create-nextjs-cms 0.5.28 → 0.5.29

package/dist/index.js

@@ -2,6 +2,7 @@
 import fs from 'fs-extra';
 import { execSync } from 'node:child_process';
 import { fileURLToPath } from 'node:url';
+import { randomBytes } from 'node:crypto';
 import path, { dirname, resolve, relative, basename } from 'node:path';
 import { Command } from 'commander';
 import prompts from 'prompts';
@@ -166,6 +167,37 @@ export default hasItemsSection({
     await fs.writeFile(blogSectionPath, blogSectionContent, 'utf-8');
     console.log('✅ Blog section created successfully!');
 }
+/**
+ * Generates a random secret string using crypto.randomBytes
+ */
+function generateSecret() {
+    return randomBytes(32).toString('hex');
+}
+/**
+ * Updates .env file with generated random secrets
+ */
+async function updateEnvSecrets(targetDir) {
+    const envPath = path.join(targetDir, '.env');
+    if (!(await fs.pathExists(envPath))) {
+        console.warn('⚠️  No .env file found; skipping secret generation.');
+        return;
+    }
+    try {
+        let envContent = await fs.readFile(envPath, 'utf-8');
+        // Replace placeholder secrets with generated ones
+        envContent = envContent.replace(/ACCESS_TOKEN_SECRET=.*/, `ACCESS_TOKEN_SECRET=${generateSecret()}`);
+        envContent = envContent.replace(/REFRESH_TOKEN_SECRET=.*/, `REFRESH_TOKEN_SECRET=${generateSecret()}`);
+        envContent = envContent.replace(/CSRF_TOKEN_SECRET=.*/, `CSRF_TOKEN_SECRET=${generateSecret()}`);
+        envContent = envContent.replace(/ACCESS_TOKEN_EXPIRATION=.*/, 'ACCESS_TOKEN_EXPIRATION=2h');
+        envContent = envContent.replace(/REFRESH_TOKEN_EXPIRATION=.*/, 'REFRESH_TOKEN_EXPIRATION=1y');
+        await fs.writeFile(envPath, envContent, 'utf-8');
+        console.log('🔐 Generated random secrets and set token expirations in .env file');
+    }
+    catch (e) {
+        console.warn('⚠️  Could not update .env secrets automatically.');
+        console.warn(`   Error: ${e instanceof Error ? e.message : 'Unknown error'}`);
+    }
+}
 async function createNextjsCms() {
     console.log('🚀 Welcome to NextJS CMS!');
     console.log('Creating your new CMS project...\n');
@@ -291,6 +323,8 @@ async function createNextjsCms() {
             errorOnExist: false,
         });
         console.log('✅ Template copied successfully!');
+        // Generate random secrets for .env file
+        await updateEnvSecrets(options.targetDir);
         // npm excludes .gitignore from packages, so we rename it back from _gitignore
         const gitignoreTemplatePath = path.join(options.targetDir, '_gitignore');
         const gitignorePath = path.join(options.targetDir, '.gitignore');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-nextjs-cms",
-  "version": "0.5.28",
+  "version": "0.5.29",
   "private": false,
   "bin": {
     "create-nextjs-cms": "./dist/index.js"
@@ -26,8 +26,8 @@
     "tsx": "^4.20.6",
     "typescript": "^5.9.2",
     "@lzcms/eslint-config": "0.3.0",
-    "@lzcms/tsconfig": "0.1.0",
-    "@lzcms/prettier-config": "0.1.0"
+    "@lzcms/prettier-config": "0.1.0",
+    "@lzcms/tsconfig": "0.1.0"
   },
   "prettier": "@lzcms/prettier-config",
   "scripts": {

package/templates/default/package.json

@@ -70,7 +70,7 @@
     "nanoid": "^5.1.2",
     "next": "^15.5.5",
     "next-themes": "^0.4.6",
-    "nextjs-cms": "0.5.28",
+    "nextjs-cms": "0.5.29",
     "plaiceholder": "^3.0.0",
     "prettier-plugin-tailwindcss": "^0.7.2",
     "qrcode": "^1.5.4",
@@ -103,7 +103,7 @@
     "eslint-config-prettier": "^10.0.1",
     "eslint-plugin-prettier": "^5.2.3",
     "fs-extra": "^11.3.3",
-    "nextjs-cms-kit": "0.5.28",
+    "nextjs-cms-kit": "0.5.29",
     "postcss": "^8.5.1",
     "prettier": "3.5.0",
     "tailwindcss": "^4.1.18",