@softr/sdk 0.0.62 → 0.0.63

package/dist/datasource/record.js

@@ -5,7 +5,7 @@ import { readSessionToken } from "../auth/session.js";
 import { isDatasourceAction } from "../action.js";
 import { buildFilterCriteria, buildOrderBy, dealiasFilterCriteria, dealiasOrderBy } from "./filter.js";
 import { andAll, makeFieldSet, makeSortSet } from "./fields.js";
-import { getRequestHeader } from "@tanstack/react-start/server";
+import { getRequestHeader, getRequestUrl } from "@tanstack/react-start/server";
 
 //#region src/datasource/record.ts
 const MAX_RECORD_COUNT = 100;
@@ -17,13 +17,19 @@ const dsUrl = (actionId) => {
 	return `${withoutTrailingSlash(datasourceApiUrl)}/v1/datasource/vibe/applications/${applicationId}/actions/${actionId}`;
 };
 /**
-* The datasource API wants to know which page made the call.
-* The browser sends that page to the app server, so we pass it on.
-* Without an incoming Referer, we send none.
+* The datasource API wants to know which page made the call, and rejects a call without it.
+*
+* A call from the browser has a Referer on this app's origin, and that Referer names the page.
+* A page load has the previous page as its Referer: Studio, or none for a pasted link.
+* There the page is the request itself, so we send the request URL.
 */
 function refererHeader() {
+	const page = getRequestUrl({
+		xForwardedHost: true,
+		xForwardedProto: true
+	});
 	const referer = getRequestHeader("referer");
-	return referer ? { Referer: referer } : {};
+	return { Referer: referer !== void 0 && URL.parse(referer)?.origin === page.origin ? referer : page.href };
 }
 async function describeFailure(res) {
 	const body = await res.json().catch(() => null);

package/dist/package.js

@@ -1,5 +1,5 @@
 //#region package.json
-var version = "0.0.62";
+var version = "0.0.63";
 
 //#endregion
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@softr/sdk",
-  "version": "0.0.62",
+  "version": "0.0.63",
   "type": "module",
   "exports": {
     ".": { "types": "./dist/index.d.ts", "import": "./dist/index.js" },