create-nextjs-cms 0.8.10 → 0.9.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (193) hide show
  1. package/LICENSE +21 -21
  2. package/README.md +71 -71
  3. package/dist/helpers/utils.js +16 -16
  4. package/dist/lib/section-creators.js +166 -166
  5. package/package.json +2 -2
  6. package/templates/default/.eslintrc.json +5 -5
  7. package/templates/default/.prettierignore +7 -7
  8. package/templates/default/.prettierrc.json +27 -27
  9. package/templates/default/CHANGELOG.md +140 -140
  10. package/templates/default/_gitignore +57 -57
  11. package/templates/default/app/(auth)/auth/login/LoginPage.tsx +192 -192
  12. package/templates/default/app/(auth)/auth/login/page.tsx +11 -11
  13. package/templates/default/app/(auth)/auth-language-provider.tsx +34 -0
  14. package/templates/default/app/(auth)/layout.tsx +81 -81
  15. package/templates/default/app/(rootLayout)/(plugins)/[...slug]/page.tsx +40 -40
  16. package/templates/default/app/(rootLayout)/(plugins)/[...slug]/plugin-server-registry.ts +16 -16
  17. package/templates/default/app/(rootLayout)/admins/page.tsx +10 -10
  18. package/templates/default/app/(rootLayout)/browse/[section]/[page]/page.tsx +22 -22
  19. package/templates/default/app/(rootLayout)/categorized/[section]/page.tsx +15 -15
  20. package/templates/default/app/(rootLayout)/dashboard/page.tsx +63 -63
  21. package/templates/default/app/(rootLayout)/dashboard-new/page.tsx +7 -7
  22. package/templates/default/app/(rootLayout)/edit/[section]/[itemId]/page.tsx +20 -17
  23. package/templates/default/app/(rootLayout)/layout.tsx +81 -81
  24. package/templates/default/app/(rootLayout)/loading.tsx +10 -10
  25. package/templates/default/app/(rootLayout)/log/page.tsx +7 -7
  26. package/templates/default/app/(rootLayout)/new/[section]/page.tsx +15 -15
  27. package/templates/default/app/(rootLayout)/section/[section]/page.tsx +19 -16
  28. package/templates/default/app/(rootLayout)/settings/page.tsx +13 -13
  29. package/templates/default/app/_trpc/client.ts +3 -3
  30. package/templates/default/app/api/auth/csrf/route.ts +25 -25
  31. package/templates/default/app/api/auth/refresh/route.ts +10 -10
  32. package/templates/default/app/api/auth/route.ts +49 -49
  33. package/templates/default/app/api/auth/session/route.ts +20 -20
  34. package/templates/default/app/api/document/route.ts +165 -165
  35. package/templates/default/app/api/editor/photo/route.ts +49 -49
  36. package/templates/default/app/api/photo/route.ts +27 -27
  37. package/templates/default/app/api/submit/section/item/[slug]/route.ts +95 -66
  38. package/templates/default/app/api/submit/section/item/route.ts +56 -56
  39. package/templates/default/app/api/submit/section/simple/route.ts +86 -57
  40. package/templates/default/app/api/trpc/[trpc]/route.ts +33 -33
  41. package/templates/default/app/api/video/route.ts +174 -174
  42. package/templates/default/app/globals.css +228 -219
  43. package/templates/default/app/providers.tsx +152 -152
  44. package/templates/default/cms.config.ts +58 -57
  45. package/templates/default/components/AdminCard.tsx +166 -166
  46. package/templates/default/components/AdminEditPage.tsx +124 -124
  47. package/templates/default/components/AdminPrivilegeCard.tsx +185 -185
  48. package/templates/default/components/AdminsPage.tsx +43 -43
  49. package/templates/default/components/AnalyticsPage.tsx +128 -128
  50. package/templates/default/components/BarChartBox.tsx +42 -42
  51. package/templates/default/components/BrowsePage.tsx +106 -106
  52. package/templates/default/components/CategorizedSectionPage.tsx +31 -31
  53. package/templates/default/components/CategoryDeleteConfirmPage.tsx +130 -130
  54. package/templates/default/components/CategorySectionSelectInput.tsx +140 -140
  55. package/templates/default/components/ConditionalFields.tsx +49 -49
  56. package/templates/default/components/ContainerBox.tsx +24 -24
