@opensaas/keystone-nextjs-auth 18.0.0 → 18.0.1

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @opensaas-keystone/nextjs-auth
 
+## 18.0.1
+
+### Patch Changes
+
+- 9b6052a: Fix access issue to allow `/api/__keystone_api_build`
+
 ## 18.0.0
 
 ### Major Changes

package/dist/opensaas-keystone-nextjs-auth.cjs.dev.js

@@ -267,6 +267,10 @@ function createAuth({
     } = context;
     const pathname = url__default["default"].parse(req === null || req === void 0 ? void 0 : req.url).pathname;
 
+    if (pathname === `${customPath}/api/__keystone_api_build`) {
+      return;
+    }
+
     if (isValidSession) {
       if (pathname === `${customPath}/api/auth/signin`) {
         return {
@@ -452,11 +456,15 @@ function createAuth({
         },
         enableSessionItem: true,
         isAccessAllowed: async context => {
-          var _context$req, _keystoneConfig$ui3;
+          var _context$req, _context$req2, _keystoneConfig$ui3;
 
-          // Allow access to the adminMeta data from the /init path to correctly render that page
+          if (process.env.NODE_ENV !== 'production' && ((_context$req = context.req) === null || _context$req === void 0 ? void 0 : _context$req.url) !== undefined && new _URL__default["default"](context.req.url, 'http://example.com').pathname === `${customPath}/api/__keystone_api_build`) {
+            return true;
+          } // Allow access to the adminMeta data from the /init path to correctly render that page
           // even if the user isn't logged in (which should always be the case if they're seeing /init)
-          const headers = (_context$req = context.req) === null || _context$req === void 0 ? void 0 : _context$req.headers;
+
+
+          const headers = (_context$req2 = context.req) === null || _context$req2 === void 0 ? void 0 : _context$req2.headers;
           const host = headers ? headers['x-forwarded-host'] || headers.host : null;
           const thisUrl = headers !== null && headers !== void 0 && headers.referer ? new _URL__default["default"](headers.referer) : undefined;
           const accessingInitPage = (thisUrl === null || thisUrl === void 0 ? void 0 : thisUrl.pathname) === '/init' && (thisUrl === null || thisUrl === void 0 ? void 0 : thisUrl.host) === host && (await context.sudo().query[listKey].count({})) === 0;

package/dist/opensaas-keystone-nextjs-auth.cjs.prod.js

@@ -267,6 +267,10 @@ function createAuth({
     } = context;
     const pathname = url__default["default"].parse(req === null || req === void 0 ? void 0 : req.url).pathname;
 
+    if (pathname === `${customPath}/api/__keystone_api_build`) {
+      return;
+    }
+
     if (isValidSession) {
       if (pathname === `${customPath}/api/auth/signin`) {
         return {
@@ -452,11 +456,11 @@ function createAuth({
         },
         enableSessionItem: true,
         isAccessAllowed: async context => {
-          var _context$req, _keystoneConfig$ui3;
-
-          // Allow access to the adminMeta data from the /init path to correctly render that page
+          var _context$req2, _keystoneConfig$ui3;
           // even if the user isn't logged in (which should always be the case if they're seeing /init)
-          const headers = (_context$req = context.req) === null || _context$req === void 0 ? void 0 : _context$req.headers;
+
+
+          const headers = (_context$req2 = context.req) === null || _context$req2 === void 0 ? void 0 : _context$req2.headers;
           const host = headers ? headers['x-forwarded-host'] || headers.host : null;
           const thisUrl = headers !== null && headers !== void 0 && headers.referer ? new _URL__default["default"](headers.referer) : undefined;
           const accessingInitPage = (thisUrl === null || thisUrl === void 0 ? void 0 : thisUrl.pathname) === '/init' && (thisUrl === null || thisUrl === void 0 ? void 0 : thisUrl.host) === host && (await context.sudo().query[listKey].count({})) === 0;

package/dist/opensaas-keystone-nextjs-auth.esm.js

@@ -233,6 +233,10 @@ function createAuth({
     } = context;
     const pathname = url.parse(req === null || req === void 0 ? void 0 : req.url).pathname;
 
+    if (pathname === `${customPath}/api/__keystone_api_build`) {
+      return;
+    }
+
     if (isValidSession) {
       if (pathname === `${customPath}/api/auth/signin`) {
         return {
@@ -418,11 +422,15 @@ function createAuth({
         },
         enableSessionItem: true,
         isAccessAllowed: async context => {
-          var _context$req, _keystoneConfig$ui3;
+          var _context$req, _context$req2, _keystoneConfig$ui3;
 
-          // Allow access to the adminMeta data from the /init path to correctly render that page
+          if (process.env.NODE_ENV !== 'production' && ((_context$req = context.req) === null || _context$req === void 0 ? void 0 : _context$req.url) !== undefined && new _URL(context.req.url, 'http://example.com').pathname === `${customPath}/api/__keystone_api_build`) {
+            return true;
+          } // Allow access to the adminMeta data from the /init path to correctly render that page
           // even if the user isn't logged in (which should always be the case if they're seeing /init)
-          const headers = (_context$req = context.req) === null || _context$req === void 0 ? void 0 : _context$req.headers;
+
+
+          const headers = (_context$req2 = context.req) === null || _context$req2 === void 0 ? void 0 : _context$req2.headers;
           const host = headers ? headers['x-forwarded-host'] || headers.host : null;
           const thisUrl = headers !== null && headers !== void 0 && headers.referer ? new _URL(headers.referer) : undefined;
           const accessingInitPage = (thisUrl === null || thisUrl === void 0 ? void 0 : thisUrl.pathname) === '/init' && (thisUrl === null || thisUrl === void 0 ? void 0 : thisUrl.host) === host && (await context.sudo().query[listKey].count({})) === 0;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opensaas/keystone-nextjs-auth",
-  "version": "18.0.0",
+  "version": "18.0.1",
   "repository": "https://github.com/opensaasau/keystone-nextjs-auth",
   "license": "MIT",
   "main": "dist/opensaas-keystone-nextjs-auth.cjs.js",

package/src/index.ts

@@ -73,7 +73,9 @@ export function createAuth<GeneratedListTypes extends BaseGeneratedListTypes>({
   }) => {
     const { req, session } = context;
     const pathname = url.parse(req?.url!).pathname!;
-
+    if (pathname === `${customPath}/api/__keystone_api_build`) {
+      return;
+    }
     if (isValidSession) {
       if (pathname === `${customPath}/api/auth/signin`) {
         return { kind: 'redirect', to: `${customPath}` };
@@ -244,6 +246,14 @@ export function createAuth<GeneratedListTypes extends BaseGeneratedListTypes>({
           keystoneConfig?.ui?.pageMiddleware?.(args),
         enableSessionItem: true,
         isAccessAllowed: async (context: KeystoneContext) => {
+          if (
+            process.env.NODE_ENV !== 'production' &&
+            context.req?.url !== undefined &&
+            new URL(context.req.url, 'http://example.com').pathname ===
+            `${customPath}/api/__keystone_api_build`
+          ) {
+            return true;
+          }
           // Allow access to the adminMeta data from the /init path to correctly render that page
           // even if the user isn't logged in (which should always be the case if they're seeing /init)
           const headers = context.req?.headers;