@mailoo/blog 1.34.2 → 1.34.3

package/README.md

@@ -33,15 +33,24 @@ const client = createMailooBlogClient(config, {
 })
 ```
 
-A **site-relative** prefix is copied onto rewritten `ogImageUrl`, image URLs
-in `htmlContent` / `content`, and JSON-LD `image` / `logo`. That path is the
-right `src` for `<img>`. `og:image`, `twitter:image`, and JSON-LD `image` /
-`logo` must be **absolute** and resolved against the **current request
-origin** (`X-Forwarded-Host` or `Host`, plus `X-Forwarded-Proto`). Do not
-bake a fixed `SITE_URL` into this option: the same post can be served on
-more than one host. Without `metadataBase`, Next.js prefixes a relative
-`openGraph.images` with `http://localhost:3000`. Leave `htmlContent` image
-URLs relative.
+A site-relative prefix is copied onto rewritten `ogImageUrl` and image URLs
+in `htmlContent` / JSON-LD. Leave those paths as `<img src>`. Do not pass
+`post.ogImageUrl` into `openGraph.images` as-is. Absolutize against the
+**current request origin** (`X-Forwarded-Host` or `Host`, plus
+`X-Forwarded-Proto`). Do not bake a fixed `SITE_URL` into this option.
+Without `metadataBase`, Next.js emits `http://localhost:3000/…`.
+
+Facebook needs absolute `https://`; MIME `image/jpeg` | `image/gif` |
+`image/png`; and `og:image:type` / `width` / `height` (min 200×200, max
+8 MB). The package does not supply width/height — probe the proxy (Range
+`bytes=0-524288`).
+
+`Allow` the proxy path in the `*` robots group for Twitter/LinkedIn and
+RFC 9309. That is **not** enough for Facebook: `Disallow: /api/` wins over
+`Allow: /api/v1/mailoo-image` and the debugger reports a synthetic 403
+even when the origin returned 200. Add `User-agent: facebookexternalhit`
+/ `Allow: /`. Do not expect that group to override `Disallow: /api/` —
+omit `Disallow: /api/` or serve the proxy outside `/api/`.
 
 ```ts
 import { headers } from 'next/headers'
@@ -61,10 +70,40 @@ function absoluteSocialImageUrl(imageUrl: string, origin: string): string {
   return new URL(imageUrl, `${origin}/`).toString()
 }
 
+async function probeOgImage(imageUrl: string): Promise<{
+  url: string
+  secureUrl: string
+  type: 'image/jpeg' | 'image/gif' | 'image/png'
+  width: number
+  height: number
+}> {
+  const res = await fetch(imageUrl, {
+    headers: { Range: 'bytes=0-524288' },
+  })
+  if (!res.ok && res.status !== 206) {
+    throw new Error(`og:image probe failed: HTTP ${res.status}`)
+  }
+  const type = (res.headers.get('content-type') ?? '')
+    .split(';')[0]
+    ?.trim()
+    .toLowerCase()
+  if (type !== 'image/jpeg' && type !== 'image/gif' && type !== 'image/png') {
+    throw new Error(
+      `og:image type must be jpeg, gif or png, got ${type || 'missing'}`
+    )
+  }
+  // Host: parse PNG IHDR / JPEG SOF / GIF header of the body.
+  const { width, height } = parseImageDimensions(
+    new Uint8Array(await res.arrayBuffer())
+  )
+  return { url: imageUrl, secureUrl: imageUrl, type, width, height }
+}
+
 const origin = await requestOrigin()
-const ogImage = post.ogImageUrl
+const absolute = post.ogImageUrl
   ? absoluteSocialImageUrl(post.ogImageUrl, origin)
   : undefined
+const image = absolute ? await probeOgImage(absolute) : undefined
 ```
 
 Mount `createPublicImageContentHandler` from `@mailoo/images/routes` on that

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mailoo/blog",
-  "version": "1.34.2",
+  "version": "1.34.3",
   "description": "Headless Mailoo Blog module for Next.js (BFF routes, server client, components)",
   "license": "LicenseRef-Mailoo-NoModification",
   "homepage": "https://mailoo.app/en/support/docs/integrations/nextjs-packages",
@@ -69,7 +69,7 @@
     "LICENSE"
   ],
   "dependencies": {
-    "@mailoo/images": "1.34.2"
+    "@mailoo/images": "1.34.3"
   },
   "peerDependencies": {
     "@mailoo/next-core": "^1.18.4",
@@ -88,7 +88,7 @@
     }
   },
   "devDependencies": {
-    "@mailoo/next-core": "1.34.2",
+    "@mailoo/next-core": "1.34.3",
     "@types/node": "^25.9.5",
     "@types/react": "^19.2.18",
     "@types/react-dom": "^19.2.7",