@prismicio/next 2.3.4-pr.175.5f9614e → 2.3.4-pr.175.88bf097

package/dist/pages/exitPreview.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exitPreview.d.ts","names":[],"sources":["../../src/pages/exitPreview.ts"],"mappings":";;;YAKY;;;;;;EAMX,MAAM;;;;;;EAON,KAAK;;;;;;;;;;;;;;;;;wBAkBU,YAAY,QAAQ"}
+{"version":3,"file":"exitPreview.d.ts","names":[],"sources":["../../src/pages/exitPreview.ts"],"mappings":";;;YAMY;;;;;;EAMX,MAAM;;;;;;EAON,KAAK;;;;;;;;;;;;;;;;;wBAkBU,YAAY,QAAQ"}

package/dist/pages/exitPreview.js

@@ -1,5 +1,5 @@
-import { previewSessionCookie } from "../lib/toolbarV5.js";
 import { appendCookie } from "./appendCookie.js";
+import { cookie } from "@prismicio/client";
 //#region src/pages/exitPreview.ts
 /**
 * Ends a Prismic preview session within a Next.js app. This function should be used in an API
@@ -18,7 +18,7 @@ import { appendCookie } from "./appendCookie.js";
 */
 function exitPreview(config) {
 	config.res.clearPreviewData();
-	appendCookie(config.res, previewSessionCookie, "", /* @__PURE__ */ new Date(0));
+	for (const name of [cookie.preview, cookie.previewSession]) appendCookie(config.res, `${name}=; Expires=${(/* @__PURE__ */ new Date(0)).toUTCString()}`);
 	config.res.setHeader("Cache-Control", "no-store");
 	config.res.json({ success: true });
 }

package/dist/pages/exitPreview.js.map

@@ -1 +1 @@
-{"version":3,"file":"exitPreview.js","names":[],"sources":["../../src/pages/exitPreview.ts"],"sourcesContent":["import { previewSessionCookie } from \"../lib/toolbarV5\"\nimport { appendCookie } from \"./appendCookie\"\nimport type { NextApiRequestLike, NextApiResponseLike } from \"./types\"\n\n/** Configuration for `exitPreview()`. */\nexport type ExitPreviewAPIRouteConfig = {\n\t/**\n\t * The `req` object from a Next.js API route.\n\t *\n\t * @see Next.js API route docs: \\<https://nextjs.org/docs/api-routes/introduction\\>\n\t */\n\treq?: NextApiRequestLike\n\n\t/**\n\t * The `res` object from a Next.js API route.\n\t *\n\t * @see Next.js API route docs: \\<https://nextjs.org/docs/api-routes/introduction\\>\n\t */\n\tres: NextApiResponseLike\n}\n\n/**\n * Ends a Prismic preview session within a Next.js app. This function should be used in an API\n * route.\n *\n * @example\n * \t;```typescript\n * \t// src/pages/api/exit-preview.js\n *\n * \timport { exitPreview } from \"@prismicio/next\"\n *\n * \texport default function handler(_req, res) {\n * \t\treturn exitPreview({ res })\n * \t}\n * \t```\n */\nexport function exitPreview(config: ExitPreviewAPIRouteConfig): void {\n\tconfig.res.clearPreviewData()\n\tappendCookie(config.res, previewSessionCookie, \"\", new Date(0))\n\n\t// `Cache-Control` header is used to prevent CDN-level caching.\n\tconfig.res.setHeader(\"Cache-Control\", \"no-store\")\n\n\tconfig.res.json({ success: true })\n\n\treturn\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAoCA,SAAgB,YAAY,QAAyC;CACpE,OAAO,IAAI,iBAAiB;CAC5B,aAAa,OAAO,KAAK,sBAAsB,oBAAI,IAAI,KAAK,CAAC,CAAC;CAG9D,OAAO,IAAI,UAAU,iBAAiB,UAAU;CAEhD,OAAO,IAAI,KAAK,EAAE,SAAS,KAAK,CAAC;AAGlC"}
+{"version":3,"file":"exitPreview.js","names":["prismicCookie"],"sources":["../../src/pages/exitPreview.ts"],"sourcesContent":["import { cookie as prismicCookie } from \"@prismicio/client\"\n\nimport { appendCookie } from \"./appendCookie\"\nimport type { NextApiRequestLike, NextApiResponseLike } from \"./types\"\n\n/** Configuration for `exitPreview()`. */\nexport type ExitPreviewAPIRouteConfig = {\n\t/**\n\t * The `req` object from a Next.js API route.\n\t *\n\t * @see Next.js API route docs: \\<https://nextjs.org/docs/api-routes/introduction\\>\n\t */\n\treq?: NextApiRequestLike\n\n\t/**\n\t * The `res` object from a Next.js API route.\n\t *\n\t * @see Next.js API route docs: \\<https://nextjs.org/docs/api-routes/introduction\\>\n\t */\n\tres: NextApiResponseLike\n}\n\n/**\n * Ends a Prismic preview session within a Next.js app. This function should be used in an API\n * route.\n *\n * @example\n * \t;```typescript\n * \t// src/pages/api/exit-preview.js\n *\n * \timport { exitPreview } from \"@prismicio/next\"\n *\n * \texport default function handler(_req, res) {\n * \t\treturn exitPreview({ res })\n * \t}\n * \t```\n */\nexport function exitPreview(config: ExitPreviewAPIRouteConfig): void {\n\tconfig.res.clearPreviewData()\n\tfor (const name of [prismicCookie.preview, prismicCookie.previewSession]) {\n\t\tappendCookie(config.res, `${name}=; Expires=${new Date(0).toUTCString()}`)\n\t}\n\n\t// `Cache-Control` header is used to prevent CDN-level caching.\n\tconfig.res.setHeader(\"Cache-Control\", \"no-store\")\n\n\tconfig.res.json({ success: true })\n\n\treturn\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAqCA,SAAgB,YAAY,QAAyC;CACpE,OAAO,IAAI,iBAAiB;CAC5B,KAAK,MAAM,QAAQ,CAACA,OAAc,SAASA,OAAc,cAAc,GACtE,aAAa,OAAO,KAAK,GAAG,KAAK,8BAAa,IAAI,KAAK,CAAC,EAAA,CAAE,YAAY,GAAG;CAI1E,OAAO,IAAI,UAAU,iBAAiB,UAAU;CAEhD,OAAO,IAAI,KAAK,EAAE,SAAS,KAAK,CAAC;AAGlC"}

package/dist/pages/redirectToPreviewURL.cjs

@@ -1,23 +1,19 @@
-const require_toolbarV5 = require("../lib/toolbarV5.cjs");
+const require_getSafePath = require("../lib/getSafePath.cjs");
 const require_appendCookie = require("./appendCookie.cjs");
 let _prismicio_client = require("@prismicio/client");
 //#region src/pages/redirectToPreviewURL.ts
 async function redirectToPreviewURL(config) {
 	const { client, req, res, linkResolver, defaultURL = "/", basePath = "" } = config;
-	let previewToken = req.query.token?.toString();
+	const previewToken = req.query.token?.toString();
 	const session = req.query.session?.toString();
 	if (session) {
-		if (!previewToken) {
-			previewToken = await require_toolbarV5.getPreviewSessionRef(client, session);
-			res.setPreviewData({ ref: previewToken });
-		}
-		require_appendCookie.appendCookie(res, _prismicio_client.cookie.preview, previewToken);
-		require_appendCookie.appendCookie(res, require_toolbarV5.previewSessionCookie, session);
-		const path = require_toolbarV5.getSafePath(req.query.path?.toString());
-		if (path) {
-			res.redirect(path);
-			return;
-		}
+		require_appendCookie.appendCookie(res, `${_prismicio_client.cookie.previewSession}=${encodeURIComponent(session)}`);
+		if (previewToken) require_appendCookie.appendCookie(res, `${_prismicio_client.cookie.preview}=${encodeURIComponent(previewToken)}`);
+	}
+	const path = require_getSafePath.getSafePath(req.query.path?.toString());
+	if (path) {
+		res.redirect(path);
+		return;
 	}
 	const previewURL = await client.resolvePreviewURL({
 		linkResolver,

