@rmdes/indiekit-endpoint-rss 1.2.0 → 1.2.2

package/lib/feed-settings.js

@@ -207,7 +207,10 @@ export async function resetPublishState(db, id) {
 
   const result = await db.collection("rssItems").updateMany(
     { feedId },
-    { $unset: { postedAt: "", postUrl: "", postSkipped: "", postError: "", postErrorAt: "", postAttempts: "" } },
+    // postUrl is kept on purpose: it tells the publisher the post already
+    // exists, so the next attempt updates it instead of issuing a create the
+    // file store would silently ignore.
+    { $unset: { postedAt: "", postSkipped: "", postError: "", postErrorAt: "", postAttempts: "" } },
   );
 
   return { status: 200, reset: result.modifiedCount };

package/lib/publisher.js

@@ -18,7 +18,10 @@ export function mintToken(me) {
     throw new Error("Cannot publish: SECRET is not configured");
   }
 
-  return jwt.sign({ me, scope: "create" }, process.env.SECRET, {
+  // Both scopes: an item that already has a post is updated, not created, and
+  // checkScope treats them as distinct actions — a create-only token gets a
+  // 403 insufficient_scope on every republish.
+  return jwt.sign({ me, scope: "create update" }, process.env.SECRET, {
     expiresIn: TOKEN_TTL,
   });
 }
@@ -41,10 +44,18 @@ export async function postToMicropub(
   micropubEndpoint,
   accessToken,
   properties,
-  { fetchImpl = fetch } = {},
+  { fetchImpl = fetch, replaces } = {},
 ) {
   const mf2 = jf2ToMf2({ properties: { ...properties } });
 
+  // A post that already exists must be updated, not created again. The file
+  // system store's createFile returns silently when the path exists, so a
+  // second create updates the database row and leaves the published file
+  // untouched — the two then disagree with nothing to show for it.
+  const body = replaces
+    ? { action: "update", url: replaces, replace: mf2.properties }
+    : mf2;
+
   const response = await fetchImpl(micropubEndpoint, {
     method: "POST",
     headers: {
@@ -52,7 +63,7 @@ export async function postToMicropub(
       authorization: `Bearer ${accessToken}`,
       "content-type": "application/json",
     },
-    body: JSON.stringify(mf2),
+    body: JSON.stringify(body),
   });
 
   if (!response.ok) {
@@ -196,7 +207,10 @@ export async function publishPending(feed, itemsCollection, options) {
       // of the batch would be marked postSkipped and lost for good.
       const token = mintImpl(me);
       const properties = buildJf2(item, feed.publish);
-      const postUrl = await postImpl(micropubEndpoint, token, properties);
+      const postUrl =
+        (await postImpl(micropubEndpoint, token, properties, {
+          replaces: item.postUrl,
+        })) || item.postUrl;
 
       await itemsCollection.updateOne(
         { _id: item._id },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rmdes/indiekit-endpoint-rss",
-  "version": "1.2.0",
+  "version": "1.2.2",
   "description": "RSS feed reader endpoint for Indiekit. Aggregates multiple feeds, caches in MongoDB, displays on frontend.",
   "keywords": [
     "indiekit",