 5000);
+      }
+    })
+    .catch(function(err) {
+      // ⚠️ Show an error message if upload fails
+      var errorMessage = messages.uploadFailed;
+      var errorCode = err && err.response && err.response.data && err.response.data.ErrorCode;
+
+      if (errorCode === 406 || errorCode === 407 || errorCode === 408 || errorCode === 409) {
+        errorMessage = messages["uploadFailed" + errorCode];
+      }
+
+      // Render the file input with error
+      _renderFileElement("fileInput", elementId, elementName, "", "", errorMessage);
+
+      // Re-bind the file input's change handler
+      var newInput = document.getElementById(elementId);
+      if (newInput) {
+        newInput.addEventListener('change', _uploadFileEventHandler);
+      }
+
+      // Accessibility: Focus on the form field
+      document.getElementById(elementId)?.focus();
+    });
+}
+
+
+/**
+ * Renders a file element in the DOM
+ * 
+ * @param {string} elementState The element state. Can be "fileInput" or "fileView" 
+ * @param {string} elementId The element id
+ * @param {string} elementName The element name 
+ * @param {string} fileId The file id 
+ * @param {string} sha256 The sha256 
+ * @param {object} errorMessage The error message in all supported languages 
+ */
+function _renderFileElement(elementState, elementId, elementName, fileId, sha256, errorMessage) {
+  
+  // Grab the query string part (?foo=bar&route=something)
+  var queryString = window.location.search;
+  // Parse it
+  var params = new URLSearchParams(queryString);
+  // Get the "route" value (null if not present)
+  var route = params.get("route");
+
+  // Create an instance of GovcyFrontendRendererBrowser
+  var renderer = new GovcyFrontendRendererBrowser();
+  var lang = window._govcyLang || "el";
+  // Define the input data
+  var inputData =
+  {
+    "site": {
+      "lang": lang
+    }
+  };
+  var fileInputMap =  JSON.parse(JSON.stringify(window._govcyFileInputs));
+  var fileElement = fileInputMap[elementName];
+  fileElement.element = elementState;
+  if (errorMessage != null) fileElement.params.error = errorMessage;
+  if (fileId != null) fileElement.params.fileId = fileId;
+  if (sha256 != null) fileElement.params.sha256 = sha256;
+  if (elementState == "fileView") {
+    fileElement.params.visuallyHiddenText = fileElement.params.label;
+    // TODO: Also need to set the `view` and `download` URLs 
+    fileElement.params.viewHref = "/" + window._govcySiteId + "/" + window._govcyPageUrl + "/view-file/" + elementName;
+    fileElement.params.viewTarget = "_blank";
+    fileElement.params.deleteHref  = "/" + window._govcySiteId + "/" + window._govcyPageUrl + "/delete-file/" + elementName 
+      + (route !== null ? "?route=" + encodeURIComponent(route) : "");
+  }
+  // Construct the JSONTemplate
+  var JSONTemplate = {
+    "elements": [fileElement]
+  };
+  
+  //render HTML into string
+  var renderedHtml = renderer.renderFromJSON(JSONTemplate,inputData);
+  var outerElement = document.getElementById(`${elementId}-outer-control`) 
+        || document.getElementById(`${elementId}-input-control`) 
+        || document.getElementById(`${elementId}-view-control`);
+
+  if (outerElement) {
+    //remove all classes from outerElement
+    outerElement.className = "";
+    //set the id of the outerElement to `${elementId}-outer-control`
+    outerElement.id = `${elementId}-outer-control`;
+    //update DOM and initialize the JS components
+    renderer.updateDOMAndInitialize(`${elementId}-outer-control`, renderedHtml);
+  }
+}

