npm - box-content-preview - Versions diffs - 3.78.0 → 3.79.0 - Mend

box-content-preview 3.78.0 → 3.79.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/README.md CHANGED Viewed

@@ -2,7 +2,7 @@
 [![Mergify Status](https://img.shields.io/endpoint.svg?url=https://gh.mergify.io/badges/box/box-content-preview&style=flat)](https://mergify.io)
 [![Styled With Prettier](https://img.shields.io/badge/styled_with-prettier-ff69b4.svg?style=flat-square)](https://github.com/prettier/prettier)
 [![build status](https://img.shields.io/travis/box/box-content-preview/master.svg?style=flat-square)](https://travis-ci.org/box/box-content-preview)
-[![version](https://img.shields.io/badge/version-v3.78.0-blue.svg?style=flat-square)](https://github.com/box/box-content-preview)
+[![version](https://img.shields.io/badge/version-v3.79.0-blue.svg?style=flat-square)](https://github.com/box/box-content-preview)
 [![npm version](https://img.shields.io/npm/v/box-ui-elements.svg?style=flat-square)](https://www.npmjs.com/package/box-ui-elements)
 # [Box Content Preview](https://developer.box.com/docs/box-content-preview)
@@ -22,11 +22,11 @@ We encourage all users to update their applications to utilize modern browsers f
 ## Current Version
-- Version: v3.78.0
+- Version: v3.79.0
 - Locale: en-US
-https://cdn01.boxcdn.net/platform/preview/3.78.0/en-US/preview.js
-https://cdn01.boxcdn.net/platform/preview/3.78.0/en-US/preview.css
+https://cdn01.boxcdn.net/platform/preview/3.79.0/en-US/preview.js
+https://cdn01.boxcdn.net/platform/preview/3.79.0/en-US/preview.css
 ## Supported Locales
@@ -52,10 +52,10 @@ You can self-host the Box Content Preview library or reference the versions avai
     <title>Box Content Preview Demo</title>
     <!-- Latest version of Preview SDK for your locale -->
-    <script src="https://cdn01.boxcdn.net/platform/preview/3.78.0/en-US/preview.js"></script>
+    <script src="https://cdn01.boxcdn.net/platform/preview/3.79.0/en-US/preview.js"></script>
     <link
       rel="stylesheet"
-      href="https://cdn01.boxcdn.net/platform/preview/3.78.0/en-US/preview.css"
+      href="https://cdn01.boxcdn.net/platform/preview/3.79.0/en-US/preview.css"
     />
   </head>
   <body>
@@ -76,7 +76,7 @@ To self-host the Box Content Preview library, follow these steps:
 1. Either fork the repo and check out the version you want to host or download the specific version as a zip:
-- Check out a specific version with `git checkout v3.78.0`
+- Check out a specific version with `git checkout v3.79.0`
 - Download a specific version as a zip from https://github.com/box/box-content-preview/releases
 2. Install dependencies and build the library with `yarn install && yarn build:i18n && yarn build:prod`

package/dist/lib/index.js CHANGED Viewed

@@ -15388,7 +15388,7 @@ function util_toPrimitive(t, r) { if ("object" != typeof t || !t) return t; var
 const CLIENT_NAME = "box-content-preview"; // eslint-disable-line no-undef
 const CLIENT_NAME_KEY = 'box_client_name';
 const CLIENT_VERSION_KEY = 'box_client_version';
-const CLIENT_VERSION = "3.78.0"; // eslint-disable-line no-undef
+const CLIENT_VERSION = "3.79.0"; // eslint-disable-line no-undef
 const HEADER_CLIENT_NAME = 'X-Box-Client-Name';
 const HEADER_CLIENT_VERSION = 'X-Box-Client-Version';
 const PROMISE_MAP = {};
@@ -17085,7 +17085,7 @@ class Browser {
 ;// ./src/lib/Logger.js
 /* eslint-disable no-undef */
 const Logger_CLIENT_NAME = "box-content-preview";
-const Logger_CLIENT_VERSION = "3.78.0";
+const Logger_CLIENT_VERSION = "3.79.0";
 /* eslint-enable no-undef */
 class Logger {
@@ -17813,8 +17813,7 @@ class RepStatus extends (events_default()) {
     sharedLink,
     sharedLinkPassword,
     logger,
-    fileId,
-    migrateAccessTokenToHeader = false
+    fileId
   }) {
     super();
     /** @property {Api} - Api used for XHR calls */
@@ -17826,12 +17825,8 @@ class RepStatus extends (events_default()) {
     // Some representations (e.g. ORIGINAL) may not have an info url
     const repInfo = this.representation.info;
-    if (migrateAccessTokenToHeader) {
-      this.infoUrl = repInfo ? appendAuthParamsV2(repInfo.url, sharedLink, sharedLinkPassword) : '';
-      this.headers = getHeaders({}, token);
-    } else {
-      this.infoUrl = repInfo ? appendAuthParams(repInfo.url, token, sharedLink, sharedLinkPassword) : '';
-    }
+    this.infoUrl = repInfo ? appendAuthParamsV2(repInfo.url, sharedLink, sharedLinkPassword) : '';
+    this.headers = getHeaders({}, token);
     this.promise = new Promise((resolve, reject) => {
       this.resolve = resolve;
       this.reject = reject;
@@ -18569,15 +18564,11 @@ class BaseViewer extends (events_default()) {
       template = this.api.reachability.constructor.replaceDownloadHostWithDefault(template);
     }
-    // Cache-buster only needed when auth is header-based; the in-URL token otherwise
-    // varies the cache key on its own.
