altair-fastify-plugin 8.2.7 → 8.2.8

package/dist/index.d.ts

@@ -1,24 +1,19 @@
 import { RenderOptions } from 'altair-static';
 import type { FastifyInstance } from 'fastify';
 export interface AltairFastifyPluginOptions extends RenderOptions {
-    /**
-     * URL to set as the server endpoint.
-     *
-     * By default is `/graphql`
-     */
-    endpointURL?: string;
-    /**
-     * URL to be used as a base for relative URLs and hosting needed static files.
-     *
-     * By default is `/altair/`
-     */
-    baseURL?: string;
     /**
      * Path in which Altair will be accesible.
      *
      * By default is `/altair`
      */
     path?: string;
+    /**
+     * Generates a Content Security Policy (CSP) nonce for the request.
+     * @param req The Fastify request object.
+     * @param res The Fastify response object.
+     * @returns The generated CSP nonce.
+     */
+    cspNonceGenerator?: (req: unknown, res: unknown) => string;
 }
-export declare const AltairFastify: (fastify: FastifyInstance, { path, baseURL, endpointURL, ...renderOptions }?: AltairFastifyPluginOptions) => Promise<void>;
+export declare const AltairFastify: (fastify: FastifyInstance, { path, ...renderOptions }?: AltairFastifyPluginOptions) => Promise<void>;
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,aAAa,EAEd,MAAM,eAAe,CAAC;AAIvB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAE/C,MAAM,WAAW,0BAA2B,SAAQ,aAAa;IAC/D;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAgCD,eAAO,MAAM,aAAa,YA7Bf,eAAe,qDAMrB,0BAA0B,kBA0B7B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,aAAa,EAGd,MAAM,eAAe,CAAC;AAIvB,OAAO,KAAK,EAAE,eAAe,EAAgC,MAAM,SAAS,CAAC;AAE7E,MAAM,WAAW,0BAA2B,SAAQ,aAAa;IAC/D;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,KAAK,MAAM,CAAC;CAC5D;AAoCD,eAAO,MAAM,aAAa,YAjCf,eAAe,+BACgB,0BAA0B,kBAmClE,CAAC"}