package/dist/pages/redirectToPreviewURL.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"redirectToPreviewURL.cjs","names":["getPreviewSessionRef","prismicCookie","previewSessionCookie","getSafePath"],"sources":["../../src/pages/redirectToPreviewURL.ts"],"sourcesContent":["import { cookie as prismicCookie, type LinkResolverFunction, type Client } from \"@prismicio/client\"\n\nimport { getPreviewSessionRef, getSafePath, previewSessionCookie } from \"../lib/toolbarV5\"\nimport { appendCookie } from \"./appendCookie\"\nimport type { NextApiRequestLike, NextApiResponseLike } from \"./types\"\n\nexport type RedirectToPreviewURLConfig = {\n\t/** The Prismic client configured for the preview session's repository. */\n\t// `Pick` is used to use the smallest possible subset of\n\t// `prismic.Client`. Doing this reduces the surface area for breaking\n\t// type changes.\n\tclient: Pick<Client, \"resolvePreviewURL\" | \"documentAPIEndpoint\">\n\n\t/**\n\t * The `req` object from a Next.js API route.\n\t *\n\t * @see Next.js API route docs: \\<https://nextjs.org/docs/pages/building-your-application/routing/api-routes\\>\n\t */\n\treq: NextApiRequestLike\n\n\t/**\n\t * The `res` object from a Next.js API route.\n\t *\n\t * @see Next.js API route docs: \\<https://nextjs.org/docs/pages/building-your-application/routing/api-routes\\>\n\t */\n\tres: NextApiResponseLike\n\n\t/**\n\t * A Link Resolver used to resolve the previewed document's URL.\n\t *\n\t * @see To learn more about Link Resolver: {@link https://prismic.io/docs/core-concepts/link-resolver-route-resolver}\n\t */\n\tlinkResolver?: LinkResolverFunction\n\n\t/**\n\t * The default redirect URL if a URL cannot be determined for the previewed document.\n\t *\n\t * **Note**: If you `next.config.js` file contains a `basePath`, the `defaultURL` option must\n\t * _not_ include it. Instead, provide the `basePath` property using the `basePath` option.\n\t */\n\tdefaultURL?: string\n\n\t/**\n\t * The `basePath` for the Next.js app as it is defined in `next.config.js`. This option can be\n\t * omitted if the app does not have a `basePath`.\n\t *\n\t * @remarks\n\t *   The Router Handler or API route is unable to detect the app's `basePath` automatically. It\n\t *   must be provided to `redirectToPreviewURL()` manually.\n\t */\n\tbasePath?: string\n}\n\nexport async function redirectToPreviewURL(config: RedirectToPreviewURLConfig): Promise<void> {\n\tconst { client, req, res, linkResolver, defaultURL = \"/\", basePath = \"\" } = config\n\n\tlet previewToken = req.query.token?.toString()\n\n\t// The toolbar's v5 flow follows the session in the preview cookies. Share\n\t// links only carry the session, so `setPreviewData()` has no ref for them.\n\tconst session = req.query.session?.toString()\n\tif (session) {\n\t\tif (!previewToken) {\n\t\t\tpreviewToken = await getPreviewSessionRef(client, session)\n\t\t\tres.setPreviewData({ ref: previewToken })\n\t\t}\n\t\tappendCookie(res, prismicCookie.preview, previewToken)\n\t\tappendCookie(res, previewSessionCookie, session)\n\n\t\tconst path = getSafePath(req.query.path?.toString())\n\t\tif (path) {\n\t\t\tres.redirect(path)\n\n\t\t\treturn\n\t\t}\n\t}\n\n\tconst previewURL = await client.resolvePreviewURL({\n\t\tlinkResolver,\n\t\tdefaultURL,\n\t\tpreviewToken,\n\t})\n\n\tres.redirect(basePath + previewURL)\n\n\treturn\n}\n"],"mappings":";;;;AAqDA,eAAsB,qBAAqB,QAAmD;CAC7F,MAAM,EAAE,QAAQ,KAAK,KAAK,cAAc,aAAa,KAAK,WAAW,OAAO;CAE5E,IAAI,eAAe,IAAI,MAAM,OAAO,SAAS;CAI7C,MAAM,UAAU,IAAI,MAAM,SAAS,SAAS;CAC5C,IAAI,SAAS;EACZ,IAAI,CAAC,cAAc;GAClB,eAAe,MAAMA,kBAAAA,qBAAqB,QAAQ,OAAO;GACzD,IAAI,eAAe,EAAE,KAAK,aAAa,CAAC;EACzC;EACA,qBAAA,aAAa,KAAKC,kBAAAA,OAAc,SAAS,YAAY;EACrD,qBAAA,aAAa,KAAKC,kBAAAA,sBAAsB,OAAO;EAE/C,MAAM,OAAOC,kBAAAA,YAAY,IAAI,MAAM,MAAM,SAAS,CAAC;EACnD,IAAI,MAAM;GACT,IAAI,SAAS,IAAI;GAEjB;EACD;CACD;CAEA,MAAM,aAAa,MAAM,OAAO,kBAAkB;EACjD;EACA;EACA;CACD,CAAC;CAED,IAAI,SAAS,WAAW,UAAU;AAGnC"}
+{"version":3,"file":"redirectToPreviewURL.cjs","names":["prismicCookie","getSafePath"],"sources":["../../src/pages/redirectToPreviewURL.ts"],"sourcesContent":["import { cookie as prismicCookie, type LinkResolverFunction, type Client } from \"@prismicio/client\"\n\nimport { getSafePath } from \"../lib/getSafePath\"\nimport { appendCookie } from \"./appendCookie\"\nimport type { NextApiRequestLike, NextApiResponseLike } from \"./types\"\n\nexport type RedirectToPreviewURLConfig = {\n\t/** The Prismic client configured for the preview session's repository. */\n\t// `Pick` is used to use the smallest possible subset of\n\t// `prismic.Client`. Doing this reduces the surface area for breaking\n\t// type changes.\n\tclient: Pick<Client, \"resolvePreviewURL\">\n\n\t/**\n\t * The `req` object from a Next.js API route.\n\t *\n\t * @see Next.js API route docs: \\<https://nextjs.org/docs/pages/building-your-application/routing/api-routes\\>\n\t */\n\treq: NextApiRequestLike\n\n\t/**\n\t * The `res` object from a Next.js API route.\n\t *\n\t * @see Next.js API route docs: \\<https://nextjs.org/docs/pages/building-your-application/routing/api-routes\\>\n\t */\n\tres: NextApiResponseLike\n\n\t/**\n\t * A Link Resolver used to resolve the previewed document's URL.\n\t *\n\t * @see To learn more about Link Resolver: {@link https://prismic.io/docs/core-concepts/link-resolver-route-resolver}\n\t */\n\tlinkResolver?: LinkResolverFunction\n\n\t/**\n\t * The default redirect URL if a URL cannot be determined for the previewed document.\n\t *\n\t * **Note**: If you `next.config.js` file contains a `basePath`, the `defaultURL` option must\n\t * _not_ include it. Instead, provide the `basePath` property using the `basePath` option.\n\t */\n\tdefaultURL?: string\n\n\t/**\n\t * The `basePath` for the Next.js app as it is defined in `next.config.js`. This option can be\n\t * omitted if the app does not have a `basePath`.\n\t *\n\t * @remarks\n\t *   The Router Handler or API route is unable to detect the app's `basePath` automatically. It\n\t *   must be provided to `redirectToPreviewURL()` manually.\n\t */\n\tbasePath?: string\n}\n\nexport async function redirectToPreviewURL(config: RedirectToPreviewURLConfig): Promise<void> {\n\tconst { client, req, res, linkResolver, defaultURL = \"/\", basePath = \"\" } = config\n\n\tconst previewToken = req.query.token?.toString()\n\n\t// The toolbar's v5 flow follows this session from the ref the page shows. Without that ref, its\n\t// first ping would start the preview again, racing an early exit.\n\tconst session = req.query.session?.toString()\n\tif (session) {\n\t\tappendCookie(res, `${prismicCookie.previewSession}=${encodeURIComponent(session)}`)\n\t\tif (previewToken) {\n\t\t\tappendCookie(res, `${prismicCookie.preview}=${encodeURIComponent(previewToken)}`)\n\t\t}\n\t}\n\n\t// Share links return to the page they were opened from.\n\tconst path = getSafePath(req.query.path?.toString())\n\tif (path) {\n\t\tres.redirect(path)\n\n\t\treturn\n\t}\n\n\tconst previewURL = await client.resolvePreviewURL({\n\t\tlinkResolver,\n\t\tdefaultURL,\n\t\tpreviewToken,\n\t})\n\n\tres.redirect(basePath + previewURL)\n\n\treturn\n}\n"],"mappings":";;;;AAqDA,eAAsB,qBAAqB,QAAmD;CAC7F,MAAM,EAAE,QAAQ,KAAK,KAAK,cAAc,aAAa,KAAK,WAAW,OAAO;CAE5E,MAAM,eAAe,IAAI,MAAM,OAAO,SAAS;CAI/C,MAAM,UAAU,IAAI,MAAM,SAAS,SAAS;CAC5C,IAAI,SAAS;EACZ,qBAAA,aAAa,KAAK,GAAGA,kBAAAA,OAAc,eAAe,GAAG,mBAAmB,OAAO,GAAG;EAClF,IAAI,cACH,qBAAA,aAAa,KAAK,GAAGA,kBAAAA,OAAc,QAAQ,GAAG,mBAAmB,YAAY,GAAG;CAElF;CAGA,MAAM,OAAOC,oBAAAA,YAAY,IAAI,MAAM,MAAM,SAAS,CAAC;CACnD,IAAI,MAAM;EACT,IAAI,SAAS,IAAI;EAEjB;CACD;CAEA,MAAM,aAAa,MAAM,OAAO,kBAAkB;EACjD;EACA;EACA;CACD,CAAC;CAED,IAAI,SAAS,WAAW,UAAU;AAGnC"}

