@pantheon-systems/p1-next-sdk 0.20.0 → 0.20.1

package/dist/handler.js

@@ -2,6 +2,7 @@ import { NextResponse } from "next/server";
 import { ensureInitialized } from "@pantheon-systems/puck-css/server";
 import { runWithAuthToken } from "@pantheon-systems/puck-css/server";
 import { extractBearerToken } from "./auth-utils";
+import { verifyEditorAccess } from "./verify-editor-access";
 import { getPageData, getRemoteDatasources, getEditorContext, getDatasourceContext, getRoutes, postPublish, postRevalidate, postResolvePreview, postPreviewMeta, postRemoteDatasources, deleteRemoteDatasources, } from "./handler-actions";
 function parseP1Segments(p1) {
     if (p1.length === 0)
@@ -15,6 +16,24 @@ function withAuth(request, fn) {
         return runWithAuthToken(token, fn);
     return NextResponse.json({ error: "unauthorized" }, { status: 401 });
 }
+async function withEditorAccess(request, opts, fn) {
+    const token = extractBearerToken(request);
+    if (!token)
+        return NextResponse.json({ error: "unauthorized" }, { status: 401 });
+    const access = await verifyEditorAccess({
+        token,
+        p1BaseUrl: opts.p1BaseUrl,
+        siteId: opts.p1SiteId,
+        branchId: opts.p1BranchId,
+    });
+    if (access.status === "unauthenticated") {
+        return NextResponse.json({ error: "unauthorized" }, { status: 401 });
+    }
+    if (access.status === "forbidden") {
+        return NextResponse.json({ error: "forbidden" }, { status: 403 });
+    }
+    return runWithAuthToken(token, fn);
+}
 export function createP1Handler(opts) {
     const init = () => ensureInitialized(opts);
     async function GET(request, { params }) {
@@ -51,7 +70,7 @@ export function createP1Handler(opts) {
         if (action === "preview-meta")
             return postPreviewMeta(request);
         if (action === "datasources")
-            return withAuth(request, () => postRemoteDatasources(request));
+            return withEditorAccess(request, opts, () => postRemoteDatasources(request));
         return NextResponse.json({ error: "not_found" }, { status: 404 });
     }
     async function DELETE(request, { params }) {
@@ -59,7 +78,7 @@ export function createP1Handler(opts) {
         const { p1 = [] } = await params;
         const { action } = parseP1Segments(p1);
         if (action === "datasources")
-            return withAuth(request, () => deleteRemoteDatasources(request));
+            return withEditorAccess(request, opts, () => deleteRemoteDatasources(request));
         return NextResponse.json({ error: "not_found" }, { status: 404 });
     }
     return { GET, POST, DELETE };

package/dist/routes/remote-datasources-api.d.ts

@@ -1,4 +1,5 @@
 import { NextResponse } from "next/server";
+export declare const REDACTED_HEADER_VALUE = "[redacted]";
 export { getRemoteDatasources as GET, postRemoteDatasources as POST, deleteRemoteDatasources as DELETE };
 export declare function getRemoteDatasources(request: Request): Promise<NextResponse<{
     ok: boolean;

package/dist/routes/remote-datasources-api.js

@@ -2,6 +2,45 @@ import { revalidatePath } from "next/cache";
 import { NextResponse } from "next/server";
 import { deleteGlobalRemoteDatasource, deletePageRemoteDatasource, idConflictsForRemoteDatasourceScope, listRemoteDatasourcesForPage, normalizeRemoteDatasourceDefinition, upsertGlobalRemoteDatasource, upsertPageRemoteDatasource, } from "@pantheon-systems/puck-css/server";
 import { normalizePath } from "@pantheon-systems/puck-css/server";
+export const REDACTED_HEADER_VALUE = "[redacted]";
+function redactHeaders(def) {
+    if (!def.headers)
+        return def;
+    const headers = {};
+    for (const key of Object.keys(def.headers)) {
+        headers[key] = REDACTED_HEADER_VALUE;
+    }
+    return { ...def, headers };
+}
+function originOf(urlTemplate) {
+    try {
+        const { origin } = new URL(urlTemplate);
+        return origin === "null" ? null : origin;
+    }
+    catch {
+        return null;
+    }
+}
+function sameOrigin(a, b) {
+    const origin = originOf(a.urlTemplate);
+    return origin !== null && origin === originOf(b.urlTemplate);
+}
+function restoreRedactedHeaders(definition, stored) {
+    if (!definition.headers)
+        return definition;
+    const restorable = stored !== undefined && sameOrigin(definition, stored);
+    const headers = {};
+    for (const [key, value] of Object.entries(definition.headers)) {
+        if (value !== REDACTED_HEADER_VALUE) {
+            headers[key] = value;
+        }
+        else if (restorable && stored.headers?.[key]) {
+            headers[key] = stored.headers[key];
+        }
+    }
+    const { headers: _omit, ...rest } = definition;
+    return Object.keys(headers).length > 0 ? { ...rest, headers } : rest;
+}
 export { getRemoteDatasources as GET, postRemoteDatasources as POST, deleteRemoteDatasources as DELETE };
 export async function getRemoteDatasources(request) {
     const url = new URL(request.url);
@@ -13,8 +52,8 @@ export async function getRemoteDatasources(request) {
     return NextResponse.json({
         ok: true,
         path,
-        global: data.global,
-        page: data.page,
+        global: data.global.map(redactHeaders),
+        page: data.page.map(redactHeaders),
     });
 }
 export async function postRemoteDatasources(request) {
@@ -33,13 +72,16 @@ export async function postRemoteDatasources(request) {
     if (!path) {
         return NextResponse.json({ ok: false, error: "invalid_path" }, { status: 400 });
     }
-    const definition = normalizeRemoteDatasourceDefinition(body.definition);
-    if (!definition) {
+    const incoming = normalizeRemoteDatasourceDefinition(body.definition);
+    if (!incoming) {
         return NextResponse.json({ ok: false, error: "invalid_definition" }, { status: 400 });
     }
-    else if (idConflictsForRemoteDatasourceScope(scope, definition.id, path)) {
+    else if (idConflictsForRemoteDatasourceScope(scope, incoming.id, path)) {
         return NextResponse.json({ ok: false, error: "id_conflict" }, { status: 409 });
     }
+    const existing = listRemoteDatasourcesForPage(path);
+    const stored = (scope === "global" ? existing.global : existing.page).find((d) => d.id === incoming.id);
+    const definition = restoreRedactedHeaders(incoming, stored);
     if (scope === "global") {
         upsertGlobalRemoteDatasource(definition);
     }

