@xleddyl/nuxt-cms 0.1.9 → 0.1.10

package/dist/runtime/server/utils/require-admin.js

@@ -1,6 +1,20 @@
-import { createError } from "h3";
+import { createError, getRequestHeader, getRequestHost } from "h3";
 import { getUserSession, useRuntimeConfig } from "#imports";
+function assertSameOrigin(event) {
+  const origin = getRequestHeader(event, "origin");
+  if (!origin) return;
+  let originHost;
+  try {
+    originHost = new URL(origin).host;
+  } catch {
+    originHost = void 0;
+  }
+  if (!originHost || originHost !== getRequestHost(event, { xForwardedHost: true })) {
+    throw createError({ statusCode: 403, statusMessage: "Cross-origin request rejected" });
+  }
+}
 export async function requireAdmin(event) {
+  assertSameOrigin(event);
   const session = await getUserSession(event);
   const email = session.user?.email;
   if (!email) {

package/dist/runtime/shared/index.d.ts

@@ -59,4 +59,72 @@ export interface CmsEntry {
     table?: CmsTable;
 }
 export type CmsConfig = Record<string, CmsEntry>;
-export declare function defineCmsConfig<T extends CmsConfig>(config: T): T;
+interface FieldInputBase {
+    label: string;
+    required?: boolean;
+}
+export interface TextFieldInput extends FieldInputBase {
+    type: 'text';
+    textarea?: boolean;
+    translatable?: boolean;
+}
+export interface RichtextFieldInput extends FieldInputBase {
+    type: 'richtext';
+    translatable?: boolean;
+}
+export interface NumberFieldInput extends FieldInputBase {
+    type: 'number';
+    integer?: boolean;
+}
+export interface BooleanFieldInput extends FieldInputBase {
+    type: 'boolean';
+}
+export interface DateFieldInput extends FieldInputBase {
+    type: 'date';
+}
+export interface EmailFieldInput extends FieldInputBase {
+    type: 'email';
+}
+export interface SlugFieldInput extends FieldInputBase {
+    type: 'slug';
+    from: string;
+}
+export interface SelectFieldInput extends FieldInputBase {
+    type: 'select';
+    options: string[];
+}
+export interface JsonFieldInput extends FieldInputBase {
+    type: 'json';
+}
+export interface MediaFieldInput extends FieldInputBase {
+    type: 'media';
+    mediaType?: MediaType;
+    accept?: string[];
+}
+export interface RelationFieldInput extends FieldInputBase {
+    type: 'relation';
+    to: string;
+    cardinality?: 'many-to-one' | 'one-to-one' | 'many-to-many';
+    onDelete?: 'set null' | 'cascade' | 'restrict';
+}
+export type BlockFieldInput = Omit<TextFieldInput, 'translatable'> | Omit<RichtextFieldInput, 'translatable'> | NumberFieldInput | BooleanFieldInput | DateFieldInput | EmailFieldInput | SelectFieldInput | JsonFieldInput | MediaFieldInput;
+export interface BlockInput {
+    label: string;
+    fields: Record<string, BlockFieldInput>;
+}
+export interface BlocksFieldInput extends FieldInputBase {
+    type: 'blocks';
+    blocks: Record<string, BlockInput>;
+}
+export type CmsFieldInput = TextFieldInput | RichtextFieldInput | NumberFieldInput | BooleanFieldInput | DateFieldInput | EmailFieldInput | SlugFieldInput | SelectFieldInput | JsonFieldInput | MediaFieldInput | RelationFieldInput | BlocksFieldInput;
+export interface CmsEntryInput {
+    id: string;
+    label: string;
+    kind: 'collection' | 'single';
+    titleField?: string;
+    drafts?: boolean;
+    fields: Record<string, CmsFieldInput>;
+}
+export type CmsConfigInput = Record<string, CmsEntryInput>;
+export declare function defineCmsConfig<T extends CmsConfigInput>(config: T): T;
+export {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xleddyl/nuxt-cms",
-  "version": "0.1.9",
+  "version": "0.1.10",
   "description": "Lightweight CMS that ships with your Nuxt app: runs on the Nitro server, content types defined in code, /cms admin panel, GraphQL API, SQLite or Postgres. No external CMS needed!",
   "license": "MIT",
   "author": "Edoardo Alberti (https://github.com/xleddyl)",
@@ -75,10 +75,12 @@
     "@types/node": "latest",
     "@types/pg": "^8.11.0",
     "changelogen": "^0.6.0",
+    "h3": "^1.15.11",
     "nuxt": "^4.4.8",
     "prettier": "3.1.1",
     "prettier-plugin-tailwindcss": "0.6.11",
     "typescript": "~6.0.3",
+    "vitest": "^4.1.9",
     "vue-tsc": "^3.3.3"
   },
   "scripts": {
@@ -86,6 +88,7 @@
     "dev:build": "nuxt build playground",
     "dev:prepare": "nuxt-module-build build --stub && nuxt-module-build prepare && nuxt prepare playground",
     "db:studio": "drizzle-kit studio --config=playground/.nuxt/cms/drizzle.config.ts",
+    "test": "vitest run",
     "test:types": "vue-tsc --noEmit && cd playground && vue-tsc --noEmit",
     "format": "prettier --write \"**/*.{ts,tsx,js,jsx,md,html,json,sql,vue}\" --log-level error",
     "release": "changelogen --release --push"