package/dist/pages/redirectToPreviewURL.d.cts

@@ -3,7 +3,7 @@ import { Client, LinkResolverFunction } from "@prismicio/client";
 //#region src/pages/redirectToPreviewURL.d.ts
 export type RedirectToPreviewURLConfig = {
   /** The Prismic client configured for the preview session's repository. */
-  client: Pick<Client, "resolvePreviewURL" | "documentAPIEndpoint">;
+  client: Pick<Client, "resolvePreviewURL">;
   /**
    * The `req` object from a Next.js API route.
    *

package/dist/pages/redirectToPreviewURL.d.ts

@@ -3,7 +3,7 @@ import { Client, LinkResolverFunction } from "@prismicio/client";
 //#region src/pages/redirectToPreviewURL.d.ts
 export type RedirectToPreviewURLConfig = {
   /** The Prismic client configured for the preview session's repository. */
-  client: Pick<Client, "resolvePreviewURL" | "documentAPIEndpoint">;
+  client: Pick<Client, "resolvePreviewURL">;
   /**
    * The `req` object from a Next.js API route.
    *

package/dist/pages/redirectToPreviewURL.js

@@ -1,23 +1,19 @@
-import { getPreviewSessionRef, getSafePath, previewSessionCookie } from "../lib/toolbarV5.js";
+import { getSafePath } from "../lib/getSafePath.js";
 import { appendCookie } from "./appendCookie.js";
 import { cookie } from "@prismicio/client";
 //#region src/pages/redirectToPreviewURL.ts
 async function redirectToPreviewURL(config) {
 	const { client, req, res, linkResolver, defaultURL = "/", basePath = "" } = config;
-	let previewToken = req.query.token?.toString();
+	const previewToken = req.query.token?.toString();
 	const session = req.query.session?.toString();
 	if (session) {
-		if (!previewToken) {
-			previewToken = await getPreviewSessionRef(client, session);
-			res.setPreviewData({ ref: previewToken });
-		}
-		appendCookie(res, cookie.preview, previewToken);
-		appendCookie(res, previewSessionCookie, session);
-		const path = getSafePath(req.query.path?.toString());
-		if (path) {
-			res.redirect(path);
-			return;
-		}
+		appendCookie(res, `${cookie.previewSession}=${encodeURIComponent(session)}`);
+		if (previewToken) appendCookie(res, `${cookie.preview}=${encodeURIComponent(previewToken)}`);
+	}
+	const path = getSafePath(req.query.path?.toString());
+	if (path) {
+		res.redirect(path);
+		return;
 	}
 	const previewURL = await client.resolvePreviewURL({
 		linkResolver,

package/dist/pages/redirectToPreviewURL.js.map

@@ -1 +1 @@
-{"version":3,"file":"redirectToPreviewURL.js","names":["prismicCookie"],"sources":["../../src/pages/redirectToPreviewURL.ts"],"sourcesContent":["import { cookie as prismicCookie, type LinkResolverFunction, type Client } from \"@prismicio/client\"\n\nimport { getPreviewSessionRef, getSafePath, previewSessionCookie } from \"../lib/toolbarV5\"\nimport { appendCookie } from \"./appendCookie\"\nimport type { NextApiRequestLike, NextApiResponseLike } from \"./types\"\n\nexport type RedirectToPreviewURLConfig = {\n\t/** The Prismic client configured for the preview session's repository. */\n\t// `Pick` is used to use the smallest possible subset of\n\t// `prismic.Client`. Doing this reduces the surface area for breaking\n\t// type changes.\n\tclient: Pick<Client, \"resolvePreviewURL\" | \"documentAPIEndpoint\">\n\n\t/**\n\t * The `req` object from a Next.js API route.\n\t *\n\t * @see Next.js API route docs: \\<https://nextjs.org/docs/pages/building-your-application/routing/api-routes\\>\n\t */\n\treq: NextApiRequestLike\n\n\t/**\n\t * The `res` object from a Next.js API route.\n\t *\n\t * @see Next.js API route docs: \\<https://nextjs.org/docs/pages/building-your-application/routing/api-routes\\>\n\t */\n\tres: NextApiResponseLike\n\n\t/**\n\t * A Link Resolver used to resolve the previewed document's URL.\n\t *\n\t * @see To learn more about Link Resolver: {@link https://prismic.io/docs/core-concepts/link-resolver-route-resolver}\n\t */\n\tlinkResolver?: LinkResolverFunction\n\n\t/**\n\t * The default redirect URL if a URL cannot be determined for the previewed document.\n\t *\n\t * **Note**: If you `next.config.js` file contains a `basePath`, the `defaultURL` option must\n\t * _not_ include it. Instead, provide the `basePath` property using the `basePath` option.\n\t */\n\tdefaultURL?: string\n\n\t/**\n\t * The `basePath` for the Next.js app as it is defined in `next.config.js`. This option can be\n\t * omitted if the app does not have a `basePath`.\n\t *\n\t * @remarks\n\t *   The Router Handler or API route is unable to detect the app's `basePath` automatically. It\n\t *   must be provided to `redirectToPreviewURL()` manually.\n\t */\n\tbasePath?: string\n}\n\nexport async function redirectToPreviewURL(config: RedirectToPreviewURLConfig): Promise<void> {\n\tconst { client, req, res, linkResolver, defaultURL = \"/\", basePath = \"\" } = config\n\n\tlet previewToken = req.query.token?.toString()\n\n\t// The toolbar's v5 flow follows the session in the preview cookies. Share\n\t// links only carry the session, so `setPreviewData()` has no ref for them.\n\tconst session = req.query.session?.toString()\n\tif (session) {\n\t\tif (!previewToken) {\n\t\t\tpreviewToken = await getPreviewSessionRef(client, session)\n\t\t\tres.setPreviewData({ ref: previewToken })\n\t\t}\n\t\tappendCookie(res, prismicCookie.preview, previewToken)\n\t\tappendCookie(res, previewSessionCookie, session)\n\n\t\tconst path = getSafePath(req.query.path?.toString())\n\t\tif (path) {\n\t\t\tres.redirect(path)\n\n\t\t\treturn\n\t\t}\n\t}\n\n\tconst previewURL = await client.resolvePreviewURL({\n\t\tlinkResolver,\n\t\tdefaultURL,\n\t\tpreviewToken,\n\t})\n\n\tres.redirect(basePath + previewURL)\n\n\treturn\n}\n"],"mappings":";;;;AAqDA,eAAsB,qBAAqB,QAAmD;CAC7F,MAAM,EAAE,QAAQ,KAAK,KAAK,cAAc,aAAa,KAAK,WAAW,OAAO;CAE5E,IAAI,eAAe,IAAI,MAAM,OAAO,SAAS;CAI7C,MAAM,UAAU,IAAI,MAAM,SAAS,SAAS;CAC5C,IAAI,SAAS;EACZ,IAAI,CAAC,cAAc;GAClB,eAAe,MAAM,qBAAqB,QAAQ,OAAO;GACzD,IAAI,eAAe,EAAE,KAAK,aAAa,CAAC;EACzC;EACA,aAAa,KAAKA,OAAc,SAAS,YAAY;EACrD,aAAa,KAAK,sBAAsB,OAAO;EAE/C,MAAM,OAAO,YAAY,IAAI,MAAM,MAAM,SAAS,CAAC;EACnD,IAAI,MAAM;GACT,IAAI,SAAS,IAAI;GAEjB;EACD;CACD;CAEA,MAAM,aAAa,MAAM,OAAO,kBAAkB;EACjD;EACA;EACA;CACD,CAAC;CAED,IAAI,SAAS,WAAW,UAAU;AAGnC"}
+{"version":3,"file":"redirectToPreviewURL.js","names":["prismicCookie"],"sources":["../../src/pages/redirectToPreviewURL.ts"],"sourcesContent":["import { cookie as prismicCookie, type LinkResolverFunction, type Client } from \"@prismicio/client\"\n\nimport { getSafePath } from \"../lib/getSafePath\"\nimport { appendCookie } from \"./appendCookie\"\nimport type { NextApiRequestLike, NextApiResponseLike } from \"./types\"\n\nexport type RedirectToPreviewURLConfig = {\n\t/** The Prismic client configured for the preview session's repository. */\n\t// `Pick` is used to use the smallest possible subset of\n\t// `prismic.Client`. Doing this reduces the surface area for breaking\n\t// type changes.\n\tclient: Pick<Client, \"resolvePreviewURL\">\n\n\t/**\n\t * The `req` object from a Next.js API route.\n\t *\n\t * @see Next.js API route docs: \\<https://nextjs.org/docs/pages/building-your-application/routing/api-routes\\>\n\t */\n\treq: NextApiRequestLike\n\n\t/**\n\t * The `res` object from a Next.js API route.\n\t *\n\t * @see Next.js API route docs: \\<https://nextjs.org/docs/pages/building-your-application/routing/api-routes\\>\n\t */\n\tres: NextApiResponseLike\n\n\t/**\n\t * A Link Resolver used to resolve the previewed document's URL.\n\t *\n\t * @see To learn more about Link Resolver: {@link https://prismic.io/docs/core-concepts/link-resolver-route-resolver}\n\t */\n\tlinkResolver?: LinkResolverFunction\n\n\t/**\n\t * The default redirect URL if a URL cannot be determined for the previewed document.\n\t *\n\t * **Note**: If you `next.config.js` file contains a `basePath`, the `defaultURL` option must\n\t * _not_ include it. Instead, provide the `basePath` property using the `basePath` option.\n\t */\n\tdefaultURL?: string\n\n\t/**\n\t * The `basePath` for the Next.js app as it is defined in `next.config.js`. This option can be\n\t * omitted if the app does not have a `basePath`.\n\t *\n\t * @remarks\n\t *   The Router Handler or API route is unable to detect the app's `basePath` automatically. It\n\t *   must be provided to `redirectToPreviewURL()` manually.\n\t */\n\tbasePath?: string\n}\n\nexport async function redirectToPreviewURL(config: RedirectToPreviewURLConfig): Promise<void> {\n\tconst { client, req, res, linkResolver, defaultURL = \"/\", basePath = \"\" } = config\n\n\tconst previewToken = req.query.token?.toString()\n\n\t// The toolbar's v5 flow follows this session from the ref the page shows. Without that ref, its\n\t// first ping would start the preview again, racing an early exit.\n\tconst session = req.query.session?.toString()\n\tif (session) {\n\t\tappendCookie(res, `${prismicCookie.previewSession}=${encodeURIComponent(session)}`)\n\t\tif (previewToken) {\n\t\t\tappendCookie(res, `${prismicCookie.preview}=${encodeURIComponent(previewToken)}`)\n\t\t}\n\t}\n\n\t// Share links return to the page they were opened from.\n\tconst path = getSafePath(req.query.path?.toString())\n\tif (path) {\n\t\tres.redirect(path)\n\n\t\treturn\n\t}\n\n\tconst previewURL = await client.resolvePreviewURL({\n\t\tlinkResolver,\n\t\tdefaultURL,\n\t\tpreviewToken,\n\t})\n\n\tres.redirect(basePath + previewURL)\n\n\treturn\n}\n"],"mappings":";;;;AAqDA,eAAsB,qBAAqB,QAAmD;CAC7F,MAAM,EAAE,QAAQ,KAAK,KAAK,cAAc,aAAa,KAAK,WAAW,OAAO;CAE5E,MAAM,eAAe,IAAI,MAAM,OAAO,SAAS;CAI/C,MAAM,UAAU,IAAI,MAAM,SAAS,SAAS;CAC5C,IAAI,SAAS;EACZ,aAAa,KAAK,GAAGA,OAAc,eAAe,GAAG,mBAAmB,OAAO,GAAG;EAClF,IAAI,cACH,aAAa,KAAK,GAAGA,OAAc,QAAQ,GAAG,mBAAmB,YAAY,GAAG;CAElF;CAGA,MAAM,OAAO,YAAY,IAAI,MAAM,MAAM,SAAS,CAAC;CACnD,IAAI,MAAM;EACT,IAAI,SAAS,IAAI;EAEjB;CACD;CAEA,MAAM,aAAa,MAAM,OAAO,kBAAkB;EACjD;EACA;EACA;CACD,CAAC;CAED,IAAI,SAAS,WAAW,UAAU;AAGnC"}