  57. package/templates/default/components/DashboardNewPage.tsx +253 -253
  58. package/templates/default/components/DashboardPage.tsx +188 -188
  59. package/templates/default/components/DashboardPageAlt.tsx +45 -45
  60. package/templates/default/components/DefaultNavItems.tsx +3 -3
  61. package/templates/default/components/Dropzone.tsx +154 -154
  62. package/templates/default/components/EmailCard.tsx +138 -138
  63. package/templates/default/components/EmailPasswordForm.tsx +85 -85
  64. package/templates/default/components/EmailQuotaForm.tsx +73 -73
  65. package/templates/default/components/EmailsPage.tsx +49 -49
  66. package/templates/default/components/ErrorComponent.tsx +16 -16
  67. package/templates/default/components/GalleryPhoto.tsx +93 -93
  68. package/templates/default/components/InfoCard.tsx +93 -93
  69. package/templates/default/components/ItemEditPage.tsx +294 -214
  70. package/templates/default/components/Layout.tsx +84 -84
  71. package/templates/default/components/LoadingSpinners.tsx +67 -67
  72. package/templates/default/components/LocaleSwitcher.tsx +89 -0
  73. package/templates/default/components/LogPage.tsx +107 -107
  74. package/templates/default/components/Modal.tsx +166 -166
  75. package/templates/default/components/Navbar.tsx +258 -258
  76. package/templates/default/components/NewAdminForm.tsx +173 -173
  77. package/templates/default/components/NewEmailForm.tsx +132 -132
  78. package/templates/default/components/NewPage.tsx +206 -205
  79. package/templates/default/components/NewVariantComponent.tsx +229 -229
  80. package/templates/default/components/PhotoGallery.tsx +35 -35
  81. package/templates/default/components/PieChartBox.tsx +101 -101
  82. package/templates/default/components/ProgressBar.tsx +48 -48
  83. package/templates/default/components/ProtectedDocument.tsx +44 -44
  84. package/templates/default/components/ProtectedImage.tsx +143 -143
  85. package/templates/default/components/ProtectedVideo.tsx +76 -76
  86. package/templates/default/components/SectionIcon.tsx +8 -8
  87. package/templates/default/components/SectionItemCard.tsx +144 -144
  88. package/templates/default/components/SectionItemStatusBadge.tsx +17 -17
  89. package/templates/default/components/SectionPage.tsx +205 -125
  90. package/templates/default/components/SelectBox.tsx +98 -98
  91. package/templates/default/components/SelectInputButtons.tsx +125 -125
  92. package/templates/default/components/SettingsPage.tsx +232 -232
  93. package/templates/default/components/Sidebar.tsx +204 -204
  94. package/templates/default/components/SidebarDropdownItem.tsx +83 -83
  95. package/templates/default/components/SidebarItem.tsx +24 -24
  96. package/templates/default/components/ThemeProvider.tsx +8 -8
  97. package/templates/default/components/TooltipComponent.tsx +27 -27
  98. package/templates/default/components/VariantCard.tsx +124 -124
  99. package/templates/default/components/VariantEditPage.tsx +230 -230
  100. package/templates/default/components/analytics/BounceRate.tsx +70 -70
  101. package/templates/default/components/analytics/LivePageViews.tsx +55 -55
  102. package/templates/default/components/analytics/LiveUsersCount.tsx +33 -33
  103. package/templates/default/components/analytics/MonthlyPageViews.tsx +42 -42
  104. package/templates/default/components/analytics/TopCountries.tsx +52 -52
  105. package/templates/default/components/analytics/TopDevices.tsx +46 -46
  106. package/templates/default/components/analytics/TopMediums.tsx +58 -58
  107. package/templates/default/components/analytics/TopSources.tsx +45 -45
  108. package/templates/default/components/analytics/TotalPageViews.tsx +41 -41
  109. package/templates/default/components/analytics/TotalSessions.tsx +41 -41
  110. package/templates/default/components/analytics/TotalUniqueUsers.tsx +41 -41