-    const resolveCacheBuster = this.featureEnabled('migrateAccessTokenToHeader');
-    // Append optional query params
+    // Auth is header-based, so re-resolve the cache-buster per request.
     const {
       queryParams
     } = this.options;
-    return appendQueryParams(createContentUrl(template, asset, resolveCacheBuster), queryParams);
+    return appendQueryParams(createContentUrl(template, asset, true), queryParams);
   }
   /**
@@ -18591,13 +18582,7 @@ class BaseViewer extends (events_default()) {
    * @return {string} content url
    */
   createContentUrlWithAuthParams(template, asset) {
-    const urlWithAuthParams = this.appendAuthParams(this.createContentUrl(template, asset));
-    // Append optional query params
-    const {
-      queryParams
-    } = this.options;
-    return appendQueryParams(urlWithAuthParams, queryParams);
+    return this.createContentUrlV2(template, asset);
   }
   /**
@@ -19034,9 +19019,7 @@ class BaseViewer extends (events_default()) {
       sharedLink,
       sharedLinkPassword,
       fileId: file.id,
-      logger: representation ? null : logger,
-      // Do not log to main preview status if rep is passed in
-      migrateAccessTokenToHeader: this.featureEnabled('migrateAccessTokenToHeader')
+      logger: representation ? null : logger // Do not log to main preview status if rep is passed in
     });
     // Don't time out while conversion is pending
@@ -19615,14 +19598,10 @@ class ArchiveViewer extends viewers_BaseViewer {
       } = this.options;
       const template = get_default()(representation, 'content.url_template');
       this.startLoadTimer();
-      if (this.featureEnabled('migrateAccessTokenToHeader')) {
-        const contentUrl = this.createContentUrlV2(template);
-        return this.api.get(contentUrl, {
-          headers: this.appendAuthHeader()
-        });
-      }
-      const contentUrl = this.createContentUrlWithAuthParams(template);
-      return this.api.get(contentUrl);
+      const contentUrl = this.createContentUrlV2(template);
+      return this.api.get(contentUrl, {
+        headers: this.appendAuthHeader()
+      });
     }).then(this.finishLoading).catch(this.handleAssetError);
   }
 }
@@ -21335,8 +21314,7 @@ class ImageViewer extends image_ImageBaseViewer {
       this.removeListener('zoom', this.handleZoomEvent);
     }
-    // Auth header migration uses blob URLs for images (XHR fetch + createObjectURL).
-    // Revoke to free the memory since blobs persist until explicitly released.
+    // Blob URLs stay allocated until revoked.
     if (this.imageEl && this.imageEl.src && this.imageEl.src.startsWith('blob:')) {
       URL.revokeObjectURL(this.imageEl.src);
     }
@@ -21382,23 +21360,21 @@ class ImageViewer extends image_ImageBaseViewer {
     } = this.options;
     const template = representation.content.url_template;
     this.bindDOMListeners();
-    if (this.featureEnabled('migrateAccessTokenToHeader')) {
-      const contentUrl = this.createContentUrlV2(template, viewer.ASSET);
-      return this.getRepStatus().getPromise().then(() => {
-        this.startLoadTimer();
-        // Reuse prefetched blob URL if available, otherwise fetch now
-        return this.prefetchedBlobUrlPromise || this.fetchContentAsBlobUrl(contentUrl);
-      }).then(blobUrl => {
-        this.prefetchedBlobUrlPromise = null;
-        this.imageEl.src = blobUrl;
-        if (this.imageEl.complete) {
-          this.finishLoading();
-        }
-        super.handleAssetAndRepLoad();
-      }).catch(this.handleAssetError);
-    }
-    const downloadUrl = this.createContentUrlWithAuthParams(template, viewer.ASSET);
-    return this.getRepStatus().getPromise().then(() => this.handleAssetAndRepLoad(downloadUrl)).catch(this.handleAssetError);
+    const contentUrl = this.createContentUrlV2(template, viewer.ASSET);
+    return this.getRepStatus().getPromise().then(() => {
+      this.startLoadTimer();
+      return this.fetchContentAsBlobUrl(contentUrl);
+    }).then(blobUrl => {
+      if (this.isDestroyed()) {
+        URL.revokeObjectURL(blobUrl);
+        return;
+      }
+      this.imageEl.src = blobUrl;
+      if (this.imageEl.complete) {
+        this.finishLoading();
+      }
+      super.handleAssetAndRepLoad();
+    }).catch(this.handleAssetError);
   }
   /**
@@ -21442,9 +21418,6 @@ class ImageViewer extends image_ImageBaseViewer {
       this.firstRenderEmitted = true;
     }
   }
-  prefetchFinishedLoading(event) {
-    document.body.removeChild(event?.currentTarget);
-  }
   /**
    * Prefetches assets for an image.