package/dist/redirectToPreviewURL.cjs

@@ -1,27 +1,23 @@
-const require_toolbarV5 = require("./lib/toolbarV5.cjs");
+const require_getSafePath = require("./lib/getSafePath.cjs");
 let _prismicio_client = require("@prismicio/client");
 //#region src/redirectToPreviewURL.ts
 async function redirectToPreviewURL(config) {
 	const { client, request, linkResolver, defaultURL = "/" } = config;
 	const { cookies, draftMode } = await import("next/headers.js");
 	const { redirect } = await import("next/navigation");
-	const { searchParams } = request.nextUrl;
-	const documentID = searchParams.get("documentId") ?? void 0;
-	let previewToken = searchParams.get("token") ?? void 0;
+	const documentID = request.nextUrl.searchParams.get("documentId") ?? void 0;
 	const cookieJar = await cookies();
-	const session = searchParams.get("session");
-	if (session) {
-		previewToken ??= await require_toolbarV5.getPreviewSessionRef(client, session);
-		cookieJar.set(require_toolbarV5.previewSessionCookie, session, {
-			sameSite: "none",
-			secure: true
-		});
-	}
+	const previewToken = request.nextUrl.searchParams.get("token") ?? void 0;
 	if (previewToken) cookieJar.set(_prismicio_client.cookie.preview, previewToken, {
 		sameSite: "none",
 		secure: true
 	});
-	const previewURL = session && require_toolbarV5.getSafePath(searchParams.get("path")) || await client.resolvePreviewURL({
+	const session = request.nextUrl.searchParams.get("session");
+	if (session) cookieJar.set(_prismicio_client.cookie.previewSession, session, {
+		sameSite: "none",
+		secure: true
+	});
+	const previewURL = require_getSafePath.getSafePath(request.nextUrl.searchParams.get("path")) ?? await client.resolvePreviewURL({
 		documentID,
 		previewToken,
 		defaultURL,