package/src/public/js/govcyForms.js

@@ -1,20 +1,31 @@
 document.addEventListener("DOMContentLoaded", function () {
     // --- Show conditionals for checked radios ---
-    document.querySelectorAll('.govcy-radio-input[data-aria-controls]:checked').forEach(radio => {
-        const targetId = radio.getAttribute('data-aria-controls');
-        const targetElement = document.getElementById(targetId);
+    // CHANGED: NodeList.prototype.forEach is not in IE11 → use Array.prototype.forEach.call
+    // CHANGED: Arrow function → function
+    Array.prototype.forEach.call(
+        document.querySelectorAll('.govcy-radio-input[data-aria-controls]:checked'),
+        function (radio) { // CHANGED: arrow → function
+            // CHANGED: const → var (ES5)
+            var targetId = radio.getAttribute('data-aria-controls');
+            var targetElement = document.getElementById(targetId);
 
-        if (targetElement) {
-            targetElement.classList.remove('govcy-radio__conditional--hidden');
+            if (targetElement) {
+                targetElement.classList.remove('govcy-radio__conditional--hidden');
+            }
         }
-    });
+    );
+
     // --- Disable submit button after form submission ---
-    document.querySelectorAll('form').forEach(form => {
+    // CHANGED: NodeList.forEach → Array.prototype.forEach.call
+    Array.prototype.forEach.call(document.querySelectorAll('form'), function (form) { // CHANGED
         form.addEventListener('submit', function (e) {
-            const submitButton = form.querySelector('[type="submit"]');
+            // CHANGED: const → var (ES5)
+            var submitButton = form.querySelector('[type="submit"]');
             if (submitButton) {
                 submitButton.disabled = true;
                 submitButton.setAttribute('aria-disabled', 'true');
+                // (Optional) announce busy state for AT:
+                // submitButton.setAttribute('aria-busy', 'true'); // CHANGED: optional a11y improvement
             }
         });
     });