@@ -21464,16 +21437,13 @@ class ImageViewer extends image_ImageBaseViewer {
     const isWatermarked = file && file.watermark_info && file.watermark_info.is_watermarked;
     if ((content || preload) && !isWatermarked && this.isRepresentationReady(representation)) {
       const template = representation.content.url_template;
-      if (this.featureEnabled('migrateAccessTokenToHeader')) {
-        const contentUrl = this.createContentUrlV2(template, viewer.ASSET);
-        this.prefetchedBlobUrlPromise = this.fetchContentAsBlobUrl(contentUrl);
-      } else {
-        const preFetchedImg = document.createElement('img');
-        preFetchedImg.addEventListener('load', this.prefetchFinishedLoading);
-        preFetchedImg.classList.add(CLASS_PREFETCHED_IMAGE);
-        document.body.appendChild(preFetchedImg);
-        preFetchedImg.src = this.createContentUrlWithAuthParams(template, viewer.ASSET);
-      }
+      const contentUrl = this.createContentUrlV2(template, viewer.ASSET);
+      this.api.get(contentUrl, {
+        type: 'blob',
+        headers: this.appendAuthHeader()
+      }).catch(err => {
+        console.warn('Image prefetch failed', err); // eslint-disable-line no-console
+      });
     }
   }
@@ -22138,8 +22108,7 @@ class MultiImageViewer extends image_ImageBaseViewer {
    */
   destroy() {
     if (this.singleImageEls && this.singleImageEls.length > 0) {
-      // Auth header migration uses blob URLs for images (XHR fetch + createObjectURL).
-      // Revoke to free the memory since blobs persist until explicitly released.
+      // Blob URLs stay allocated until revoked.
       this.singleImageEls.forEach((el, index) => {
         if (el.src && el.src.startsWith('blob:')) {
           URL.revokeObjectURL(el.src);
@@ -22210,8 +22179,7 @@ class MultiImageViewer extends image_ImageBaseViewer {
     } = representation;
     const asset = viewer.ASSET;
     this.pagesCount = metadata.pages;
-    const useHeaders = this.featureEnabled('migrateAccessTokenToHeader');
-    const urlBase = useHeaders ? this.createContentUrlV2(template, asset) : this.createContentUrlWithAuthParams(template, asset);
+    const urlBase = this.createContentUrlV2(template, asset);
     const urls = [];
     for (let pageNum = 1; pageNum <= this.pagesCount; pageNum += 1) {
       urls.push(urlBase.replace('{page}', pageNum));
@@ -22236,13 +22204,13 @@ class MultiImageViewer extends image_ImageBaseViewer {
     // Set page number. Page is index + 1.
     this.singleImageEls[index].setAttribute('data-page-number', index + 1);
     this.singleImageEls[index].classList.add(CLASS_MULTI_IMAGE_PAGE);
-    if (this.featureEnabled('migrateAccessTokenToHeader')) {
-      this.fetchContentAsBlobUrl(imageUrl).then(blobUrl => {
-        this.singleImageEls[index].src = blobUrl;
-      });
-    } else {
-      this.singleImageEls[index].src = imageUrl;
-    }
+    this.fetchContentAsBlobUrl(imageUrl).then(blobUrl => {
+      if (this.isDestroyed()) {
+        URL.revokeObjectURL(blobUrl);
+        return;
+      }
+      this.singleImageEls[index].src = blobUrl;
+    }).catch(this.handleMultiImageDownloadError);
   }
   /**
@@ -24710,15 +24678,17 @@ class SWFViewer extends viewers_BaseViewer {
       /* global swfobject */
       const template = this.options.representation.content.url_template;
       this.startLoadTimer();
-      /* istanbul ignore next */
-      swfobject.embedSWF(this.createContentUrlWithAuthParams(template), this.playerEl.id, '100%', '100%', '9', null, null, SWF_PARAMS, null, () => {
-        if (this.isDestroyed()) {
-          return;
-        }
-        this.loaded = true;
-        this.emit(VIEWER_EVENT.load);
-      });
+      const contentUrl = this.createContentUrlV2(template);
+      return this.fetchContentAsBlobUrl(contentUrl).then(blobUrl => {
+        /* istanbul ignore next */
+        swfobject.embedSWF(blobUrl, this.playerEl.id, '100%', '100%', '9', null, null, SWF_PARAMS, null, () => {
+          if (this.isDestroyed()) {
+            return;
+          }
+          this.loaded = true;
+          this.emit(VIEWER_EVENT.load);
+        });
+      }).catch(this.handleAssetError);
     });
   }
   /**
@@ -25687,13 +25657,8 @@ class PlainTextViewer extends text_TextBaseViewer {
       const headers = this.truncated ? {
         Range: `bytes=0-${SIZE_LIMIT_BYTES}`
       } : {};
-      let contentUrl;
-      if (this.featureEnabled('migrateAccessTokenToHeader')) {
-        contentUrl = this.createContentUrlV2(template);
-        PlainTextViewer_extends(headers, this.appendAuthHeader());
-      } else {
-        contentUrl = this.createContentUrlWithAuthParams(template);
-      }
+      const contentUrl = this.createContentUrlV2(template);
+      PlainTextViewer_extends(headers, this.appendAuthHeader());
       this.startLoadTimer();
       return this.api.get(contentUrl, {
         headers,
@@ -25764,17 +25729,11 @@ class PlainTextViewer extends text_TextBaseViewer {
     } = this.options;
     if (content && this.isRepresentationReady(representation)) {
       const template = representation.content.url_template;
-      if (this.featureEnabled('migrateAccessTokenToHeader')) {
-        const contentUrl = this.createContentUrlV2(template);
-        this.api.get(contentUrl, {
-          type: 'document',
-          headers: this.appendAuthHeader()
-        });
-      } else {
-        this.api.get(this.createContentUrlWithAuthParams(template), {