package/dist/index.js

@@ -7,19 +7,26 @@ exports.AltairFastify = void 0;
 const altair_static_1 = require("altair-static");
 const fastify_plugin_1 = __importDefault(require("fastify-plugin"));
 const static_1 = __importDefault(require("@fastify/static"));
-const fastifyAltairPluginFn = async (fastify, { path = '/altair', baseURL = '/altair/', endpointURL = '/graphql', ...renderOptions } = {}) => {
+const fastifyAltairPluginFn = async (fastify, { path = '/altair', ...renderOptions } = {}) => {
+    var _a;
     fastify.register(static_1.default, {
         root: (0, altair_static_1.getDistDirectory)(),
-        prefix: baseURL,
+        prefix: (_a = renderOptions.baseURL) !== null && _a !== void 0 ? _a : '/altair/',
+        setHeaders: (res, path) => {
+            if ((0, altair_static_1.isSandboxFrame)(path)) {
+                // Disable CSP for the sandbox iframe
+                res.setHeader('Content-Security-Policy', '');
+            }
+        },
     });
-    const altairPage = (0, altair_static_1.renderAltair)({ baseURL, endpointURL, ...renderOptions });
-    fastify.get(path, (_req, res) => {
+    fastify.get(path, (req, res) => {
+        const altairPage = (0, altair_static_1.renderAltair)(getRequestRenderOptions(req, res, renderOptions));
         res.type('text/html').send(altairPage);
     });
     if (renderOptions.serveInitialOptionsInSeperateRequest) {
-        const initialOptions = (0, altair_static_1.renderInitSnippet)(renderOptions);
         const initOptPath = path + '/initial_options.js';
-        fastify.get(initOptPath, (_req, res) => {
+        fastify.get(initOptPath, (req, res) => {
+            const initialOptions = (0, altair_static_1.renderInitSnippet)(getRequestRenderOptions(req, res, renderOptions));
             res.type('application/javascript').send(initialOptions);
         });
     }
@@ -28,4 +35,16 @@ exports.AltairFastify = (0, fastify_plugin_1.default)(fastifyAltairPluginFn, {
     fastify: '>= 3.x',
     name: 'altair-fastify-plugin',
 });
+function getRequestRenderOptions(req, res, opts) {
+    const { baseURL, cspNonceGenerator, ...renderOptions } = opts;
+    let cspNonce = renderOptions.cspNonce;
+    if (!cspNonce && cspNonceGenerator) {
+        cspNonce = cspNonceGenerator(req, res);
+    }
+    return {
+        ...opts,
+        baseURL: baseURL !== null && baseURL !== void 0 ? baseURL : '/altair/',
+        cspNonce,
+    };
+}
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;AAAA,iDAKuB;AACvB,oEAAgC;AAChC,6DAA4C;AAyB5C,MAAM,qBAAqB,GAAG,KAAK,EACjC,OAAwB,EACxB,EACE,IAAI,GAAG,SAAS,EAChB,OAAO,GAAG,UAAU,EACpB,WAAW,GAAG,UAAU,EACxB,GAAG,aAAa,KACc,EAAE,EAClC,EAAE;IACF,OAAO,CAAC,QAAQ,CAAC,gBAAa,EAAE;QAC9B,IAAI,EAAE,IAAA,gCAAgB,GAAE;QACxB,MAAM,EAAE,OAAO;KAChB,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,IAAA,4BAAY,EAAC,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,aAAa,EAAE,CAAC,CAAC;IAE5E,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC9B,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,IAAI,aAAa,CAAC,oCAAoC,EAAE,CAAC;QACvD,MAAM,cAAc,GAAG,IAAA,iCAAiB,EAAC,aAAa,CAAC,CAAC;QACxD,MAAM,WAAW,GAAG,IAAI,GAAG,qBAAqB,CAAC;QAEjD,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YACrC,GAAG,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC;AAEW,QAAA,aAAa,GAAG,IAAA,wBAAE,EAAC,qBAAqB,EAAE;IACrD,OAAO,EAAE,QAAQ;IACjB,IAAI,EAAE,uBAAuB;CAC9B,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;AAAA,iDAMuB;AACvB,oEAAgC;AAChC,6DAA4C;AAqB5C,MAAM,qBAAqB,GAAG,KAAK,EACjC,OAAwB,EACxB,EAAE,IAAI,GAAG,SAAS,EAAE,GAAG,aAAa,KAAiC,EAAE,EACvE,EAAE;;IACF,OAAO,CAAC,QAAQ,CAAC,gBAAa,EAAE;QAC9B,IAAI,EAAE,IAAA,gCAAgB,GAAE;QACxB,MAAM,EAAE,MAAA,aAAa,CAAC,OAAO,mCAAI,UAAU;QAC3C,UAAU,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;YACxB,IAAI,IAAA,8BAAc,EAAC,IAAI,CAAC,EAAE,CAAC;gBACzB,qCAAqC;gBACrC,GAAG,CAAC,SAAS,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7B,MAAM,UAAU,GAAG,IAAA,4BAAY,EAC7B,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC,CACjD,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,IAAI,aAAa,CAAC,oCAAoC,EAAE,CAAC;QACvD,MAAM,WAAW,GAAG,IAAI,GAAG,qBAAqB,CAAC;QAEjD,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACpC,MAAM,cAAc,GAAG,IAAA,iCAAiB,EACtC,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC,CACjD,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC;AAEW,QAAA,aAAa,GAAG,IAAA,wBAAE,EAAC,qBAAqB,EAAE;IACrD,OAAO,EAAE,QAAQ;IACjB,IAAI,EAAE,uBAAuB;CAC9B,CAAC,CAAC;AAEH,SAAS,uBAAuB,CAC9B,GAAmB,EACnB,GAAiB,EACjB,IAAgC;IAEhC,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,aAAa,EAAE,GAAG,IAAI,CAAC;IAC9D,IAAI,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC;IACtC,IAAI,CAAC,QAAQ,IAAI,iBAAiB,EAAE,CAAC;QACnC,QAAQ,GAAG,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACzC,CAAC;IAED,OAAO;QACL,GAAG,IAAI;QACP,OAAO,EAAE,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,UAAU;QAC9B,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "altair-fastify-plugin",
   "description": "Fastify Plugin of Altair GraphQL Client",
-  "version": "8.2.7",
+  "version": "8.2.8",
   "author": "PabloSz <pablosaez1995@gmail.com>",
   "bugs": "https://github.com/altair-graphql/altair/issues",
   "dependencies": {
     "@fastify/static": "^8.0.1",
     "fastify-plugin": "^5.0.1",
-    "altair-static": "8.2.7"
+    "altair-static": "8.2.8"
   },
   "devDependencies": {
     "fastify": "^5.0.0",