package/dist/redirectToPreviewURL.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"redirectToPreviewURL.cjs","names":["getPreviewSessionRef","previewSessionCookie","prismicCookie","getSafePath"],"sources":["../src/redirectToPreviewURL.ts"],"sourcesContent":["import { cookie as prismicCookie, type Client, type LinkResolverFunction } from \"@prismicio/client\"\n\nimport { getPreviewSessionRef, getSafePath, previewSessionCookie } from \"./lib/toolbarV5\"\nimport type { NextRequestLike } from \"./types\"\n\nexport type RedirectToPreviewURLConfig = {\n\t/** The Prismic client configured for the preview session's repository. */\n\t// `Pick` is used to use the smallest possible subset of\n\t// `prismic.Client`. Doing this reduces the surface area for breaking\n\t// type changes.\n\tclient: Pick<Client, \"resolvePreviewURL\" | \"documentAPIEndpoint\">\n\n\t/**\n\t * The `request` object from a Next.js Route Handler.\n\t *\n\t * @see Next.js Route Handler docs: \\<https://nextjs.org/docs/app/building-your-application/routing/route-handlers\\>\n\t */\n\trequest: NextRequestLike\n\n\t/**\n\t * A Link Resolver used to resolve the previewed document's URL.\n\t *\n\t * @see To learn more about Link Resolver: {@link https://prismic.io/docs/core-concepts/link-resolver-route-resolver}\n\t */\n\tlinkResolver?: LinkResolverFunction\n\n\t/**\n\t * The default redirect URL if a URL cannot be determined for the previewed document.\n\t *\n\t * **Note**: If you `next.config.js` file contains a `basePath`, the `defaultURL` option must\n\t * _not_ include it. Instead, provide the `basePath` property using the `basePath` option.\n\t */\n\tdefaultURL?: string\n}\n\nexport async function redirectToPreviewURL(config: RedirectToPreviewURLConfig): Promise<never> {\n\tconst { client, request, linkResolver, defaultURL = \"/\" } = config\n\n\t// Need this to avoid the following Next.js build-time error:\n\t// You're importing a component that needs next/headers. That only works\n\t// in a Server Component which is not supported in the pages/ directory.\n\tconst { cookies, draftMode } = await import(\"next/headers\")\n\n\t// Dynamic so Node.js can load this module: the bare specifier (kept by\n\t// tsdown.config.ts for Next.js's server alias) is not resolvable by Node.js.\n\tconst { redirect } = await import(\"next/navigation\")\n\n\tconst { searchParams } = request.nextUrl\n\tconst documentID = searchParams.get(\"documentId\") ?? undefined\n\tlet previewToken = searchParams.get(\"token\") ?? undefined\n\tconst cookieJar = await cookies()\n\n\t// The toolbar's v5 flow follows the session. Share links only carry the session.\n\tconst session = searchParams.get(\"session\")\n\tif (session) {\n\t\tpreviewToken ??= await getPreviewSessionRef(client, session)\n\t\tcookieJar.set(previewSessionCookie, session, { sameSite: \"none\", secure: true })\n\t}\n\n\t// Set the initial preview cookie. Setting the cookie here is necessary\n\t// to support unpublished previews. Without setting it here, the page\n\t// will try to render without the preview cookie, leading to a\n\t// PrismicNotFound error.\n\tif (previewToken) {\n\t\tcookieJar.set(prismicCookie.preview, previewToken, { sameSite: \"none\", secure: true })\n\t}\n\n\tconst previewURL =\n\t\t(session && getSafePath(searchParams.get(\"path\"))) ||\n\t\t(await client.resolvePreviewURL({ documentID, previewToken, defaultURL, linkResolver }))\n\n\t;(await draftMode()).enable()\n\n\t// Next.js uses `SameSite=Lax` in development, which cross-site iframes drop.\n\tcookieJar.set({\n\t\t...cookieJar.get(\"__prerender_bypass\")!,\n\t\thttpOnly: true,\n\t\tsameSite: \"none\",\n\t\tsecure: true,\n\t})\n\n\treturn redirect(previewURL)\n}\n"],"mappings":";;;AAmCA,eAAsB,qBAAqB,QAAoD;CAC9F,MAAM,EAAE,QAAQ,SAAS,cAAc,aAAa,QAAQ;CAK5D,MAAM,EAAE,SAAS,cAAc,MAAM,OAAO;CAI5C,MAAM,EAAE,aAAa,MAAM,OAAO;CAElC,MAAM,EAAE,iBAAiB,QAAQ;CACjC,MAAM,aAAa,aAAa,IAAI,YAAY,KAAK,KAAA;CACrD,IAAI,eAAe,aAAa,IAAI,OAAO,KAAK,KAAA;CAChD,MAAM,YAAY,MAAM,QAAQ;CAGhC,MAAM,UAAU,aAAa,IAAI,SAAS;CAC1C,IAAI,SAAS;EACZ,iBAAiB,MAAMA,kBAAAA,qBAAqB,QAAQ,OAAO;EAC3D,UAAU,IAAIC,kBAAAA,sBAAsB,SAAS;GAAE,UAAU;GAAQ,QAAQ;EAAK,CAAC;CAChF;CAMA,IAAI,cACH,UAAU,IAAIC,kBAAAA,OAAc,SAAS,cAAc;EAAE,UAAU;EAAQ,QAAQ;CAAK,CAAC;CAGtF,MAAM,aACJ,WAAWC,kBAAAA,YAAY,aAAa,IAAI,MAAM,CAAC,KAC/C,MAAM,OAAO,kBAAkB;EAAE;EAAY;EAAc;EAAY;CAAa,CAAC;CAEtF,CAAC,MAAM,UAAU,EAAA,CAAG,OAAO;CAG5B,UAAU,IAAI;EACb,GAAG,UAAU,IAAI,oBAAoB;EACrC,UAAU;EACV,UAAU;EACV,QAAQ;CACT,CAAC;CAED,OAAO,SAAS,UAAU;AAC3B"}
+{"version":3,"file":"redirectToPreviewURL.cjs","names":["prismicCookie","getSafePath"],"sources":["../src/redirectToPreviewURL.ts"],"sourcesContent":["import { cookie as prismicCookie, type Client, type LinkResolverFunction } from \"@prismicio/client\"\n\nimport { getSafePath } from \"./lib/getSafePath\"\nimport type { NextRequestLike } from \"./types\"\n\nexport type RedirectToPreviewURLConfig = {\n\t/** The Prismic client configured for the preview session's repository. */\n\t// `Pick` is used to use the smallest possible subset of\n\t// `prismic.Client`. Doing this reduces the surface area for breaking\n\t// type changes.\n\tclient: Pick<Client, \"resolvePreviewURL\">\n\n\t/**\n\t * The `request` object from a Next.js Route Handler.\n\t *\n\t * @see Next.js Route Handler docs: \\<https://nextjs.org/docs/app/building-your-application/routing/route-handlers\\>\n\t */\n\trequest: NextRequestLike\n\n\t/**\n\t * A Link Resolver used to resolve the previewed document's URL.\n\t *\n\t * @see To learn more about Link Resolver: {@link https://prismic.io/docs/core-concepts/link-resolver-route-resolver}\n\t */\n\tlinkResolver?: LinkResolverFunction\n\n\t/**\n\t * The default redirect URL if a URL cannot be determined for the previewed document.\n\t *\n\t * **Note**: If you `next.config.js` file contains a `basePath`, the `defaultURL` option must\n\t * _not_ include it. Instead, provide the `basePath` property using the `basePath` option.\n\t */\n\tdefaultURL?: string\n}\n\nexport async function redirectToPreviewURL(config: RedirectToPreviewURLConfig): Promise<never> {\n\tconst { client, request, linkResolver, defaultURL = \"/\" } = config\n\n\t// Need this to avoid the following Next.js build-time error:\n\t// You're importing a component that needs next/headers. That only works\n\t// in a Server Component which is not supported in the pages/ directory.\n\tconst { cookies, draftMode } = await import(\"next/headers\")\n\n\t// Dynamic so Node.js can load this module: the bare specifier (kept by\n\t// tsdown.config.ts for Next.js's server alias) is not resolvable by Node.js.\n\tconst { redirect } = await import(\"next/navigation\")\n\n\tconst documentID = request.nextUrl.searchParams.get(\"documentId\") ?? undefined\n\n\t// Set the initial preview cookie. Setting the cookie here is necessary\n\t// to support unpublished previews. Without setting it here, the page\n\t// will try to render without the preview cookie, leading to a\n\t// PrismicNotFound error.\n\tconst cookieJar = await cookies()\n\tconst previewToken = request.nextUrl.searchParams.get(\"token\") ?? undefined\n\tif (previewToken) {\n\t\tcookieJar.set(prismicCookie.preview, previewToken, { sameSite: \"none\", secure: true })\n\t}\n\n\t// The toolbar's v5 flow follows this session.\n\tconst session = request.nextUrl.searchParams.get(\"session\")\n\tif (session) {\n\t\tcookieJar.set(prismicCookie.previewSession, session, { sameSite: \"none\", secure: true })\n\t}\n\n\t// Share links return to the page they were opened from.\n\tconst previewURL =\n\t\tgetSafePath(request.nextUrl.searchParams.get(\"path\")) ??\n\t\t(await client.resolvePreviewURL({\n\t\t\tdocumentID,\n\t\t\tpreviewToken,\n\t\t\tdefaultURL,\n\t\t\tlinkResolver,\n\t\t}))\n\n\t;(await draftMode()).enable()\n\n\t// Next.js uses `SameSite=Lax` in development, which cross-site iframes drop.\n\tcookieJar.set({\n\t\t...cookieJar.get(\"__prerender_bypass\")!,\n\t\thttpOnly: true,\n\t\tsameSite: \"none\",\n\t\tsecure: true,\n\t})\n\n\treturn redirect(previewURL)\n}\n"],"mappings":";;;AAmCA,eAAsB,qBAAqB,QAAoD;CAC9F,MAAM,EAAE,QAAQ,SAAS,cAAc,aAAa,QAAQ;CAK5D,MAAM,EAAE,SAAS,cAAc,MAAM,OAAO;CAI5C,MAAM,EAAE,aAAa,MAAM,OAAO;CAElC,MAAM,aAAa,QAAQ,QAAQ,aAAa,IAAI,YAAY,KAAK,KAAA;CAMrE,MAAM,YAAY,MAAM,QAAQ;CAChC,MAAM,eAAe,QAAQ,QAAQ,aAAa,IAAI,OAAO,KAAK,KAAA;CAClE,IAAI,cACH,UAAU,IAAIA,kBAAAA,OAAc,SAAS,cAAc;EAAE,UAAU;EAAQ,QAAQ;CAAK,CAAC;CAItF,MAAM,UAAU,QAAQ,QAAQ,aAAa,IAAI,SAAS;CAC1D,IAAI,SACH,UAAU,IAAIA,kBAAAA,OAAc,gBAAgB,SAAS;EAAE,UAAU;EAAQ,QAAQ;CAAK,CAAC;CAIxF,MAAM,aACLC,oBAAAA,YAAY,QAAQ,QAAQ,aAAa,IAAI,MAAM,CAAC,KACnD,MAAM,OAAO,kBAAkB;EAC/B;EACA;EACA;EACA;CACD,CAAC;CAED,CAAC,MAAM,UAAU,EAAA,CAAG,OAAO;CAG5B,UAAU,IAAI;EACb,GAAG,UAAU,IAAI,oBAAoB;EACrC,UAAU;EACV,UAAU;EACV,QAAQ;CACT,CAAC;CAED,OAAO,SAAS,UAAU;AAC3B"}