-          type: 'document'
-        });
-      }
+      const contentUrl = this.createContentUrlV2(template);
+      this.api.get(contentUrl, {
+        type: 'document',
+        headers: this.appendAuthHeader()
+      });
     }
   }
@@ -26243,15 +26202,11 @@ class CSVViewer extends text_TextBaseViewer {
           worker: true
         });
       };
-      if (this.featureEnabled('migrateAccessTokenToHeader')) {
-        const contentUrl = this.createContentUrlV2(template);
-        return this.fetchContentAsBlobUrl(contentUrl).then(blobUrl => {
-          this.blobUrl = blobUrl;
-          parseCSV(blobUrl);
-        });
-      }
-      parseCSV(this.createContentUrlWithAuthParams(template));
-      return undefined;
+      const contentUrl = this.createContentUrlV2(template);
+      return this.fetchContentAsBlobUrl(contentUrl).then(blobUrl => {
+        this.blobUrl = blobUrl;
+        parseCSV(blobUrl);
+      });
     }).catch(this.handleAssetError);
   }
@@ -26302,17 +26257,11 @@ class CSVViewer extends text_TextBaseViewer {
     } = this.options;
     if (content && this.isRepresentationReady(representation)) {
       const template = representation.content.url_template;
-      if (this.featureEnabled('migrateAccessTokenToHeader')) {
-        const contentUrl = this.createContentUrlV2(template);
-        this.api.get(contentUrl, {
-          type: 'document',
-          headers: this.appendAuthHeader()
-        });
-      } else {
-        this.api.get(this.createContentUrlWithAuthParams(template), {
-          type: 'document'
-        });
-      }
+      const contentUrl = this.createContentUrlV2(template);
+      this.api.get(contentUrl, {
+        type: 'document',
+        headers: this.appendAuthHeader()
+      });
     }
   }
@@ -28563,21 +28512,14 @@ class MediaBaseViewer extends viewers_BaseViewer {
       // https://webkit.org/blog/6784/new-video-policies-for-ios/
       this.mediaEl.autoplay = true;
     }
-    if (this.featureEnabled('migrateAccessTokenToHeader')) {
-      const contentUrl = this.createContentUrlV2(template);
-      return this.getRepStatus().getPromise().then(() => {
-        this.startLoadTimer();
-        return this.fetchContentAsBlobUrl(contentUrl);
-      }).then(blobUrl => {
-        this.mediaBlobUrl = blobUrl;
-        this.mediaUrl = blobUrl;
-        this.mediaEl.src = blobUrl;
-      }).catch(this.handleAssetError);
-    }
-    this.mediaUrl = this.createContentUrlWithAuthParams(template);
+    const contentUrl = this.createContentUrlV2(template);
     return this.getRepStatus().getPromise().then(() => {
       this.startLoadTimer();
-      this.mediaEl.src = this.mediaUrl;
+      return this.fetchContentAsBlobUrl(contentUrl);
+    }).then(blobUrl => {
+      this.mediaBlobUrl = blobUrl;
+      this.mediaUrl = blobUrl;
+      this.mediaEl.src = blobUrl;
     }).catch(this.handleAssetError);
   }
@@ -28677,20 +28619,15 @@ class MediaBaseViewer extends viewers_BaseViewer {
     } = this.mediaEl;
     this.currentTime = currentTime;
     this.options.token = newToken;
-    if (this.featureEnabled('migrateAccessTokenToHeader')) {
-      if (this.mediaBlobUrl) {
-        URL.revokeObjectURL(this.mediaBlobUrl);
-      }
-      const contentUrl = this.createContentUrlV2(this.options.representation.content.url_template);
-      this.fetchContentAsBlobUrl(contentUrl).then(blobUrl => {
-        this.mediaBlobUrl = blobUrl;
-        this.mediaUrl = blobUrl;
-        this.mediaEl.src = blobUrl;
-      }).catch(this.handleAssetError);
-      return;
+    if (this.mediaBlobUrl) {
+      URL.revokeObjectURL(this.mediaBlobUrl);
     }
-    this.mediaUrl = this.createContentUrlWithAuthParams(this.options.representation.content.url_template);
-    this.mediaEl.src = this.mediaUrl;
+    const contentUrl = this.createContentUrlV2(this.options.representation.content.url_template);
+    this.fetchContentAsBlobUrl(contentUrl).then(blobUrl => {
+      this.mediaBlobUrl = blobUrl;
+      this.mediaUrl = blobUrl;
+      this.mediaEl.src = blobUrl;
+    }).catch(this.handleAssetError);
   }
   /**
@@ -32659,19 +32596,22 @@ class VideoBaseViewer extends media_MediaBaseViewer {
         height: this.wrapperEl.clientHeight - controlsHeight
       };
     }
-    if (this.featureEnabled('migrateAccessTokenToHeader')) {
-      const contentUrl = this.createContentUrlV2(template);
-      if (this.preloadBlobUrl) {
-        URL.revokeObjectURL(this.preloadBlobUrl);
-      }
-      this.fetchContentAsBlobUrl(contentUrl).then(blobUrl => {
-        this.preloadBlobUrl = blobUrl;
-        this.preloader.showPreload(blobUrl, this.mediaContainerEl, options);
-      }).catch(this.handleAssetError);
-    } else {
-      const preloadUrlWithAuth = this.createContentUrlWithAuthParams(template);
-      this.preloader.showPreload(preloadUrlWithAuth, this.mediaContainerEl, options);
+    const contentUrl = this.createContentUrlV2(template);
+    if (this.preloadBlobUrl) {
+      URL.revokeObjectURL(this.preloadBlobUrl);
     }
+    this.fetchContentAsBlobUrl(contentUrl).then(blobUrl => {
+      if (this.isDestroyed()) {
+        URL.revokeObjectURL(blobUrl);
+        return;
+      }
+      this.preloadBlobUrl = blobUrl;
+      this.preloader.showPreload(blobUrl, this.mediaContainerEl, options);
+    }).catch(err => {
+      // Poster is a non-critical first-frame enhancement.
