create-nextblock 0.9.71 → 0.9.72

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-nextblock",
-  "version": "0.9.71",
+  "version": "0.9.72",
   "description": "",
   "main": "index.js",
   "bin": {

package/templates/nextblock-template/app/api/draft/disable/route.ts

@@ -1,6 +1,9 @@
 import { draftMode } from "next/headers";
 import { NextRequest, NextResponse } from "next/server";
-import { normalizeDraftRedirectPath } from "../../../../lib/visual-editing/draft-route";
+import {
+  normalizeDraftRedirectPath,
+  resolveRequestOrigin,
+} from "../../../../lib/visual-editing/draft-route";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
@@ -19,7 +22,7 @@ export async function GET(request: NextRequest) {
   const draft = await draftMode();
   draft.disable();
 
-  const response = NextResponse.redirect(new URL(normalizedPath, request.url));
+  const response = NextResponse.redirect(new URL(normalizedPath, resolveRequestOrigin(request)));
   response.headers.set("Cache-Control", "no-store");
   return response;
 }

package/templates/nextblock-template/app/api/draft/route.ts

@@ -4,6 +4,7 @@ import { createVerificationClient } from "../../../lib/visual-editing/draft-cont
 import {
   normalizeDraftRedirectPath,
   resolveDraftPathTarget,
+  resolveRequestOrigin,
   type DraftPathTarget,
 } from "../../../lib/visual-editing/draft-route";
 
@@ -87,7 +88,7 @@ export async function GET(request: NextRequest) {
   const draft = await draftMode();
   draft.enable();
 
-  const response = NextResponse.redirect(new URL(target.path, request.url));
+  const response = NextResponse.redirect(new URL(target.path, resolveRequestOrigin(request)));
   response.headers.set("Cache-Control", "no-store");
   return response;
 }

package/templates/nextblock-template/app/api/draft/start/route.ts

@@ -4,6 +4,7 @@ import { getCurrentUserCanEdit } from "../../../../lib/visual-editing/draft-cont
 import {
   normalizeDraftRedirectPath,
   resolveDraftPathTarget,
+  resolveRequestOrigin,
   type DraftPathTarget,
 } from "../../../../lib/visual-editing/draft-route";
 
@@ -15,10 +16,11 @@ function getRequestedPath(request: NextRequest) {
 }
 
 function redirectToSignIn(request: NextRequest, normalizedPath: string) {
-  const retryUrl = new URL(request.nextUrl.pathname, request.url);
+  const origin = resolveRequestOrigin(request);
+  const retryUrl = new URL(request.nextUrl.pathname, origin);
   retryUrl.searchParams.set("path", normalizedPath);
 
-  const signInUrl = new URL("/sign-in", request.url);
+  const signInUrl = new URL("/sign-in", origin);
   signInUrl.searchParams.set("redirect", `${retryUrl.pathname}${retryUrl.search}`);
   return redirectNoStore(signInUrl);
 }
@@ -73,5 +75,5 @@ export async function GET(request: NextRequest) {
   const draft = await draftMode();
   draft.enable();
 
-  return redirectNoStore(new URL(target.path, request.url));
+  return redirectNoStore(new URL(target.path, resolveRequestOrigin(request)));
 }

package/templates/nextblock-template/lib/visual-editing/draft-route.ts

@@ -1,3 +1,4 @@
+import type { NextRequest } from "next/server";
 import type { NextblockDocumentType } from "./types";
 
 export type DraftPathDocumentType = NextblockDocumentType | "product";
@@ -80,3 +81,20 @@ export function resolveDraftPathTarget(path: string): DraftPathTarget | null {
     path: `/${encodeURIComponent(slug)}`,
   };
 }
+
+/**
+ * Browser-facing origin for a redirect. In the self-hosted Docker standalone server (binds to
+ * HOSTNAME=0.0.0.0), `request.url` / `request.nextUrl.origin` carry `http://0.0.0.0:3000` — an
+ * unroutable address that the browser rejects (ERR_ADDRESS_INVALID). The incoming `Host` header
+ * reflects what the user actually requested (e.g. localhost:3000), so prefer it (honoring
+ * `x-forwarded-proto` behind a proxy). Falls back to the request origin when no Host is present.
+ */
+export function resolveRequestOrigin(request: NextRequest): string {
+  const host = request.headers.get("host");
+  if (host) {
+    const forwardedProto = request.headers.get("x-forwarded-proto")?.split(",")[0]?.trim();
+    const protocol = forwardedProto || request.nextUrl.protocol.replace(/:$/, "") || "http";
+    return `${protocol}://${host}`;
+  }
+  return request.nextUrl.origin;
+}

package/templates/nextblock-template/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nextblock-cms/template",
-  "version": "0.9.71",
+  "version": "0.9.72",
   "private": true,
   "scripts": {
     "dev": "next dev",