@sitecore-jss/sitecore-jss-nextjs 22.3.0-canary.10 → 22.3.0-canary.12
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cjs/editing/editing-config-middleware.js +6 -0
- package/dist/cjs/editing/editing-render-middleware.js +5 -0
- package/dist/cjs/editing/feaas-render-middleware.js +9 -3
- package/dist/esm/editing/editing-config-middleware.js +6 -0
- package/dist/esm/editing/editing-render-middleware.js +5 -0
- package/dist/esm/editing/feaas-render-middleware.js +9 -3
- package/package.json +5 -5
|
@@ -35,6 +35,12 @@ class EditingConfigMiddleware {
|
|
|
35
35
|
sitecore_jss_1.debug.editing('invalid editing secret - sent "%s" expected "%s"', secret, (0, utils_1.getJssEditingSecret)());
|
|
36
36
|
return res.status(401).json({ message: 'Missing or invalid editing secret' });
|
|
37
37
|
}
|
|
38
|
+
// Handle preflight request
|
|
39
|
+
if (_req.method === 'OPTIONS') {
|
|
40
|
+
sitecore_jss_1.debug.editing('preflight request');
|
|
41
|
+
// CORS headers are set by enforceCors
|
|
42
|
+
return res.status(204).send(null);
|
|
43
|
+
}
|
|
38
44
|
const components = Array.isArray(this.config.components)
|
|
39
45
|
? this.config.components
|
|
40
46
|
: Array.from(this.config.components.keys());
|
|
@@ -314,6 +314,11 @@ class EditingRenderMiddleware extends render_middleware_1.RenderMiddlewareBase {
|
|
|
314
314
|
yield handler.render(req, res);
|
|
315
315
|
break;
|
|
316
316
|
}
|
|
317
|
+
case 'OPTIONS': {
|
|
318
|
+
sitecore_jss_1.debug.editing('preflight request');
|
|
319
|
+
// CORS headers are set by enforceCors
|
|
320
|
+
return res.status(204).send(null);
|
|
321
|
+
}
|
|
317
322
|
default:
|
|
318
323
|
sitecore_jss_1.debug.editing('invalid method - sent %s expected GET/POST', req.method);
|
|
319
324
|
res.setHeader('Allow', 'GET, POST');
|
|
@@ -43,9 +43,9 @@ class FEAASRenderMiddleware extends render_middleware_1.RenderMiddlewareBase {
|
|
|
43
43
|
.status(401)
|
|
44
44
|
.send(`<html><body>Requests from origin ${(_b = req.headers) === null || _b === void 0 ? void 0 : _b.origin} are not allowed</body></html>`);
|
|
45
45
|
}
|
|
46
|
-
if (method
|
|
47
|
-
sitecore_jss_1.debug.editing('invalid method - sent %s expected GET', method);
|
|
48
|
-
res.setHeader('Allow', 'GET');
|
|
46
|
+
if (!method || !['GET', 'OPTIONS'].includes(method)) {
|
|
47
|
+
sitecore_jss_1.debug.editing('invalid method - sent %s expected GET,OPTIONS', method);
|
|
48
|
+
res.setHeader('Allow', 'GET, OPTIONS');
|
|
49
49
|
return res.status(405).send(`<html><body>Invalid request method '${method}'</body></html>`);
|
|
50
50
|
}
|
|
51
51
|
// Validate secret
|
|
@@ -54,6 +54,12 @@ class FEAASRenderMiddleware extends render_middleware_1.RenderMiddlewareBase {
|
|
|
54
54
|
sitecore_jss_1.debug.editing('invalid editing secret - sent "%s" expected "%s"', secret, (0, utils_1.getJssEditingSecret)());
|
|
55
55
|
return res.status(401).send('<html><body>Missing or invalid secret</body></html>');
|
|
56
56
|
}
|
|
57
|
+
// Handle preflight request
|
|
58
|
+
if (method === 'OPTIONS') {
|
|
59
|
+
sitecore_jss_1.debug.editing('preflight request');
|
|
60
|
+
// CORS headers are set by enforceCors
|
|
61
|
+
return res.status(204).send(null);
|
|
62
|
+
}
|
|
57
63
|
try {
|
|
58
64
|
// Get query string parameters to propagate on subsequent requests (e.g. for deployment protection bypass)
|
|
59
65
|
const params = this.getQueryParamsForPropagation(query);
|
|
@@ -32,6 +32,12 @@ export class EditingConfigMiddleware {
|
|
|
32
32
|
debug.editing('invalid editing secret - sent "%s" expected "%s"', secret, getJssEditingSecret());
|
|
33
33
|
return res.status(401).json({ message: 'Missing or invalid editing secret' });