  111. package/templates/default/components/custom/RightHomeRoomVariantCard.tsx +138 -138
  112. package/templates/default/components/dndKit/Draggable.tsx +21 -21
  113. package/templates/default/components/dndKit/Droppable.tsx +20 -20
  114. package/templates/default/components/dndKit/SortableItem.tsx +18 -18
  115. package/templates/default/components/form/ContentLocaleContext.tsx +11 -0
  116. package/templates/default/components/form/DateRangeFormInput.tsx +57 -57
  117. package/templates/default/components/form/Form.tsx +360 -317
  118. package/templates/default/components/form/FormInputElement.tsx +70 -70
  119. package/templates/default/components/form/FormInputs.tsx +127 -118
  120. package/templates/default/components/form/helpers/_section-hot-reload.js +1 -1
  121. package/templates/default/components/form/helpers/util.ts +17 -17
  122. package/templates/default/components/form/inputs/CheckboxFormInput.tsx +46 -46
  123. package/templates/default/components/form/inputs/ColorFormInput.tsx +44 -44
  124. package/templates/default/components/form/inputs/DateFormInput.tsx +156 -156
  125. package/templates/default/components/form/inputs/DocumentFormInput.tsx +222 -222
  126. package/templates/default/components/form/inputs/MapFormInput.tsx +140 -140
  127. package/templates/default/components/form/inputs/MultipleSelectFormInput.tsx +85 -85
  128. package/templates/default/components/form/inputs/NumberFormInput.tsx +43 -42
  129. package/templates/default/components/form/inputs/PasswordFormInput.tsx +47 -47
  130. package/templates/default/components/form/inputs/PhotoFormInput.tsx +275 -219
  131. package/templates/default/components/form/inputs/RichTextFormInput.tsx +138 -135
  132. package/templates/default/components/form/inputs/SelectFormInput.tsx +175 -175
  133. package/templates/default/components/form/inputs/SlugFormInput.tsx +131 -131
  134. package/templates/default/components/form/inputs/TagsFormInput.tsx +264 -260
  135. package/templates/default/components/form/inputs/TextFormInput.tsx +51 -48
  136. package/templates/default/components/form/inputs/TextareaFormInput.tsx +50 -47
  137. package/templates/default/components/form/inputs/VideoFormInput.tsx +118 -118
  138. package/templates/default/components/{locale-dropdown.tsx → language-dropdown.tsx} +74 -74
  139. package/templates/default/components/{locale-picker.tsx → language-picker.tsx} +85 -85
  140. package/templates/default/components/login-language-dropdown.tsx +46 -0
  141. package/templates/default/components/multi-select.tsx +1146 -1146
  142. package/templates/default/components/pagination/Pagination.tsx +36 -36
  143. package/templates/default/components/pagination/PaginationButtons.tsx +147 -147
  144. package/templates/default/components/theme-toggle.tsx +39 -39
  145. package/templates/default/components/ui/accordion.tsx +53 -53
  146. package/templates/default/components/ui/alert-dialog.tsx +157 -157
  147. package/templates/default/components/ui/alert.tsx +47 -46
  148. package/templates/default/components/ui/badge.tsx +38 -38
  149. package/templates/default/components/ui/button.tsx +62 -62
  150. package/templates/default/components/ui/calendar.tsx +166 -166
  151. package/templates/default/components/ui/card.tsx +43 -43
  152. package/templates/default/components/ui/checkbox.tsx +29 -29
  153. package/templates/default/components/ui/command.tsx +137 -137
  154. package/templates/default/components/ui/custom-alert-dialog.tsx +113 -113
  155. package/templates/default/components/ui/custom-dialog.tsx +123 -123
  156. package/templates/default/components/ui/dialog.tsx +123 -123
  157. package/templates/default/components/ui/direction.tsx +22 -22
  158. package/templates/default/components/ui/dropdown-menu.tsx +182 -182
  159. package/templates/default/components/ui/input-group.tsx +54 -54
  160. package/templates/default/components/ui/input.tsx +22 -22
