canopycms-next 0.0.68-int.96 → 0.0.68-int.97

package/dist/context-wrapper.d.ts

@@ -145,7 +145,8 @@ export interface NextCanopyContextResult {
      *
      * Each view is made by `withCanopyPreview` (`canopycms-next/client`) in a `'use client'` module.
      * It renders each entry from the `?branch=` the editor names, through `views[entryType]` with
-     * the live draft. Reads are request-scoped and ACL-checked, and anything not readable is a 404.
+     * the live draft. Reads are request-scoped and ACL-checked, and an anonymous request or anything
+     * not readable is a 404.
      * A view that needs more server reads is `previewView({ view, load })`: `load` runs after the
      * entry is read and its result arrives as the view's `extras` prop.
      */

package/dist/preview-page.d.ts

@@ -63,7 +63,10 @@ export interface CreatePreviewPageOptions {
      * type has no view is a 404.
      */
     views: Record<string, PreviewView | ErasedPreviewViewWithLoader>;
-    /** Editor origin to trust, for an editor on another origin. Defaults to the page's own. */
+    /**
+     * Editor origin to trust, for an editor on another origin. Defaults to the page's own. The
+     * viewer must still be signed in on this page's origin: an anonymous request is a 404.
+     */
     editorOrigin?: string;
 }
 /** The props Next passes a `[[...path]]` page. */
@@ -79,8 +82,8 @@ export interface PreviewPageProps {
  *
  * The read goes through the request-scoped `getCanopy()`, never the build context: it is
  * authenticated and ACL-checked, and a branch other than the active one is only loaded, never
- * created. A missing, unreadable or malformed branch, and a path no entry publishes, are all a
- * 404, so a hidden branch looks the same as a missing one.
+ * created. An anonymous request, a missing, unreadable or malformed branch, and a path no entry
+ * publishes, are all a 404, so a hidden branch looks the same as a missing one.
  *
  * On a `deployedAs: 'static'` deployment every request is a 404: reads there skip access checks,
  * so the route would show any branch to anyone.

package/dist/preview-page.js

@@ -19,8 +19,8 @@ function hasLoader(entry) {
  *
  * The read goes through the request-scoped `getCanopy()`, never the build context: it is
  * authenticated and ACL-checked, and a branch other than the active one is only loaded, never
- * created. A missing, unreadable or malformed branch, and a path no entry publishes, are all a
- * 404, so a hidden branch looks the same as a missing one.
+ * created. An anonymous request, a missing, unreadable or malformed branch, and a path no entry
+ * publishes, are all a 404, so a hidden branch looks the same as a missing one.
  *
  * On a `deployedAs: 'static'` deployment every request is a 404: reads there skip access checks,
  * so the route would show any branch to anyone.
@@ -35,6 +35,10 @@ export function createPreviewPageFor(getCanopy, options, deployedAs = 'server')
         if (Array.isArray(branch))
             notFound();
         const canopy = await getCanopy();
+        // ACLs alone would let an anonymous user read the base branch, and this route sits under the
+        // editor's paths, which a site-wide gate exempts because the editor's sign-in guards them.
+        if (canopy.user.type === 'anonymous')
+            notFound();
         const result = await canopy.readByUrlPath(`/${path.join('/')}`, { branch });
         if (!result)
             notFound();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "canopycms-next",
-  "version": "0.0.68-int.96",
+  "version": "0.0.68-int.97",
   "description": "Next.js adapter for CanopyCMS",
   "license": "MIT",
   "repository": {
@@ -38,7 +38,7 @@
   "peerDependencies": {
     "next": "^13.5.7 || ^14.2.25 || ^15.5.21 || >=16.0.0 <16.2.0 || >=16.3.0 <17.0.0",
     "react": "^18.0.0 || ^19.0.0",
-    "canopycms": "0.0.68-int.96"
+    "canopycms": "0.0.68-int.97"
   },
   "devDependencies": {
     "@types/node": "^22.9.0",
@@ -48,7 +48,7 @@
     "react": "^18.3.1",
     "typescript": "^5.6.3",
     "vitest": "^4.1.0",
-    "canopycms": "0.0.68-int.96"
+    "canopycms": "0.0.68-int.97"
   },
   "scripts": {
     "build": "rm -rf dist && tsc -p tsconfig.build.json && node ../../scripts/add-js-extensions.mjs dist && esbuild src/config.ts --bundle --platform=node --packages=external --external:next --format=cjs --outfile=dist/config.cjs && esbuild src/config.ts --bundle --platform=node --packages=external --external:next --format=esm --outfile=dist/config.mjs",