|
|
34
34
|
}
|
|
35
|
+
// Handle preflight request
|
|
36
|
+
if (_req.method === 'OPTIONS') {
|
|
37
|
+
debug.editing('preflight request');
|
|
38
|
+
// CORS headers are set by enforceCors
|
|
39
|
+
return res.status(204).send(null);
|
|
40
|
+
}
|
|
35
41
|
const components = Array.isArray(this.config.components)
|
|
36
42
|
? this.config.components
|
|
37
43
|
: Array.from(this.config.components.keys());
|
|
@@ -308,6 +308,11 @@ export class EditingRenderMiddleware extends RenderMiddlewareBase {
|
|
|
308
308
|
yield handler.render(req, res);
|
|
309
309
|
break;
|
|
310
310
|
}
|
|
311
|
+
case 'OPTIONS': {
|
|
312
|
+
debug.editing('preflight request');
|
|
313
|
+
// CORS headers are set by enforceCors
|
|
314
|
+
return res.status(204).send(null);
|
|
315
|
+
}
|
|
311
316
|
default:
|
|
312
317
|
debug.editing('invalid method - sent %s expected GET/POST', req.method);
|
|
313
318
|
res.setHeader('Allow', 'GET, POST');
|
|
@@ -40,9 +40,9 @@ export class FEAASRenderMiddleware extends RenderMiddlewareBase {
|
|
|
40
40
|
.status(401)
|
|
41
41
|
.send(`<html><body>Requests from origin ${(_b = req.headers) === null || _b === void 0 ? void 0 : _b.origin} are not allowed</body></html>`);
|
|
42
42
|
}
|
|
43
|
-
if (method
|
|
44
|
-
debug.editing('invalid method - sent %s expected GET', method);
|
|
45
|
-
res.setHeader('Allow', 'GET');
|
|
43
|
+
if (!method || !['GET', 'OPTIONS'].includes(method)) {
|
|
44
|
+
debug.editing('invalid method - sent %s expected GET,OPTIONS', method);
|
|
45
|
+
res.setHeader('Allow', 'GET, OPTIONS');
|
|
46
46
|
return res.status(405).send(`<html><body>Invalid request method '${method}'</body></html>`);
|
|
47
47
|
}
|
|
48
48
|
// Validate secret
|
|
@@ -51,6 +51,12 @@ export class FEAASRenderMiddleware extends RenderMiddlewareBase {
|
|
|
51
51
|
debug.editing('invalid editing secret - sent "%s" expected "%s"', secret, getJssEditingSecret());
|
|
52
52
|
return res.status(401).send('<html><body>Missing or invalid secret</body></html>');
|
|
53
53
|
}
|
|
54
|
+
// Handle preflight request
|
|
55
|
+
if (method === 'OPTIONS') {
|
|
56
|
+
debug.editing('preflight request');
|
|
57
|
+
// CORS headers are set by enforceCors
|
|
58
|
+
return res.status(204).send(null);
|
|
59
|
+
}
|
|
54
60
|
try {
|
|
55
61
|
// Get query string parameters to propagate on subsequent requests (e.g. for deployment protection bypass)
|
|
56
62
|
const params = this.getQueryParamsForPropagation(query);
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@sitecore-jss/sitecore-jss-nextjs",
|
|
3
|
-
"version": "22.3.0-canary.
|
|
3
|
+
"version": "22.3.0-canary.12",
|
|
4
4
|
"main": "dist/cjs/index.js",
|
|
5
5
|
"module": "dist/esm/index.js",
|
|
6
6
|
"sideEffects": false,
|
|
@@ -73,9 +73,9 @@
|
|
|
73
73
|
"react-dom": "^18.2.0"
|
|
74
74
|
},
|
|
75
75
|
"dependencies": {
|
|
76
|
-
"@sitecore-jss/sitecore-jss": "^22.3.0-canary.
|
|
77
|
-
"@sitecore-jss/sitecore-jss-dev-tools": "^22.3.0-canary.
|
|
78
|
-
"@sitecore-jss/sitecore-jss-react": "^22.3.0-canary.
|
|
76
|
+
"@sitecore-jss/sitecore-jss": "^22.3.0-canary.12",
|
|
77
|
+
"@sitecore-jss/sitecore-jss-dev-tools": "^22.3.0-canary.12",
|
|
78
|
+
"@sitecore-jss/sitecore-jss-react": "^22.3.0-canary.12",
|
|
79
79
|
"@vercel/kv": "^0.2.1",
|
|
80
80
|
"prop-types": "^15.8.1",
|
|
81
81
|
"regex-parser": "^2.2.11",
|
|
@@ -83,7 +83,7 @@
|
|
|
83
83
|
},
|
|
84
84
|
"description": "",
|
|
85
85
|
"types": "types/index.d.ts",
|
|
86
|
-
"gitHead": "
|
|
86
|
+
"gitHead": "5a151c7d8a44adf6c7fc3c389d57712558a450aa",
|
|
87
87
|
"files": [
|
|
88
88
|
"dist",
|
|
89
89
|
"types",
|