  161. package/templates/default/components/ui/label.tsx +19 -19
  162. package/templates/default/components/ui/popover.tsx +42 -42
  163. package/templates/default/components/ui/progress.tsx +31 -31
  164. package/templates/default/components/ui/scroll-area.tsx +42 -42
  165. package/templates/default/components/ui/select.tsx +165 -165
  166. package/templates/default/components/ui/separator.tsx +28 -28
  167. package/templates/default/components/ui/sheet.tsx +103 -103
  168. package/templates/default/components/ui/spinner.tsx +16 -16
  169. package/templates/default/components/ui/switch.tsx +29 -29
  170. package/templates/default/components/ui/table.tsx +83 -83
  171. package/templates/default/components/ui/tabs.tsx +55 -55
  172. package/templates/default/components/ui/toast.tsx +113 -113
  173. package/templates/default/components/ui/toaster.tsx +35 -35
  174. package/templates/default/components/ui/tooltip.tsx +30 -30
  175. package/templates/default/components/ui/use-toast.ts +188 -188
  176. package/templates/default/components.json +21 -21
  177. package/templates/default/context/ModalProvider.tsx +53 -53
  178. package/templates/default/drizzle.config.ts +4 -4
  179. package/templates/default/dynamic-schemas/schema.ts +28 -2
  180. package/templates/default/env/env.js +130 -130
  181. package/templates/default/envConfig.ts +4 -4
  182. package/templates/default/hooks/useModal.ts +8 -8
  183. package/templates/default/lib/apiHelpers.ts +92 -92
  184. package/templates/default/lib/postinstall.js +14 -14
  185. package/templates/default/lib/utils.ts +6 -6
  186. package/templates/default/next-env.d.ts +6 -6
  187. package/templates/default/next.config.ts +23 -23
  188. package/templates/default/package.json +1 -1
  189. package/templates/default/postcss.config.mjs +6 -6
  190. package/templates/default/proxy.ts +32 -32
  191. package/templates/default/tsconfig.json +48 -48
  192. package/templates/default/app/(auth)/auth-locale-provider.tsx +0 -34
  193. package/templates/default/components/login-locale-dropdown.tsx +0 -46
@@ -1,16 +1,19 @@
1
- import SectionPage from '@/components/SectionPage'
2
- import { api, HydrateClient } from 'nextjs-cms/api/trpc/server'
3
- type Params = Promise<{ section: string }>
4
-
5
- export default async function Page(props: { params: Params }) {
6
- const params = await props.params
7
- await api.simpleSections.create.prefetch({
8
- sectionName: params.section,
9
- })
10
-
11
- return (
12
- <HydrateClient>
13
- <SectionPage section={params.section} />
14
- </HydrateClient>
15
- )
16
- }
1
+ import SectionPage from '@/components/SectionPage'
2
+ import { api, HydrateClient } from 'nextjs-cms/api/trpc/server'
3
+ type Params = Promise<{ section: string }>
4
+ type SearchParams = Promise<{ locale?: string }>
5
+
6
+ export default async function Page(props: { params: Params; searchParams: SearchParams }) {
7
+ const params = await props.params
8
+ const searchParams = await props.searchParams
9
+ await api.simpleSections.create.prefetch({
10
+ sectionName: params.section,
11
+ locale: searchParams.locale,
12
+ })
13
+
14
+ return (
15
+ <HydrateClient>
16
+ <SectionPage section={params.section} />
17
+ </HydrateClient>
18
+ )
19
+ }
@@ -1,13 +1,13 @@
1
- import SettingsPage from '@/components/SettingsPage'
2
- import { api, HydrateClient } from 'nextjs-cms/api/trpc/server'
3
-
4
- export const dynamic = 'force-dynamic'
5
-
6
- export default async function Page() {
7
- await api.accountSettings.get.prefetch()
8
- return (
9
- <HydrateClient>
10
- <SettingsPage />
11
- </HydrateClient>
12
- )
13
- }
1
+ import SettingsPage from '@/components/SettingsPage'
2
+ import { api, HydrateClient } from 'nextjs-cms/api/trpc/server'
3
+
4
+ export const dynamic = 'force-dynamic'
5
+
6
+ export default async function Page() {
7
+ await api.accountSettings.get.prefetch()
8
+ return (
9
+ <HydrateClient>
10
+ <SettingsPage />