+      // Warn so prod 401s leave a breadcrumb in DevTools.
+      console.warn('Video preload failed', err); // eslint-disable-line no-console
+    });
     this.mediaEl.classList.add(CLASS_INVISIBLE);
   }
@@ -32712,18 +32652,13 @@ class VideoBaseViewer extends media_MediaBaseViewer {
     if (!preloadRep || !this.isRepresentationReady(preloadRep) || !preloadRep.content?.url_template) {
       return;
     }
-    if (this.featureEnabled('migrateAccessTokenToHeader')) {
-      const contentUrl = this.createContentUrlV2(preloadRep.content.url_template);
-      this.api.get(contentUrl, {
-        type: 'blob',
-        headers: this.appendAuthHeader()
-      }).catch(() => {});
-    } else {
-      const preloadUrlWithAuth = this.createContentUrlWithAuthParams(preloadRep.content.url_template);
-      this.api.get(preloadUrlWithAuth, {
-        type: 'blob'
-      }).catch(() => {});
-    }
+    const contentUrl = this.createContentUrlV2(preloadRep.content.url_template);
+    this.api.get(contentUrl, {
+      type: 'blob',
+      headers: this.appendAuthHeader()
+    }).catch(err => {
+      console.warn('Video preload prefetch failed', err); // eslint-disable-line no-console
+    });
   }
   buildPlayButtonWithSeekButtons() {
     this.playContainerEl = this.mediaContainerEl.appendChild(document.createElement('div'));
@@ -34807,7 +34742,7 @@ class DashViewer extends media_VideoBaseViewer {
       this.filmstripStatus.destroy();
     }
-    // Release blob: URL allocated for the filmstrip when migrateAccessTokenToHeader is on
+    // Release blob: URL allocated for the filmstrip
     if (this.filmstripUrl && this.filmstripUrl.startsWith('blob:')) {
       URL.revokeObjectURL(this.filmstripUrl);
     }
@@ -34885,17 +34820,11 @@ class DashViewer extends media_VideoBaseViewer {
     } = this.options;
     if (content && this.isRepresentationReady(representation)) {
       const template = representation.content.url_template;
-      if (this.featureEnabled('migrateAccessTokenToHeader')) {
-        const contentUrl = this.createContentUrlV2(template, MANIFEST);
-        this.api.get(contentUrl, {
-          type: 'document',
-          headers: this.appendAuthHeader()
-        });
-      } else {
-        this.api.get(this.createContentUrlWithAuthParams(template, MANIFEST), {
-          type: 'document'
-        });
-      }
+      const contentUrl = this.createContentUrlV2(template, MANIFEST);
+      this.api.get(contentUrl, {
+        type: 'document',
+        headers: this.appendAuthHeader()
+      });
     }
   }
@@ -35021,7 +34950,7 @@ class DashViewer extends media_VideoBaseViewer {
   }
   /**
-   * A networking filter to append representation URLs with tokens
+   * Rewrites representation URIs without an access token and attaches Authorization headers.
    * Manifest type will use an asset name. Segments will not.
    *
    * @private
@@ -35032,28 +34961,16 @@ class DashViewer extends media_VideoBaseViewer {
   requestFilter(type, request) {
     const asset = type === shaka.net.NetworkingEngine.RequestType.MANIFEST ? MANIFEST : undefined;
     /* eslint-disable no-param-reassign */
-    if (this.featureEnabled('migrateAccessTokenToHeader')) {
-      request.uris = request.uris.map(uri => {
-        let newUri = this.createContentUrlV2(uri, asset);
-        if (asset !== MANIFEST && this.options.file.watermark_info.is_watermarked) {
-          newUri = appendQueryParams(newUri, {
-            watermark_content: this.watermarkCacheBust
-          });
-        }
-        return newUri;
-      });
-      DashViewer_extends(request.headers, this.appendAuthHeader());
-    } else {
-      request.uris = request.uris.map(uri => {
-        let newUri = this.createContentUrlWithAuthParams(uri, asset);
-        if (asset !== MANIFEST && this.options.file.watermark_info.is_watermarked) {
-          newUri = appendQueryParams(newUri, {
-            watermark_content: this.watermarkCacheBust
-          });
-        }
-        return newUri;
-      });
-    }
+    request.uris = request.uris.map(uri => {
+      let newUri = this.createContentUrlV2(uri, asset);
+      if (asset !== MANIFEST && this.options.file.watermark_info.is_watermarked) {
+        newUri = appendQueryParams(newUri, {
+          watermark_content: this.watermarkCacheBust
+        });
+      }
+      return newUri;
+    });
+    request.headers = DashViewer_extends(request.headers || {}, this.appendAuthHeader());
     /* eslint-enable no-param-reassign */
   }
@@ -35616,29 +35533,14 @@ class DashViewer extends media_VideoBaseViewer {
     const filmstrip = getRepresentation(this.options.file, 'filmstrip');
     const filmstripInterval = filmstrip && filmstrip.metadata && filmstrip.metadata.interval;
     if (filmstripInterval > 0) {
-      const useHeaders = this.featureEnabled('migrateAccessTokenToHeader');
       const useReactControls = this.useReactControls();
-      const url = useHeaders ? this.createContentUrlV2(filmstrip.content.url_template) : this.createContentUrlWithAuthParams(filmstrip.content.url_template);
+      const url = this.createContentUrlV2(filmstrip.content.url_template);
       this.filmstripInterval = filmstripInterval;
       this.filmstripStatus = this.getRepStatus(filmstrip);
-      // When useHeaders is on, the URL has no token and would 401 if rendered as <img src>.