package/dist/redirectToPreviewURL.d.cts

@@ -3,7 +3,7 @@ import { Client, LinkResolverFunction } from "@prismicio/client";
 //#region src/redirectToPreviewURL.d.ts
 export type RedirectToPreviewURLConfig = {
   /** The Prismic client configured for the preview session's repository. */
-  client: Pick<Client, "resolvePreviewURL" | "documentAPIEndpoint">;
+  client: Pick<Client, "resolvePreviewURL">;
   /**
    * The `request` object from a Next.js Route Handler.
    *

package/dist/redirectToPreviewURL.d.ts

@@ -3,7 +3,7 @@ import { Client, LinkResolverFunction } from "@prismicio/client";
 //#region src/redirectToPreviewURL.d.ts
 export type RedirectToPreviewURLConfig = {
   /** The Prismic client configured for the preview session's repository. */
-  client: Pick<Client, "resolvePreviewURL" | "documentAPIEndpoint">;
+  client: Pick<Client, "resolvePreviewURL">;
   /**
    * The `request` object from a Next.js Route Handler.
    *

package/dist/redirectToPreviewURL.js

@@ -1,27 +1,23 @@
-import { getPreviewSessionRef, getSafePath, previewSessionCookie } from "./lib/toolbarV5.js";
+import { getSafePath } from "./lib/getSafePath.js";
 import { cookie } from "@prismicio/client";
 //#region src/redirectToPreviewURL.ts
 async function redirectToPreviewURL(config) {
 	const { client, request, linkResolver, defaultURL = "/" } = config;
 	const { cookies, draftMode } = await import("next/headers.js");
 	const { redirect } = await import("next/navigation");
-	const { searchParams } = request.nextUrl;
-	const documentID = searchParams.get("documentId") ?? void 0;
-	let previewToken = searchParams.get("token") ?? void 0;
+	const documentID = request.nextUrl.searchParams.get("documentId") ?? void 0;
 	const cookieJar = await cookies();
-	const session = searchParams.get("session");
-	if (session) {
-		previewToken ??= await getPreviewSessionRef(client, session);
-		cookieJar.set(previewSessionCookie, session, {
-			sameSite: "none",
-			secure: true
-		});
-	}
+	const previewToken = request.nextUrl.searchParams.get("token") ?? void 0;
 	if (previewToken) cookieJar.set(cookie.preview, previewToken, {
 		sameSite: "none",
 		secure: true
 	});
-	const previewURL = session && getSafePath(searchParams.get("path")) || await client.resolvePreviewURL({
+	const session = request.nextUrl.searchParams.get("session");
+	if (session) cookieJar.set(cookie.previewSession, session, {
+		sameSite: "none",
+		secure: true
+	});
+	const previewURL = getSafePath(request.nextUrl.searchParams.get("path")) ?? await client.resolvePreviewURL({
 		documentID,
 		previewToken,
 		defaultURL,