11
+ </HydrateClient>
12
+ )
13
+ }
@@ -1,3 +1,3 @@
1
- 'use client'
2
-
3
- export { trpc } from 'nextjs-cms/api/trpc/client'
1
+ 'use client'
2
+
3
+ export { trpc } from 'nextjs-cms/api/trpc/client'
@@ -1,25 +1,25 @@
1
- import { responseHeaders } from 'nextjs-cms/utils'
2
- import { createCSRFToken } from 'nextjs-cms/auth/actions'
3
- import { cookies } from 'next/headers'
4
-
5
- export async function GET() {
6
- const cookieStore = await cookies()
7
- const csrfTokenCookie = cookieStore.get('csrf_token')
8
- const { csrfToken, cookie } = await createCSRFToken(csrfTokenCookie?.value)
9
-
10
- if (cookie) {
11
- (await cookies()).set({
12
- name: 'csrf_token',
13
- value: cookie,
14
- httpOnly: true,
15
- secure: true,
16
- sameSite: true,
17
- })
18
- }
19
- return Response.json(
20
- {
21
- csrfToken,
22
- },
23
- responseHeaders,
24
- )
25
- }
1
+ import { responseHeaders } from 'nextjs-cms/utils'
2
+ import { createCSRFToken } from 'nextjs-cms/auth/actions'
3
+ import { cookies } from 'next/headers'
4
+
5
+ export async function GET() {
6
+ const cookieStore = await cookies()
7
+ const csrfTokenCookie = cookieStore.get('csrf_token')
8
+ const { csrfToken, cookie } = await createCSRFToken(csrfTokenCookie?.value)
9
+
10
+ if (cookie) {
11
+ (await cookies()).set({
12
+ name: 'csrf_token',
13
+ value: cookie,
14
+ httpOnly: true,
15
+ secure: true,
16
+ sameSite: true,
17
+ })
18
+ }
19
+ return Response.json(
20
+ {
21
+ csrfToken,
22
+ },
23
+ responseHeaders,
24
+ )
25
+ }
@@ -1,10 +1,10 @@
1
- import { NextRequest } from 'next/server'
2
- import { authRefresh } from 'nextjs-cms/auth/actions'
3
-
4
- export async function GET(request: NextRequest) {
5
- const refreshToken = request.cookies.get('refresh_token')
6
- const loginResult = await authRefresh(refreshToken)
7
- return Response.json(loginResult, {
8
- status: loginResult.status,
9
- })
10
- }
1
+ import { NextRequest } from 'next/server'
2
+ import { authRefresh } from 'nextjs-cms/auth/actions'
3
+
4
+ export async function GET(request: NextRequest) {
5
+ const refreshToken = request.cookies.get('refresh_token')
6
+ const loginResult = await authRefresh(refreshToken)
7
+ return Response.json(loginResult, {
8
+ status: loginResult.status,
9
+ })
10
+ }
@@ -1,49 +1,49 @@
1
- import { NextRequest } from 'next/server'
2
- import auth from 'nextjs-cms/auth'
3
- import { deleteSession, login } from 'nextjs-cms/auth/actions'
4
- import { getRequestMetadataFromHeaders, recordLog } from 'nextjs-cms/logging'
5
-
6
- export async function POST(request: NextRequest) {
7
- const { username, password, locale } = await request.json()
8
- try {
9
- const loginResult = await login({ username, password, locale })
10
- const requestMetadata = getRequestMetadataFromHeaders(request.headers)
11
-
12
- await recordLog({
13
- eventType: 'auth.login',
14
- actorId: loginResult.user?.id ?? null,
15
- actorUsername: loginResult.user?.username ?? null,
16
- entityType: 'admin',
17
- entityId: loginResult.user?.id ?? null,
18
- entityLabel: loginResult.user?.username ?? null,
19
- sectionName: 'auth',
20
- requestMetadata,
21
- })
22
- return Response.json(loginResult, { status: 200 })
23
- } catch (error: any) {
24
- return Response.json({ error: error.message }, { status: 400 })
25
- }
26
- }
27
-
28
- export async function DELETE(request: NextRequest) {
29
- const session = await auth()
30
- try {
31
- const loginResult = await deleteSession(session)
32
- if (session?.user?.id) {
33
- const requestMetadata = getRequestMetadataFromHeaders(request.headers)
34
- await recordLog({
35
- eventType: 'auth.logout',
36
- actorId: session.user.id,
37
- actorUsername: session.user.name ?? null,
38
- entityType: 'admin',
39
- entityId: session.user.id,
40
- entityLabel: session.user.name ?? null,
41
- sectionName: 'auth',
42
- requestMetadata,
43
- })
44
- }
45
- return Response.json(loginResult, { status: 200 })