-      // Defer setting filmstripUrl until the blob: URL is ready below.
-      this.filmstripUrl = useHeaders ? null : url;
-      // Legacy controls have a synchronous init path when the URL already carries a token.
-      if (!useHeaders && !useReactControls) {
-        this.mediaControls.initFilmstrip(url, this.filmstripStatus, this.aspect, filmstripInterval);
-        return;
-      }
-      this.filmstripStatus.getPromise().then(() => useHeaders ? this.fetchContentAsBlobUrl(url) : url).then(filmstripUrl => {
-        // <img src> can't carry an Authorization header, so when the access-token has
-        // been migrated out of the URL we expose the rep as a blob: URL instead.
-        // If the viewer was destroyed while we were fetching, release the blob now —
-        // destroy() can't see it because filmstripUrl was still null when it ran.
+      this.filmstripUrl = null;
+      this.filmstripStatus.getPromise().then(() => this.fetchContentAsBlobUrl(url)).then(filmstripUrl => {
         if (this.destroyed) {
-          if (useHeaders) {
-            URL.revokeObjectURL(filmstripUrl);
-          }
+          URL.revokeObjectURL(filmstripUrl);
           return;
         }
         this.filmstripUrl = filmstripUrl;
@@ -35648,9 +35550,8 @@ class DashViewer extends media_VideoBaseViewer {
           this.mediaControls.initFilmstrip(filmstripUrl, this.filmstripStatus, this.aspect, filmstripInterval);
         }
       })
-      // Filmstrip is a non-critical scrubbing-preview enhancement, so any failure
-      // (rep status reject, blob fetch reject) is swallowed rather than failing
-      // the whole viewer. Warn so prod 401s leave a breadcrumb in DevTools.
+      // Filmstrip is a non-critical scrubbing-preview enhancement.
+      // Warn so prod 401s leave a breadcrumb in DevTools.
       .catch(err => {
         console.warn('Filmstrip load failed', err); // eslint-disable-line no-console
       });
@@ -35671,7 +35572,7 @@ class DashViewer extends media_VideoBaseViewer {
     if (!extractedText?.content?.url_template) {
       return;
     }
-    const transcriptionUrl = this.featureEnabled('migrateAccessTokenToHeader') ? this.createContentUrlV2(extractedText.content.url_template) : this.createContentUrlWithAuthParams(extractedText.content.url_template);
+    const transcriptionUrl = this.createContentUrlV2(extractedText.content.url_template);
     this.transcriptionStatus = this.getRepStatus(extractedText);
     try {
       await this.transcriptionStatus.getPromise();
@@ -40671,15 +40572,14 @@ class DocBaseViewer extends viewers_BaseViewer {
     const pagedWebpRepReady = pagedWebpRep && this.isRepresentationReady(pagedWebpRep) && pagedWebpRep.content?.url_template;
     const jpegRepReady = jpegPreloadRep && this.isRepresentationReady(jpegPreloadRep) && jpegPreloadRep.content?.url_template;
     const onlyJpegRepAvailable = jpegRepReady && !pagedWebpRepReady;
-    const useHeaders = this.featureEnabled('migrateAccessTokenToHeader');
-    const headersOption = useHeaders ? {
+    const headersOption = {
       headers: this.appendAuthHeader()
-    } : {};
+    };
     if (onlyJpegRepAvailable) {
       const {
         url_template: jpegUrlTemplate = ''
       } = jpegPreloadRep.content;
-      const jpegUrlAuthTemplate = useHeaders ? this.createContentUrlV2(jpegUrlTemplate) : this.createContentUrlWithAuthParams(jpegUrlTemplate);
+      const jpegUrlAuthTemplate = this.createContentUrlV2(jpegUrlTemplate);
       const promises = getPreloadImageRequestPromises(this.api, jpegUrlAuthTemplate, 1, '', headersOption);
       Promise.all(promises).then(() => {
         this.preloaderImagesPrefetched = true;
@@ -40690,7 +40590,7 @@ class DocBaseViewer extends viewers_BaseViewer {
       } = pagedWebpRep.content;
       const pageCount = pagedWebpRep.metadata?.pages || 8;
       const newPagedUrlTemplate = pagedUrlTemplate.replace(/\{.*\}/, DocBaseViewer_PAGED_URL_TEMPLATE_PAGE_NUMBER_HOLDER);
-      const pagedUrlAuthTemplate = useHeaders ? this.createContentUrlV2(newPagedUrlTemplate) : this.createContentUrlWithAuthParams(newPagedUrlTemplate);
+      const pagedUrlAuthTemplate = this.createContentUrlV2(newPagedUrlTemplate);
       if (docFirstPagesConfig && docFirstPagesConfig.priorityPages) {
         const {
           priorityPages,
@@ -40755,19 +40655,11 @@ class DocBaseViewer extends viewers_BaseViewer {
           const {
             url_template: template
           } = preloadRep.content;
-          // Prefetch as blob since preload needs to load image as a blob
-          if (this.featureEnabled('migrateAccessTokenToHeader')) {
-            const contentUrl = this.createContentUrlV2(template);
-            this.api.get(contentUrl, {
-              type: 'blob',