package/src/resources/govcyResources.mjs

@@ -6,6 +6,11 @@ export const staticResources = {
             el: "Υποβολή", 
             tr: "Gönder" 
         },
+        continue: { 
+            en: "Continue", 
+            el: "Συνέχεια", 
+            tr: "Continue" 
+        },
         cancel: { 
             en: "Cancel", 
             el: "Ακύρωση", 
@@ -100,6 +105,46 @@ export const staticResources = {
             en: "We have received your request. ",
             el: "Έχουμε λάβει την αίτησή σας. ",
             tr: "We have received your request. "
+        },
+        fileUploaded : {
+            en: "File uploaded",
+            el: "Το αρχείο ανεβάστηκε",
+            tr: "File uploaded"
+        },
+        fileNotUploaded : {
+            en: "File has not been uploaded. ",
+            el: "Το αρχείο δεν ανεβάστηκε. ",
+            tr: "File has not been uploaded. "
+        },
+        fileYouHaveUploaded : {
+            en: "You have uploaded the file for \"{{file}}\"",
+            el: "Έχετε ανεβάσει το αρχείο \"{{file}}\"",
+            tr: "You have uploaded the file for \"{{file}}\""
+        },
+        deleteFileTitle : {
+            en: "Are you sure you want to delete the file \"{{file}}\"? ",
+            el: "Είστε σίγουροι ότι θέλετε να διαγράψετε το αρχείο \"{{file}}\";",
+            tr: "Are you sure you want to delete the file \"{{file}}\"? "
+        },
+        deleteYesOption: {
+            el:"Ναι, θέλω να διαγράψω το αρχείο",
+            en:"Yes, I want to delete this file",
+            tr:"Yes, I want to delete this file"
+        },
+        deleteNoOption: {
+            el:"Όχι, δεν θέλω να διαγράψω το αρχείο",
+            en:"No, I don't want to delete this file",
+            tr:"No, I don't want to delete this file"
+        },
+        deleteFileValidationError: {
+            en: "Select if you want to delete the file",
+            el: "Επιλέξτε αν θέλετε να διαγράψετε το αρχείο",
+            tr: "Select if you want to delete the file"
+        },
+        viewFile: {
+            en: "View file",
+            el: "Προβολή αρχείου",
+            tr: "View file"
         }
     },
     //remderer sections
@@ -113,9 +158,9 @@ export const staticResources = {
             element: "htmlElement",
             params: {
                 text: {
-                    en: `<script src="/js/govcyForms.js"></script>`,
-                    el: `<script src="/js/govcyForms.js"></script>`,
-                    tr: `<script src="/js/govcyForms.js"></script>`
+                    en: `<script src="https://cdn.jsdelivr.net/npm/axios@1.6.2/dist/axios.min.js"></script><script src="https://cdn.jsdelivr.net/gh/gov-cy/govcy-frontend-renderer@v1/dist/govcyCompiledTemplates.browser.js"></script><script src="https://cdn.jsdelivr.net/gh/gov-cy/govcy-frontend-renderer@v1/dist/govcyFrontendRenderer.browser.js"></script><script type="module" src="/js/govcyForms.js"></script><script type="module" src="/js/govcyFiles.js"></script>`,
+                    el: `<script src="https://cdn.jsdelivr.net/npm/axios@1.6.2/dist/axios.min.js"></script><script src="https://cdn.jsdelivr.net/gh/gov-cy/govcy-frontend-renderer@v1/dist/govcyCompiledTemplates.browser.js"></script><script src="https://cdn.jsdelivr.net/gh/gov-cy/govcy-frontend-renderer@v1/dist/govcyFrontendRenderer.browser.js"></script><script type="module" src="/js/govcyForms.js"></script><script type="module" src="/js/govcyFiles.js"></script>`,
+                    tr: `<script src="https://cdn.jsdelivr.net/npm/axios@1.6.2/dist/axios.min.js"></script><script src="https://cdn.jsdelivr.net/gh/gov-cy/govcy-frontend-renderer@v1/dist/govcyCompiledTemplates.browser.js"></script><script src="https://cdn.jsdelivr.net/gh/gov-cy/govcy-frontend-renderer@v1/dist/govcyFrontendRenderer.browser.js"></script><script type="module" src="/js/govcyForms.js"></script><script type="module" src="/js/govcyFiles.js"></script>`
                 }
             }
         },
@@ -192,6 +237,27 @@ export function csrfTokenInput(csrfToken) {
     };
 }
 
+/**
+ * Get the site and page input elements 
+ * @param {string} siteId The site id
+ * @param {string} pageUrl The page url
+ * @param {string} lang The page language
+ * @returns {object} htmlElement with the site and page inputs
+ */
+export function siteAndPageInput(siteId, pageUrl, lang = "el") {
+    const siteAndPageInputs = `<input type="hidden" name="_siteId" value="${siteId}"><input type="hidden" name="_pageUrl" value="${pageUrl}"><input type="hidden" name="_lang" value="${lang}">`;
+    return {
+        element: "htmlElement",
+        params: {
+            text: {
+                en: siteAndPageInputs,
+                el: siteAndPageInputs,
+                tr: siteAndPageInputs
+            }
+        }
+    };
+}
+
 /**
  * Error page template
  * @param {object} title the title text element 

package/src/utils/govcyApiDetection.mjs

@@ -0,0 +1,17 @@
+/**
+ * Determines if a request is targeting an API endpoint.
+ * Currently matches:
+ * - Accept header with application/json
+ * - URLs ending with /upload or /download under a site/page structure
+ *
+ * @param {object} req - Express request object
+ * @returns {boolean}
+ */
+export function isApiRequest(req) {
+  const acceptJson = (req.headers?.accept || "").toLowerCase().includes("application/json");
+
+  const apiUrlPattern =  /^\/apis\/[^/]+\/[^/]+\/(upload|download)$/;
+  const isStructuredApiUrl = apiUrlPattern.test(req.originalUrl || req.url);
+
+  return acceptJson || isStructuredApiUrl;
+}