package/dist/redirectToPreviewURL.js.map

@@ -1 +1 @@
-{"version":3,"file":"redirectToPreviewURL.js","names":["prismicCookie"],"sources":["../src/redirectToPreviewURL.ts"],"sourcesContent":["import { cookie as prismicCookie, type Client, type LinkResolverFunction } from \"@prismicio/client\"\n\nimport { getPreviewSessionRef, getSafePath, previewSessionCookie } from \"./lib/toolbarV5\"\nimport type { NextRequestLike } from \"./types\"\n\nexport type RedirectToPreviewURLConfig = {\n\t/** The Prismic client configured for the preview session's repository. */\n\t// `Pick` is used to use the smallest possible subset of\n\t// `prismic.Client`. Doing this reduces the surface area for breaking\n\t// type changes.\n\tclient: Pick<Client, \"resolvePreviewURL\" | \"documentAPIEndpoint\">\n\n\t/**\n\t * The `request` object from a Next.js Route Handler.\n\t *\n\t * @see Next.js Route Handler docs: \\<https://nextjs.org/docs/app/building-your-application/routing/route-handlers\\>\n\t */\n\trequest: NextRequestLike\n\n\t/**\n\t * A Link Resolver used to resolve the previewed document's URL.\n\t *\n\t * @see To learn more about Link Resolver: {@link https://prismic.io/docs/core-concepts/link-resolver-route-resolver}\n\t */\n\tlinkResolver?: LinkResolverFunction\n\n\t/**\n\t * The default redirect URL if a URL cannot be determined for the previewed document.\n\t *\n\t * **Note**: If you `next.config.js` file contains a `basePath`, the `defaultURL` option must\n\t * _not_ include it. Instead, provide the `basePath` property using the `basePath` option.\n\t */\n\tdefaultURL?: string\n}\n\nexport async function redirectToPreviewURL(config: RedirectToPreviewURLConfig): Promise<never> {\n\tconst { client, request, linkResolver, defaultURL = \"/\" } = config\n\n\t// Need this to avoid the following Next.js build-time error:\n\t// You're importing a component that needs next/headers. That only works\n\t// in a Server Component which is not supported in the pages/ directory.\n\tconst { cookies, draftMode } = await import(\"next/headers\")\n\n\t// Dynamic so Node.js can load this module: the bare specifier (kept by\n\t// tsdown.config.ts for Next.js's server alias) is not resolvable by Node.js.\n\tconst { redirect } = await import(\"next/navigation\")\n\n\tconst { searchParams } = request.nextUrl\n\tconst documentID = searchParams.get(\"documentId\") ?? undefined\n\tlet previewToken = searchParams.get(\"token\") ?? undefined\n\tconst cookieJar = await cookies()\n\n\t// The toolbar's v5 flow follows the session. Share links only carry the session.\n\tconst session = searchParams.get(\"session\")\n\tif (session) {\n\t\tpreviewToken ??= await getPreviewSessionRef(client, session)\n\t\tcookieJar.set(previewSessionCookie, session, { sameSite: \"none\", secure: true })\n\t}\n\n\t// Set the initial preview cookie. Setting the cookie here is necessary\n\t// to support unpublished previews. Without setting it here, the page\n\t// will try to render without the preview cookie, leading to a\n\t// PrismicNotFound error.\n\tif (previewToken) {\n\t\tcookieJar.set(prismicCookie.preview, previewToken, { sameSite: \"none\", secure: true })\n\t}\n\n\tconst previewURL =\n\t\t(session && getSafePath(searchParams.get(\"path\"))) ||\n\t\t(await client.resolvePreviewURL({ documentID, previewToken, defaultURL, linkResolver }))\n\n\t;(await draftMode()).enable()\n\n\t// Next.js uses `SameSite=Lax` in development, which cross-site iframes drop.\n\tcookieJar.set({\n\t\t...cookieJar.get(\"__prerender_bypass\")!,\n\t\thttpOnly: true,\n\t\tsameSite: \"none\",\n\t\tsecure: true,\n\t})\n\n\treturn redirect(previewURL)\n}\n"],"mappings":";;;AAmCA,eAAsB,qBAAqB,QAAoD;CAC9F,MAAM,EAAE,QAAQ,SAAS,cAAc,aAAa,QAAQ;CAK5D,MAAM,EAAE,SAAS,cAAc,MAAM,OAAO;CAI5C,MAAM,EAAE,aAAa,MAAM,OAAO;CAElC,MAAM,EAAE,iBAAiB,QAAQ;CACjC,MAAM,aAAa,aAAa,IAAI,YAAY,KAAK,KAAA;CACrD,IAAI,eAAe,aAAa,IAAI,OAAO,KAAK,KAAA;CAChD,MAAM,YAAY,MAAM,QAAQ;CAGhC,MAAM,UAAU,aAAa,IAAI,SAAS;CAC1C,IAAI,SAAS;EACZ,iBAAiB,MAAM,qBAAqB,QAAQ,OAAO;EAC3D,UAAU,IAAI,sBAAsB,SAAS;GAAE,UAAU;GAAQ,QAAQ;EAAK,CAAC;CAChF;CAMA,IAAI,cACH,UAAU,IAAIA,OAAc,SAAS,cAAc;EAAE,UAAU;EAAQ,QAAQ;CAAK,CAAC;CAGtF,MAAM,aACJ,WAAW,YAAY,aAAa,IAAI,MAAM,CAAC,KAC/C,MAAM,OAAO,kBAAkB;EAAE;EAAY;EAAc;EAAY;CAAa,CAAC;CAEtF,CAAC,MAAM,UAAU,EAAA,CAAG,OAAO;CAG5B,UAAU,IAAI;EACb,GAAG,UAAU,IAAI,oBAAoB;EACrC,UAAU;EACV,UAAU;EACV,QAAQ;CACT,CAAC;CAED,OAAO,SAAS,UAAU;AAC3B"}
+{"version":3,"file":"redirectToPreviewURL.js","names":["prismicCookie"],"sources":["../src/redirectToPreviewURL.ts"],"sourcesContent":["import { cookie as prismicCookie, type Client, type LinkResolverFunction } from \"@prismicio/client\"\n\nimport { getSafePath } from \"./lib/getSafePath\"\nimport type { NextRequestLike } from \"./types\"\n\nexport type RedirectToPreviewURLConfig = {\n\t/** The Prismic client configured for the preview session's repository. */\n\t// `Pick` is used to use the smallest possible subset of\n\t// `prismic.Client`. Doing this reduces the surface area for breaking\n\t// type changes.\n\tclient: Pick<Client, \"resolvePreviewURL\">\n\n\t/**\n\t * The `request` object from a Next.js Route Handler.\n\t *\n\t * @see Next.js Route Handler docs: \\<https://nextjs.org/docs/app/building-your-application/routing/route-handlers\\>\n\t */\n\trequest: NextRequestLike\n\n\t/**\n\t * A Link Resolver used to resolve the previewed document's URL.\n\t *\n\t * @see To learn more about Link Resolver: {@link https://prismic.io/docs/core-concepts/link-resolver-route-resolver}\n\t */\n\tlinkResolver?: LinkResolverFunction\n\n\t/**\n\t * The default redirect URL if a URL cannot be determined for the previewed document.\n\t *\n\t * **Note**: If you `next.config.js` file contains a `basePath`, the `defaultURL` option must\n\t * _not_ include it. Instead, provide the `basePath` property using the `basePath` option.\n\t */\n\tdefaultURL?: string\n}\n\nexport async function redirectToPreviewURL(config: RedirectToPreviewURLConfig): Promise<never> {\n\tconst { client, request, linkResolver, defaultURL = \"/\" } = config\n\n\t// Need this to avoid the following Next.js build-time error:\n\t// You're importing a component that needs next/headers. That only works\n\t// in a Server Component which is not supported in the pages/ directory.\n\tconst { cookies, draftMode } = await import(\"next/headers\")\n\n\t// Dynamic so Node.js can load this module: the bare specifier (kept by\n\t// tsdown.config.ts for Next.js's server alias) is not resolvable by Node.js.\n\tconst { redirect } = await import(\"next/navigation\")\n\n\tconst documentID = request.nextUrl.searchParams.get(\"documentId\") ?? undefined\n\n\t// Set the initial preview cookie. Setting the cookie here is necessary\n\t// to support unpublished previews. Without setting it here, the page\n\t// will try to render without the preview cookie, leading to a\n\t// PrismicNotFound error.\n\tconst cookieJar = await cookies()\n\tconst previewToken = request.nextUrl.searchParams.get(\"token\") ?? undefined\n\tif (previewToken) {\n\t\tcookieJar.set(prismicCookie.preview, previewToken, { sameSite: \"none\", secure: true })\n\t}\n\n\t// The toolbar's v5 flow follows this session.\n\tconst session = request.nextUrl.searchParams.get(\"session\")\n\tif (session) {\n\t\tcookieJar.set(prismicCookie.previewSession, session, { sameSite: \"none\", secure: true })\n\t}\n\n\t// Share links return to the page they were opened from.\n\tconst previewURL =\n\t\tgetSafePath(request.nextUrl.searchParams.get(\"path\")) ??\n\t\t(await client.resolvePreviewURL({\n\t\t\tdocumentID,\n\t\t\tpreviewToken,\n\t\t\tdefaultURL,\n\t\t\tlinkResolver,\n\t\t}))\n\n\t;(await draftMode()).enable()\n\n\t// Next.js uses `SameSite=Lax` in development, which cross-site iframes drop.\n\tcookieJar.set({\n\t\t...cookieJar.get(\"__prerender_bypass\")!,\n\t\thttpOnly: true,\n\t\tsameSite: \"none\",\n\t\tsecure: true,\n\t})\n\n\treturn redirect(previewURL)\n}\n"],"mappings":";;;AAmCA,eAAsB,qBAAqB,QAAoD;CAC9F,MAAM,EAAE,QAAQ,SAAS,cAAc,aAAa,QAAQ;CAK5D,MAAM,EAAE,SAAS,cAAc,MAAM,OAAO;CAI5C,MAAM,EAAE,aAAa,MAAM,OAAO;CAElC,MAAM,aAAa,QAAQ,QAAQ,aAAa,IAAI,YAAY,KAAK,KAAA;CAMrE,MAAM,YAAY,MAAM,QAAQ;CAChC,MAAM,eAAe,QAAQ,QAAQ,aAAa,IAAI,OAAO,KAAK,KAAA;CAClE,IAAI,cACH,UAAU,IAAIA,OAAc,SAAS,cAAc;EAAE,UAAU;EAAQ,QAAQ;CAAK,CAAC;CAItF,MAAM,UAAU,QAAQ,QAAQ,aAAa,IAAI,SAAS;CAC1D,IAAI,SACH,UAAU,IAAIA,OAAc,gBAAgB,SAAS;EAAE,UAAU;EAAQ,QAAQ;CAAK,CAAC;CAIxF,MAAM,aACL,YAAY,QAAQ,QAAQ,aAAa,IAAI,MAAM,CAAC,KACnD,MAAM,OAAO,kBAAkB;EAC/B;EACA;EACA;EACA;CACD,CAAC;CAED,CAAC,MAAM,UAAU,EAAA,CAAG,OAAO;CAG5B,UAAU,IAAI;EACb,GAAG,UAAU,IAAI,oBAAoB;EACrC,UAAU;EACV,UAAU;EACV,QAAQ;CACT,CAAC;CAED,OAAO,SAAS,UAAU;AAC3B"}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@prismicio/next",
-	"version": "2.3.4-pr.175.5f9614e",
+	"version": "2.3.4-pr.175.88bf097",
 	"description": "Helpers to integrate Prismic into Next.js apps",
 	"keywords": [
 		"next",
@@ -61,7 +61,7 @@
 	},
 	"devDependencies": {
 		"@playwright/test": "^1.64.1",
-		"@prismicio/client": "^7.22.3",
+		"@prismicio/client": "7.22.3-pr.477.5e5ad22",
 		"@types/node": "^26.6.5",
 		"@types/react": "^19.3.0",
 		"next": "16.4.2",
@@ -73,6 +73,9 @@
 		"tsdown": "^0.23.1",
 		"typescript": "^7.0.2"
 	},
+	"overrides": {
+		"@prismicio/client": "$@prismicio/client"
+	},
 	"peerDependencies": {
 		"@prismicio/client": "^7",
 		"next": "^13.4.5 || ^14 || ^15 || ^16",

package/src/PrismicPreview.tsx

@@ -1,7 +1,12 @@
+import { getToolbarSrc } from "@prismicio/client"
+import Script from "next/script"
 import type { FC, ReactNode } from "react"
 
+import { resolveDefaultExport } from "./lib/resolveDefaultExport"
 import { PrismicPreviewClient } from "./PrismicPreviewClient"
 
+const ResolvedScript = resolveDefaultExport(Script)
+
 /** Props for `<PrismicPreview>`. */
 export type PrismicPreviewProps = {
 	/**
@@ -35,13 +40,15 @@ export type PrismicPreviewProps = {
  * rendered on every page.
  */
 export const PrismicPreview: FC<PrismicPreviewProps> = async (props) => {
-	const { repositoryName, children, ...otherProps } = props
+	const { repositoryName, updatePreviewURL = "/api/preview", children, ...otherProps } = props
 
 	// Need this to avoid the following Next.js build-time error:
 	// You're importing a component that needs next/headers. That only works
 	// in a Server Component which is not supported in the pages/ directory.
 	const { draftMode } = await import("next/headers")
 
+	// TODO: Bump the `@prismicio/client` peer to `^7.23.0`, which adds `version`, and drop `overrides`.
+	const toolbarSrc = getToolbarSrc(repositoryName, { version: 5 })
 	const isDraftMode = (await draftMode()).isEnabled
 
 	return (
@@ -50,8 +57,10 @@ export const PrismicPreview: FC<PrismicPreviewProps> = async (props) => {
 			<PrismicPreviewClient
 				repositoryName={repositoryName}
 				isDraftMode={isDraftMode}
+				updatePreviewURL={updatePreviewURL}
 				{...otherProps}
 			/>
+			<ResolvedScript src={toolbarSrc} strategy="lazyOnload" data-preview-url={updatePreviewURL} />
 		</>
 	)
 }

package/src/PrismicPreviewClient.tsx

@@ -2,15 +2,9 @@
 
 import { cookie as prismicCookie } from "@prismicio/client"
 import { useRouter } from "next/navigation"
-import Script from "next/script"
 import type { FC } from "react"
 import { useEffect } from "react"
 