-              headers: this.appendAuthHeader()
-            });
-          } else {
-            this.api.get(this.createContentUrlWithAuthParams(template), {
-              type: 'blob'
-            });
-          }
+          const contentUrl = this.createContentUrlV2(template);
+          this.api.get(contentUrl, {
+            type: 'blob',
+            headers: this.appendAuthHeader()
+          });
         }
       } else {
         this.prefetchPreloaderImages(file);
@@ -40777,17 +40669,11 @@ class DocBaseViewer extends viewers_BaseViewer {
       const {
         url_template: template
       } = representation.content;
-      if (this.featureEnabled('migrateAccessTokenToHeader')) {
-        const contentUrl = this.createContentUrlV2(template);
-        this.api.get(contentUrl, {
-          type: 'document',
-          headers: this.appendAuthHeader()
-        });
-      } else {
-        this.api.get(this.createContentUrlWithAuthParams(template), {
-          type: 'document'
-        });
-      }
+      const contentUrl = this.createContentUrlV2(template);
+      this.api.get(contentUrl, {
+        type: 'document',
+        headers: this.appendAuthHeader()
+      });
     }
   }
@@ -40846,11 +40732,10 @@ class DocBaseViewer extends viewers_BaseViewer {
     const {
       url_template: template = ''
     } = preloadRep?.content || {};
-    const useHeaders = this.featureEnabled('migrateAccessTokenToHeader');
-    const preloadUrl = useHeaders ? this.createContentUrlV2(template) : this.createContentUrlWithAuthParams(template);
-    const headersOption = useHeaders ? {
+    const preloadUrl = this.createContentUrlV2(template);
+    const headersOption = {
       headers: this.appendAuthHeader()
-    } : {};
+    };
     if (!this.docFirstPagesEnabled) {
       this.startPreloadTimer();
       this.preloader.showPreload(preloadUrl, this.containerEl, headersOption);
@@ -40874,7 +40759,7 @@ class DocBaseViewer extends viewers_BaseViewer {
           url_template: pagedUrlTemplate = ''
         } = preloadRepPaged?.content || {};
         const newPagedUrlTemplate = pagedUrlTemplate.replace(/\{.*\}/, DocBaseViewer_PAGED_URL_TEMPLATE_PAGE_NUMBER_HOLDER);
-        const pagedPreLoadUrl = useHeaders ? this.createContentUrlV2(newPagedUrlTemplate) : this.createContentUrlWithAuthParams(newPagedUrlTemplate);
+        const pagedPreLoadUrl = this.createContentUrlV2(newPagedUrlTemplate);
         this.preloader.showPreload(null, this.containerEl, pagedPreLoadUrl, pageCount, this, headersOption);
       }
     }
@@ -40914,11 +40799,7 @@ class DocBaseViewer extends viewers_BaseViewer {
       this.showPreload();
     }
     const template = this.options.representation.content.url_template;
-    if (this.featureEnabled('migrateAccessTokenToHeader')) {
-      this.pdfUrl = this.createContentUrlV2(template);
-    } else {
-      this.pdfUrl = this.createContentUrlWithAuthParams(template);
-    }
+    this.pdfUrl = this.createContentUrlV2(template);
     let jsAssets;
     let cssAssets;
     const useNpmPdfjs = this.featureEnabled('useNpmPdfjs');
@@ -41317,9 +41198,7 @@ class DocBaseViewer extends viewers_BaseViewer {
       rangeChunkSize,
       url: pdfUrl
     };
-    if (this.featureEnabled('migrateAccessTokenToHeader')) {
-      pdfDocConfig.httpHeaders = this.appendAuthHeader();
-    }
+    pdfDocConfig.httpHeaders = this.appendAuthHeader();
     this.pdfLoadingTask = this.pdfjsLib.getDocument(pdfDocConfig);
     if (this.pageTracker) {
       this.addListener('preview_event_report', this.handlePreviewEventReport);
@@ -41638,13 +41517,10 @@ class DocBaseViewer extends viewers_BaseViewer {
    * @return {Promise} Promise setting print blob
    */
   fetchPrintBlob(pdfUrl) {
-    const options = {
-      type: 'blob'
-    };
-    if (this.featureEnabled('migrateAccessTokenToHeader')) {
-      options.headers = this.appendAuthHeader();
-    }
-    return this.api.get(pdfUrl, options).then(blob => {
+    return this.api.get(pdfUrl, {
+      type: 'blob',
+      headers: this.appendAuthHeader()
+    }).then(blob => {
       this.printBlob = blob;
     });
   }
@@ -47341,7 +47217,7 @@ class OfficeViewer extends viewers_BaseViewer {
     // This occurs in the case of .xlsb files where no pdf rep exists
     if (template) {
-      this.pdfUrl = this.createContentUrlWithAuthParams(template);
+      this.pdfUrl = this.createContentUrlV2(template);
     }
   }
@@ -47501,7 +47377,8 @@ class OfficeViewer extends viewers_BaseViewer {
    */
   fetchPrintBlob(pdfUrl) {
     return this.api.get(pdfUrl, {
-      type: 'blob'
+      type: 'blob',
+      headers: this.appendAuthHeader()
     }).then(blob => {
       this.printBlob = blob;
     });
@@ -48930,8 +48807,25 @@ class Preview extends (events_default()) {