46
- } catch (error: any) {
47
- return Response.json({ error: error.message }, { status: 400 })
48
- }
49
- }
1
+ import { NextRequest } from 'next/server'
2
+ import auth from 'nextjs-cms/auth'
3
+ import { deleteSession, login } from 'nextjs-cms/auth/actions'
4
+ import { getRequestMetadataFromHeaders, recordLog } from 'nextjs-cms/logging'
5
+
6
+ export async function POST(request: NextRequest) {
7
+ const { username, password, language } = await request.json()
8
+ try {
9
+ const loginResult = await login({ username, password, language })
10
+ const requestMetadata = getRequestMetadataFromHeaders(request.headers)
11
+
12
+ await recordLog({
13
+ eventType: 'auth.login',
14
+ actorId: loginResult.user?.id ?? null,
15
+ actorUsername: loginResult.user?.username ?? null,
16
+ entityType: 'admin',
17
+ entityId: loginResult.user?.id ?? null,
18
+ entityLabel: loginResult.user?.username ?? null,
19
+ sectionName: 'auth',
20
+ requestMetadata,
21
+ })
22
+ return Response.json(loginResult, { status: 200 })
23
+ } catch (error: any) {
24
+ return Response.json({ error: error.message }, { status: 400 })
25
+ }
26
+ }
27
+
28
+ export async function DELETE(request: NextRequest) {
29
+ const session = await auth()
30
+ try {
31
+ const loginResult = await deleteSession(session)
32
+ if (session?.user?.id) {
33
+ const requestMetadata = getRequestMetadataFromHeaders(request.headers)
34
+ await recordLog({
35
+ eventType: 'auth.logout',
36
+ actorId: session.user.id,
37
+ actorUsername: session.user.name ?? null,
38
+ entityType: 'admin',
39
+ entityId: session.user.id,
40
+ entityLabel: session.user.name ?? null,
41
+ sectionName: 'auth',
42
+ requestMetadata,
43
+ })
44
+ }
45
+ return Response.json(loginResult, { status: 200 })
46
+ } catch (error: any) {
47
+ return Response.json({ error: error.message }, { status: 400 })
48
+ }
49
+ }
@@ -1,20 +1,20 @@
1
- import auth from 'nextjs-cms/auth'
2
- import { NextRequest } from 'next/server'
3
-
4
- export async function GET(request: NextRequest) {
5
- const session = await auth()
6
- return Response.json(session, {
7
- status: session ? 200 : 404,
8
- })
9
- }
10
-
11
- export async function POST(request: NextRequest) {
12
- const session = await auth()
13
- if (!session) {
14
- return Response.json('Unauthorized', { status: 401 })
15
- }
16
-
17
- // TODO: Handle POST request to update session with new data
18
-
19
- return Response.json(session)
20
- }
1
+ import auth from 'nextjs-cms/auth'
2
+ import { NextRequest } from 'next/server'
3
+
4
+ export async function GET(request: NextRequest) {
5
+ const session = await auth()
6
+ return Response.json(session, {
7
+ status: session ? 200 : 404,
8
+ })
9
+ }
10
+
11
+ export async function POST(request: NextRequest) {
12
+ const session = await auth()
13
+ if (!session) {
14
+ return Response.json('Unauthorized', { status: 401 })
15
+ }
16
+
17
+ // TODO: Handle POST request to update session with new data
18
+
19
+ return Response.json(session)
20
+ }
@@ -1,165 +1,165 @@
1
- import { NextRequest, NextResponse } from 'next/server'
2
- import path from 'path'
3
- import fs from 'fs'
4
- import { readChunk } from 'read-chunk'
5
- import { fileTypeFromBuffer } from 'file-type'
6
- import { SectionFactory } from 'nextjs-cms/core/factories'
7
- import type { DocumentFieldConfigType } from 'nextjs-cms/core/fields'
8
- import auth from 'nextjs-cms/auth'
9
- import { sanitizeFileName, sanitizeFolderOrFileName } from 'nextjs-cms/utils'
10
- import { streamFile } from 'nextjs-cms/api/helpers'
11
- import { getCMSConfig } from 'nextjs-cms/core/config'
12
-
13
- /**
14
- * This route handler streams a document file from the server.
15
- * It protects document files from being accessed directly and avoids
16
- * the base64 payload size limits that occur with the tRPC approach.
17
- * Used by the `<ProtectedDocument />` component.