-import { resolveDefaultExport } from "./lib/resolveDefaultExport"
-import { getToolbarScriptProps } from "./lib/toolbarV5"
-
-const ResolvedScript = resolveDefaultExport(Script)
-
 type PrismicPreviewClientProps = {
 	repositoryName: string
 	isDraftMode: boolean
@@ -116,12 +110,7 @@ export const PrismicPreviewClient: FC<PrismicPreviewClientProps> = (props) => {
 		return () => controller.abort()
 	}, [repositoryName, isDraftMode, updatePreviewURL, exitPreviewURL, refresh])
 
-	return (
-		<ResolvedScript
-			{...getToolbarScriptProps(repositoryName, updatePreviewURL)}
-			strategy="lazyOnload"
-		/>
-	)
+	return null
 }
 
 /**

package/src/exitPreview.ts

@@ -1,7 +1,5 @@
 import { cookie as prismicCookie } from "@prismicio/client"
 
-import { previewSessionCookie } from "./lib/toolbarV5"
-
 /**
  * Ends a Prismic preview session within a Next.js app. This function should be used in a Router
  * Handler.
@@ -26,7 +24,7 @@ export async function exitPreview(): Promise<Response> {
 	const cookieJar = await cookies()
 	cookieJar.delete({ name: "__prerender_bypass", sameSite: "none", secure: true })
 	cookieJar.delete({ name: prismicCookie.preview, sameSite: "none", secure: true })
-	cookieJar.delete({ name: previewSessionCookie, sameSite: "none", secure: true })
+	cookieJar.delete({ name: prismicCookie.previewSession, sameSite: "none", secure: true })
 
 	// `Cache-Control` header is used to prevent CDN-level caching.
 	return new Response(JSON.stringify({ success: true }), {

package/src/lib/getSafePath.ts

@@ -0,0 +1,22 @@
+/**
+ * Returns `path` if it stays on the current origin, like `/blog?page=2#top`. It comes from
+ * `location`, so it already includes `basePath`.
+ */
+export function getSafePath(path: string | null | undefined): string | undefined {
+	if (!path?.startsWith("/") || path.startsWith("//") || path.startsWith("/\\")) {
+		return
+	}
+
+	const origin = "https://placeholder.invalid"
+	let url: URL
+	try {
+		url = new URL(path, origin)
+	} catch {
+		return
+	}
+	const safePath = url.href.slice(origin.length)
+	// Normalizing can create `//`, like with `/.//example.com`.
+	if (url.origin === origin && !safePath.startsWith("//")) {
+		return safePath
+	}
+}

package/src/pages/PrismicPreview.tsx

@@ -1,11 +1,9 @@
-import { cookie as prismicCookie } from "@prismicio/client"
+import { getToolbarSrc, cookie as prismicCookie } from "@prismicio/client"
 import { useRouter } from "next/router"
 import Script from "next/script"
 import type { FC } from "react"
 import { type ReactNode, useEffect } from "react"
 
-import { getToolbarScriptProps } from "../lib/toolbarV5"
-
 /** Props for `<PrismicPreview>`. */
 export type PrismicPreviewProps = {
 	/**
@@ -48,6 +46,8 @@ export const PrismicPreview: FC<PrismicPreviewProps> = (props) => {
 
 	const router = useRouter()
 
+	const toolbarSrc = getToolbarSrc(repositoryName, { version: 5 })
+
 	useEffect(() => {
 		const controller = new AbortController()
 
@@ -128,8 +128,9 @@ export const PrismicPreview: FC<PrismicPreviewProps> = (props) => {
 		<>
 			{children}
 			<Script
-				{...getToolbarScriptProps(repositoryName, router.basePath + updatePreviewURL)}
+				src={toolbarSrc}
 				strategy="lazyOnload"
+				data-preview-url={router.basePath + updatePreviewURL}
 			/>
 		</>
 	)

package/src/pages/appendCookie.ts

@@ -1,16 +1,10 @@
 import type { NextApiResponseLike } from "./types"
 
 /** Adds a cookie like the App Router's preview cookie, keeping Next.js's preview data cookies. */
-export function appendCookie(
-	res: NextApiResponseLike,
-	name: string,
-	value: string,
-	expires?: Date,
-): void {
+export function appendCookie(res: NextApiResponseLike, cookie: string): void {
 	const previous = res.getHeader("Set-Cookie") ?? []
-	let cookie = `${name}=${encodeURIComponent(value)}; Path=/; SameSite=None; Secure`
-	if (expires) {
-		cookie += `; Expires=${expires.toUTCString()}`
-	}
-	res.setHeader("Set-Cookie", [...[previous].flat().map(String), cookie])
+	res.setHeader("Set-Cookie", [
+		...[previous].flat().map(String),
+		`${cookie}; Path=/; SameSite=None; Secure`,
+	])
 }

package/src/pages/exitPreview.ts

@@ -1,4 +1,5 @@
-import { previewSessionCookie } from "../lib/toolbarV5"
+import { cookie as prismicCookie } from "@prismicio/client"
+
 import { appendCookie } from "./appendCookie"
 import type { NextApiRequestLike, NextApiResponseLike } from "./types"
 
@@ -36,7 +37,9 @@ export type ExitPreviewAPIRouteConfig = {
  */
 export function exitPreview(config: ExitPreviewAPIRouteConfig): void {
 	config.res.clearPreviewData()
-	appendCookie(config.res, previewSessionCookie, "", new Date(0))
+	for (const name of [prismicCookie.preview, prismicCookie.previewSession]) {
+		appendCookie(config.res, `${name}=; Expires=${new Date(0).toUTCString()}`)
+	}
 
 	// `Cache-Control` header is used to prevent CDN-level caching.
 	config.res.setHeader("Cache-Control", "no-store")

package/src/pages/redirectToPreviewURL.ts

@@ -1,6 +1,6 @@
 import { cookie as prismicCookie, type LinkResolverFunction, type Client } from "@prismicio/client"
 
-import { getPreviewSessionRef, getSafePath, previewSessionCookie } from "../lib/toolbarV5"
+import { getSafePath } from "../lib/getSafePath"
 import { appendCookie } from "./appendCookie"
 import type { NextApiRequestLike, NextApiResponseLike } from "./types"
 
@@ -9,7 +9,7 @@ export type RedirectToPreviewURLConfig = {
 	// `Pick` is used to use the smallest possible subset of
 	// `prismic.Client`. Doing this reduces the surface area for breaking
 	// type changes.
-	client: Pick<Client, "resolvePreviewURL" | "documentAPIEndpoint">
+	client: Pick<Client, "resolvePreviewURL">
 
 	/**
 	 * The `req` object from a Next.js API route.
@@ -54,25 +54,24 @@ export type RedirectToPreviewURLConfig = {
 export async function redirectToPreviewURL(config: RedirectToPreviewURLConfig): Promise<void> {
 	const { client, req, res, linkResolver, defaultURL = "/", basePath = "" } = config
 
-	let previewToken = req.query.token?.toString()
+	const previewToken = req.query.token?.toString()
 
-	// The toolbar's v5 flow follows the session in the preview cookies. Share
-	// links only carry the session, so `setPreviewData()` has no ref for them.
+	// The toolbar's v5 flow follows this session from the ref the page shows. Without that ref, its
+	// first ping would start the preview again, racing an early exit.
 	const session = req.query.session?.toString()
 	if (session) {
-		if (!previewToken) {
-			previewToken = await getPreviewSessionRef(client, session)
-			res.setPreviewData({ ref: previewToken })
+		appendCookie(res, `${prismicCookie.previewSession}=${encodeURIComponent(session)}`)
+		if (previewToken) {
+			appendCookie(res, `${prismicCookie.preview}=${encodeURIComponent(previewToken)}`)
 		}
-		appendCookie(res, prismicCookie.preview, previewToken)
-		appendCookie(res, previewSessionCookie, session)
+	}
 
-		const path = getSafePath(req.query.path?.toString())
-		if (path) {
-			res.redirect(path)
+	// Share links return to the page they were opened from.
+	const path = getSafePath(req.query.path?.toString())
+	if (path) {
+		res.redirect(path)
 
-			return
-		}
+		return
 	}
 
 	const previewURL = await client.resolvePreviewURL({