package/dist/verify-editor-access.d.ts

@@ -0,0 +1,24 @@
+export type EditorAccessResult = {
+    status: "allowed";
+} | {
+    status: "unauthenticated";
+} | {
+    status: "forbidden";
+};
+export interface VerifyEditorAccessOptions {
+    /** Bearer token presented by the caller, without the `Bearer ` prefix. */
+    token: string;
+    /** Base URL of the API. Defaults to the production API. */
+    p1BaseUrl?: string;
+    /** Site the caller is trying to modify. */
+    siteId?: string;
+    /** Branch to check the caller's role on. Defaults to the site's main branch. */
+    branchId?: string;
+}
+/**
+ * Checks that the bearer token belongs to a caller who may edit documents on the
+ * site. A caller the API refuses, a caller without edit permission, or a site
+ * with no main branch to check against is `forbidden`; a missing token or site,
+ * or any other failure to verify, is reported as `unauthenticated`.
+ */
+export declare function verifyEditorAccess(opts: VerifyEditorAccessOptions): Promise<EditorAccessResult>;

package/dist/verify-editor-access.js

@@ -0,0 +1,40 @@
+import { getSharedBranchId } from "@pantheon-systems/puck-css/server";
+function configuredBranchId(branchId) {
+    const trimmed = branchId?.trim();
+    if (!trimmed || trimmed === "main")
+        return undefined;
+    return trimmed;
+}
+export async function verifyEditorAccess(opts) {
+    try {
+        const { token, siteId } = opts;
+        if (!token || !siteId)
+            return { status: "unauthenticated" };
+        const mod = await import("@pantheon-systems/css-client");
+        const client = new mod.P1Client({
+            baseUrl: opts.p1BaseUrl ?? mod.PRODUCTION_BASE_URL,
+            authProvider: async () => `Bearer ${token}`,
+        });
+        let branchId = configuredBranchId(opts.branchId) ??
+            configuredBranchId(getSharedBranchId() ?? undefined);
+        if (!branchId) {
+            const branches = await client.branches.list(siteId);
+            branchId = branches.find((b) => b.isMain)?.id;
+        }
+        if (!branchId)
+            return { status: "forbidden" };
+        const role = await client.auth.getRole(siteId, branchId);
+        return role.permissions.canEditDocuments === true
+            ? { status: "allowed" }
+            : { status: "forbidden" };
+    }
+    catch (err) {
+        if (await isForbidden(err))
+            return { status: "forbidden" };
+        return { status: "unauthenticated" };
+    }
+}
+async function isForbidden(err) {
+    const mod = await import("@pantheon-systems/css-client");
+    return err instanceof mod.P1ApiError && err.status === 403;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pantheon-systems/p1-next-sdk",
-  "version": "0.20.0",
+  "version": "0.20.1",
   "license": "UNLICENSED",
   "description": "Next.js SDK for P1 editor integration",
   "publishConfig": {
@@ -42,11 +42,11 @@
     "!dist/**/*.map"
   ],
   "dependencies": {
-    "launchdarkly-js-client-sdk": "^3.9.3",
-    "server-only": "^0.0.1",
-    "@pantheon-systems/css-client": "0.20.0",
+    "@pantheon-systems/css-client": "0.20.1",
     "@pantheon-systems/p1-ai-chat": "0.10.0",
-    "@pantheon-systems/puck-css": "0.20.0"
+    "@pantheon-systems/puck-css": "0.20.1",
+    "launchdarkly-js-client-sdk": "^3.9.3",
+    "server-only": "^0.0.1"
   },
   "peerDependencies": {
     "@pantheon-systems/pds-toolkit-react": ">=2.0.0-alpha.92",
@@ -56,6 +56,7 @@
     "react-dom": ">=18.0.0"
   },
   "devDependencies": {
+    "@pantheon-systems/eslint-config": "0.1.0",
     "@testing-library/dom": "^10.4.1",
     "@testing-library/react": "^16.3.2",
     "@types/node": "^20.19.30",
@@ -63,8 +64,7 @@
     "eslint": "^9.27.0",
     "jsdom": "^24.1.3",
     "typescript": "^5.9.3",
-    "vitest": "^4.1.5",
-    "@pantheon-systems/eslint-config": "0.1.0"
+    "vitest": "^4.1.5"
   },
   "homepage": "https://github.com/pantheon-systems/p1-platform/tree/main/packages/p1-next-sdk",
   "scripts": {