18
- */
19
-
20
- export async function GET(request: NextRequest) {
21
- const session = await auth()
22
- const searchParams = request.nextUrl.searchParams
23
-
24
- const name = searchParams.get('name')
25
- const sectionName = searchParams.get('sectionName')
26
- const fieldName = searchParams.get('fieldName')
27
-
28
- if (!name || !sectionName || !fieldName) {
29
- return NextResponse.json(
30
- {
31
- error: 'Invalid request',
32
- },
33
- { status: 400 },
34
- )
35
- }
36
-
37
- // Check if the session is valid
38
- if (!session || !session.user) {
39
- return NextResponse.json(
40
- {
41
- error: 'Invalid token',
42
- },
43
- { status: 401 },
44
- )
45
- }
46
-
47
- const uploadsFolder: string = (await getCMSConfig()).media.upload.path
48
-
49
- // Sanitize the inputs
50
- const sanitizedFolder = sanitizeFolderOrFileName(sectionName)
51
- const sanitizedName = sanitizeFileName(name)
52
-
53
- /**
54
- * Check the section and the field name, and get the allowed extensions,
55
- * while also checking if the user has access to the section
56
- */
57
- const section = await SectionFactory.getSectionForAdmin({
58
- name: sanitizedFolder,
59
- admin: { id: session.user.id },
60
- })
61
-
62
- /**
63
- * If the check fails, return an error
64
- */
65
- if (!section || !section.name) {
66
- return NextResponse.json(
67
- {
68
- error: 'File not found, or you do not have access to it.',
69
- },
70
- { status: 400 },
71
- )
72
- }
73
-
74
- const fieldConfig = section.fields.find((field) => field.name === fieldName) as DocumentFieldConfigType | undefined
75
-
76
- if (!fieldConfig || typeof fieldConfig.build !== 'function') {
77
- return NextResponse.json(
78
- {
79
- error: 'Invalid request',
80
- },
81
- { status: 400 },
82
- )
83
- }
84
-
85
- const field = fieldConfig.build()
86
-
87
- /**
88
- * If field is not found, return an error
89
- */
90
- if (!field || !field.name || !field.extensions || field.extensions.length === 0) {
91
- return NextResponse.json(
92
- {
93
- error: 'Invalid request',
94
- },
95
- { status: 400 },
96
- )
97
- }
98
-
99
- /**
100
- * Split the allowed extensions into an array
101
- */
102
- const documentAllowedExtensions = field.extensions
103
- const dir = '.documents'
104
- const pathToFile = path.join(uploadsFolder, dir, sanitizedFolder, sanitizedName)
105
-
106
- /**
107
- * First, check if the file exists
108
- */
109
- if (!fs.existsSync(pathToFile)) {
110
- return NextResponse.json(
111
- {
112
- error: 'File not found',
113
- },
114
- { status: 404 },
115
- )
116
- }
117
-
118
- /**
119
- * Read the first 4100 bytes of the file
120
- */
121
- const chunkBuffer = await readChunk(pathToFile, { length: 4100 })
122
- /**
123
- * Get the file type from the buffer
124
- */
125
- const fileType = await fileTypeFromBuffer(chunkBuffer)
126
-
127
- /**
128
- * If the file type is invalid, return an error
129
- */
130
- if (!fileType) {
131
- return NextResponse.json(
132
- {
133
- error: 'Invalid file type',
134
- },
135
- { status: 400 },
136
- )
137
- }
138
-
139
- /**
140
- * Check if the file type is allowed
141
- */
142
- if (!documentAllowedExtensions.includes(fileType.ext)) {
143
- return NextResponse.json(
144
- {
145
- error: 'Invalid file type',
146
- },
147
- { status: 400 },
148
- )
149
- }
150
-
151
- const fileStats = fs.statSync(pathToFile)
152
- const fileSize = fileStats.size
153
- const fileMimeType = fileType.mime
154
-
155
- const data: ReadableStream<Uint8Array> = await streamFile(pathToFile)
156
-
157
- return new NextResponse(data, {
158
- headers: {
159
- 'Content-Length': fileSize.toString(),
160
- 'Content-Type': fileMimeType,
161
- 'Content-Disposition': 'inline',
162
- },
163
- status: 200,
164
- })
165
- }
1
+ import { NextRequest, NextResponse } from 'next/server'
2
+ import path from 'path'
3
+ import fs from 'fs'
4
+ import { readChunk } from 'read-chunk'
5
+ import { fileTypeFromBuffer } from 'file-type'
6
+ import { SectionFactory } from 'nextjs-cms/core/factories'
7
+ import type { DocumentFieldConfigType } from 'nextjs-cms/core/fields'
8
+ import auth from 'nextjs-cms/auth'
9
+ import { sanitizeFileName, sanitizeFolderOrFileName } from 'nextjs-cms/utils'
10
+ import { streamFile } from 'nextjs-cms/api/helpers'
11
+ import { getCMSConfig } from 'nextjs-cms/core/config'
12
+
13
+ /**
14
+ * This route handler streams a document file from the server.
15
+ * It protects document files from being accessed directly and avoids
16
+ * the base64 payload size limits that occur with the tRPC approach.
17
+ * Used by the `<ProtectedDocument />` component.