       const params = Preview_objectSpread({
         response_content_disposition_type: 'attachment'
       }, queryParams);
-      const downloadUrl = appendQueryParams(this.viewer.createContentUrlWithAuthParams(contentUrlTemplate, this.viewer.getAssetPath()), params);
-      this.api.reachability.downloadWithReachabilityCheck(downloadUrl);
+      const downloadUrl = appendQueryParams(this.viewer.createContentUrlV2(contentUrlTemplate, this.viewer.getAssetPath()), params);
+      this.api.get(downloadUrl, {
+        type: 'blob',
+        headers: this.getRequestHeaders()
+      }).then(data => {
+        const blob = data instanceof Blob ? data : new Blob([data]);
+        const blobUrl = URL.createObjectURL(blob);
+        const anchor = document.createElement('a');
+        anchor.href = blobUrl;
+        anchor.download = this.file && this.file.name || 'download';
+        document.body.appendChild(anchor);
+        anchor.click();
+        document.body.removeChild(anchor);
+        URL.revokeObjectURL(blobUrl);
+      }).catch(error => {
+        const code = getProp(error, 'response.data.code');
+        const msg = code === ERROR_CODE_403_FORBIDDEN_BY_POLICY ? downloadErrorDueToPolicyMsg : downloadErrorMsg;
+        this.ui.showNotification(msg);
+      });
       // Otherwise, get the content download URL of the original file and download
     } else {
@@ -49002,8 +48896,7 @@ class Preview extends (events_default()) {
     sharedLinkPassword = '',
     preload = false,
     isDocFirstPrefetchEnabled = false,
-    docFirstPagesConfig = null,
-    isAccessTokenHeaderEnabled = false
+    docFirstPagesConfig = null
   }) {
     let file;
     let loader;
@@ -49044,9 +48937,6 @@ class Preview extends (events_default()) {
       options.sharedLinkPassword = sharedLinkPassword;
       options.isDocFirstPrefetchEnabled = isDocFirstPrefetchEnabled;
       options.docFirstPagesConfig = docFirstPagesConfig;
-      options.features = Preview_objectSpread(Preview_objectSpread({}, this.options.features), {}, {
-        migrateAccessTokenToHeader: isAccessTokenHeaderEnabled
-      });
     }
     const viewerInstance = new viewer.CONSTRUCTOR(this.createViewerOptions(options));
     if (typeof viewerInstance.prefetch === 'function') {

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
     "name": "box-content-preview",
-    "version": "3.78.0",
+    "version": "3.79.0",
     "description": "Box Content Preview UI Element",
     "author": "Box (https://www.box.com/)",
     "license": "SEE LICENSE IN LICENSE",
@@ -49,7 +49,7 @@
         "@babel/plugin-proposal-class-properties": "^7.18.6",
         "@babel/plugin-proposal-object-rest-spread": "^7.18.6",
         "@babel/plugin-transform-object-assign": "^7.18.6",
-        "@babel/preset-env": "^7.18.6",
+        "@babel/preset-env": "^7.24.7",
         "@babel/preset-react": "^7.18.6",
         "@babel/preset-typescript": "^7.18.6",
         "@box/blueprint-web": "^14.41.0",
@@ -80,8 +80,8 @@
         "box-ui-elements": "^20.0.0",
         "chai": "^4.2.0",
         "classnames": "^2.2.6",
-        "conventional-changelog-cli": "^2.0.28",
-        "conventional-github-releaser": "^3.1.3",
+        "conventional-changelog": "^8.1.3",
+        "conventional-changelog-conventionalcommits": "^10.3.0",
         "create-react-class": "^15.6.2",
         "css-loader": "^6.11.0",
         "css-minimizer-webpack-plugin": "^8.0.0",
@@ -89,7 +89,6 @@
         "eslint": "^8.43.0",
         "eslint-config-airbnb": "^18.0.1",
         "eslint-config-prettier": "^6.7.0",
-        "eslint-import-resolver-webpack": "^0.11.1",
         "eslint-plugin-babel": "^5.3.0",
         "eslint-plugin-chai-friendly": "^0.4.1",
         "eslint-plugin-cypress": "^2.8.1",
@@ -114,7 +113,6 @@
         "lodash": "^4.18.1",
         "mini-css-extract-plugin": "^2.10.2",
         "mock-local-storage": "^1.1.15",
-        "mojito-rb-gen": "^0.0.1",
         "npm-run-all": "^4.1.5",
         "postcss": "^8.5.18",
         "postcss-loader": "^8.1.1",
@@ -149,7 +147,7 @@
         "build": "yarn setup && yarn clean && yarn build:i18n && yarn build:dev",
         "build:ci": "yarn setup && yarn webpack --progress --config build/webpack.config.js",
         "build:dev": "BABEL_ENV=dev NODE_ENV=dev yarn webpack --progress --config build/webpack.config.js",
-        "build:i18n": "mojito-rb-gen -s src/i18n -o src/i18n/json -b en-US.properties",
+        "build:i18n": "node build/buildI18n.js",
         "build:lib": "yarn build:i18n && yarn build:lib:js && yarn build:lib:verify && yarn build:lib:types",
         "build:lib:verify": "node build/verifyLibBundle.js",
         "build:lib:js": "BABEL_ENV=production NODE_ENV=production yarn webpack --config build/webpack.config.lib.js",