18
+ */
19
+
20
+ export async function GET(request: NextRequest) {
21
+ const session = await auth()
22
+ const searchParams = request.nextUrl.searchParams
23
+
24
+ const name = searchParams.get('name')
25
+ const sectionName = searchParams.get('sectionName')
26
+ const fieldName = searchParams.get('fieldName')
27
+
28
+ if (!name || !sectionName || !fieldName) {
29
+ return NextResponse.json(
30
+ {
31
+ error: 'Invalid request',
32
+ },
33
+ { status: 400 },
34
+ )
35
+ }
36
+
37
+ // Check if the session is valid
38
+ if (!session || !session.user) {
39
+ return NextResponse.json(
40
+ {
41
+ error: 'Invalid token',
42
+ },
43
+ { status: 401 },
44
+ )
45
+ }
46
+
47
+ const uploadsFolder: string = (await getCMSConfig()).media.upload.path
48
+
49
+ // Sanitize the inputs
50
+ const sanitizedFolder = sanitizeFolderOrFileName(sectionName)
51
+ const sanitizedName = sanitizeFileName(name)
52
+
53
+ /**
54
+ * Check the section and the field name, and get the allowed extensions,
55
+ * while also checking if the user has access to the section
56
+ */
57
+ const section = await SectionFactory.getSectionForAdmin({
58
+ name: sanitizedFolder,
59
+ admin: { id: session.user.id },
60
+ })
61
+
62
+ /**
63
+ * If the check fails, return an error
64
+ */
65
+ if (!section || !section.name) {
66
+ return NextResponse.json(
67
+ {
68
+ error: 'File not found, or you do not have access to it.',
69
+ },
70
+ { status: 400 },
71
+ )
72
+ }
73
+
74
+ const fieldConfig = section.fields.find((field) => field.name === fieldName) as DocumentFieldConfigType | undefined
75
+
76
+ if (!fieldConfig || typeof fieldConfig.build !== 'function') {
77
+ return NextResponse.json(
78
+ {
79
+ error: 'Invalid request',
80
+ },
81
+ { status: 400 },
82
+ )
83
+ }
84
+
85
+ const field = fieldConfig.build()
86
+
87
+ /**
88
+ * If field is not found, return an error
89
+ */
90
+ if (!field || !field.name || !field.extensions || field.extensions.length === 0) {
91
+ return NextResponse.json(
92
+ {
93
+ error: 'Invalid request',
94
+ },
95
+ { status: 400 },
96
+ )
97
+ }
98
+
99
+ /**
100
+ * Split the allowed extensions into an array
101
+ */
102
+ const documentAllowedExtensions = field.extensions
103
+ const dir = '.documents'
104
+ const pathToFile = path.join(uploadsFolder, dir, sanitizedFolder, sanitizedName)
105
+
106
+ /**
107
+ * First, check if the file exists
108
+ */
109
+ if (!fs.existsSync(pathToFile)) {
110
+ return NextResponse.json(
111
+ {
112
+ error: 'File not found',
113
+ },
114
+ { status: 404 },
115
+ )
116
+ }
117
+
118
+ /**
119
+ * Read the first 4100 bytes of the file
120
+ */
121
+ const chunkBuffer = await readChunk(pathToFile, { length: 4100 })
122
+ /**
123
+ * Get the file type from the buffer
124
+ */
125
+ const fileType = await fileTypeFromBuffer(chunkBuffer)
126
+
127
+ /**
128
+ * If the file type is invalid, return an error
129
+ */
130
+ if (!fileType) {
131
+ return NextResponse.json(
132
+ {
133
+ error: 'Invalid file type',
134
+ },
135
+ { status: 400 },
136
+ )
137
+ }
138
+
139
+ /**
140
+ * Check if the file type is allowed
141
+ */
142
+ if (!documentAllowedExtensions.includes(fileType.ext)) {
143
+ return NextResponse.json(
144
+ {
145
+ error: 'Invalid file type',
146
+ },
147
+ { status: 400 },
148
+ )
149
+ }
150
+
151
+ const fileStats = fs.statSync(pathToFile)
152
+ const fileSize = fileStats.size
153
+ const fileMimeType = fileType.mime
154
+
155
+ const data: ReadableStream<Uint8Array> = await streamFile(pathToFile)
156
+
157
+ return new NextResponse(data, {
158
+ headers: {
159
+ 'Content-Length': fileSize.toString(),
160
+ 'Content-Type': fileMimeType,
161
+ 'Content-Disposition': 'inline',
162
+ },
163
+ status: 200,
164
+ })
165
+ }