create-nextjs-cms 0.9.0 → 0.9.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (186) hide show
  1. package/LICENSE +21 -21
  2. package/README.md +71 -71
  3. package/dist/helpers/utils.js +16 -16
  4. package/dist/lib/section-creators.js +166 -166
  5. package/package.json +1 -1
  6. package/templates/default/.eslintrc.json +5 -5
  7. package/templates/default/.prettierignore +7 -7
  8. package/templates/default/.prettierrc.json +27 -27
  9. package/templates/default/CHANGELOG.md +140 -140
  10. package/templates/default/_gitignore +57 -57
  11. package/templates/default/app/(auth)/auth/login/LoginPage.tsx +192 -192
  12. package/templates/default/app/(auth)/auth/login/page.tsx +11 -11
  13. package/templates/default/app/(auth)/layout.tsx +81 -81
  14. package/templates/default/app/(rootLayout)/(plugins)/[...slug]/page.tsx +40 -40
  15. package/templates/default/app/(rootLayout)/(plugins)/[...slug]/plugin-server-registry.ts +16 -16
  16. package/templates/default/app/(rootLayout)/admins/page.tsx +10 -10
  17. package/templates/default/app/(rootLayout)/browse/[section]/[page]/page.tsx +22 -22
  18. package/templates/default/app/(rootLayout)/categorized/[section]/page.tsx +15 -15
  19. package/templates/default/app/(rootLayout)/dashboard/page.tsx +63 -63
  20. package/templates/default/app/(rootLayout)/dashboard-new/page.tsx +7 -7
  21. package/templates/default/app/(rootLayout)/edit/[section]/[itemId]/page.tsx +20 -20
  22. package/templates/default/app/(rootLayout)/layout.tsx +81 -81
  23. package/templates/default/app/(rootLayout)/loading.tsx +10 -10
  24. package/templates/default/app/(rootLayout)/log/page.tsx +7 -7
  25. package/templates/default/app/(rootLayout)/new/[section]/page.tsx +15 -15
  26. package/templates/default/app/(rootLayout)/section/[section]/page.tsx +19 -19
  27. package/templates/default/app/(rootLayout)/settings/page.tsx +13 -13
  28. package/templates/default/app/_trpc/client.ts +3 -3
  29. package/templates/default/app/api/auth/csrf/route.ts +25 -25
  30. package/templates/default/app/api/auth/refresh/route.ts +10 -10
  31. package/templates/default/app/api/auth/route.ts +49 -49
  32. package/templates/default/app/api/auth/session/route.ts +20 -20
  33. package/templates/default/app/api/document/route.ts +165 -165
  34. package/templates/default/app/api/editor/photo/route.ts +49 -49
  35. package/templates/default/app/api/photo/route.ts +27 -27
  36. package/templates/default/app/api/submit/section/item/[slug]/route.ts +95 -95
  37. package/templates/default/app/api/submit/section/item/route.ts +56 -56
  38. package/templates/default/app/api/submit/section/simple/route.ts +86 -86
  39. package/templates/default/app/api/trpc/[trpc]/route.ts +33 -33
  40. package/templates/default/app/api/video/route.ts +174 -174
  41. package/templates/default/app/globals.css +228 -228
  42. package/templates/default/app/providers.tsx +152 -152
  43. package/templates/default/cms.config.ts +57 -58
  44. package/templates/default/components/AdminCard.tsx +166 -166
  45. package/templates/default/components/AdminEditPage.tsx +124 -124
  46. package/templates/default/components/AdminPrivilegeCard.tsx +185 -185
  47. package/templates/default/components/AdminsPage.tsx +43 -43
  48. package/templates/default/components/AnalyticsPage.tsx +128 -128
  49. package/templates/default/components/BarChartBox.tsx +42 -42
  50. package/templates/default/components/BrowsePage.tsx +106 -106
  51. package/templates/default/components/CategorizedSectionPage.tsx +31 -31
  52. package/templates/default/components/CategoryDeleteConfirmPage.tsx +130 -130
  53. package/templates/default/components/CategorySectionSelectInput.tsx +140 -140
  54. package/templates/default/components/ConditionalFields.tsx +49 -49
  55. package/templates/default/components/ContainerBox.tsx +24 -24
  56. package/templates/default/components/DashboardNewPage.tsx +253 -253
  57. package/templates/default/components/DashboardPage.tsx +188 -188
  58. package/templates/default/components/DashboardPageAlt.tsx +45 -45
  59. package/templates/default/components/DefaultNavItems.tsx +3 -3
  60. package/templates/default/components/Dropzone.tsx +154 -154
  61. package/templates/default/components/EmailCard.tsx +138 -138
  62. package/templates/default/components/EmailPasswordForm.tsx +85 -85
  63. package/templates/default/components/EmailQuotaForm.tsx +73 -73
  64. package/templates/default/components/EmailsPage.tsx +49 -49
  65. package/templates/default/components/ErrorComponent.tsx +16 -16
  66. package/templates/default/components/GalleryPhoto.tsx +93 -93
  67. package/templates/default/components/InfoCard.tsx +93 -93
  68. package/templates/default/components/ItemEditPage.tsx +294 -294
  69. package/templates/default/components/Layout.tsx +84 -84
  70. package/templates/default/components/LoadingSpinners.tsx +67 -67
  71. package/templates/default/components/LocaleSwitcher.tsx +89 -89
  72. package/templates/default/components/LogPage.tsx +107 -107
  73. package/templates/default/components/Modal.tsx +166 -166
  74. package/templates/default/components/Navbar.tsx +258 -258
  75. package/templates/default/components/NewAdminForm.tsx +173 -173
  76. package/templates/default/components/NewEmailForm.tsx +132 -132
  77. package/templates/default/components/NewPage.tsx +206 -206
  78. package/templates/default/components/NewVariantComponent.tsx +229 -229
  79. package/templates/default/components/PhotoGallery.tsx +35 -35
  80. package/templates/default/components/PieChartBox.tsx +101 -101
  81. package/templates/default/components/ProgressBar.tsx +48 -48
  82. package/templates/default/components/ProtectedDocument.tsx +44 -44
  83. package/templates/default/components/ProtectedImage.tsx +143 -143
  84. package/templates/default/components/ProtectedVideo.tsx +76 -76
  85. package/templates/default/components/SectionIcon.tsx +8 -8
  86. package/templates/default/components/SectionItemCard.tsx +144 -144
  87. package/templates/default/components/SectionItemStatusBadge.tsx +17 -17
  88. package/templates/default/components/SectionPage.tsx +205 -205
  89. package/templates/default/components/SelectBox.tsx +98 -98
  90. package/templates/default/components/SelectInputButtons.tsx +125 -125
  91. package/templates/default/components/SettingsPage.tsx +232 -232
  92. package/templates/default/components/Sidebar.tsx +204 -204
  93. package/templates/default/components/SidebarDropdownItem.tsx +83 -83
  94. package/templates/default/components/SidebarItem.tsx +24 -24
  95. package/templates/default/components/ThemeProvider.tsx +8 -8
  96. package/templates/default/components/TooltipComponent.tsx +27 -27
  97. package/templates/default/components/VariantCard.tsx +124 -124
  98. package/templates/default/components/VariantEditPage.tsx +230 -230
  99. package/templates/default/components/analytics/BounceRate.tsx +70 -70
  100. package/templates/default/components/analytics/LivePageViews.tsx +55 -55
  101. package/templates/default/components/analytics/LiveUsersCount.tsx +33 -33
  102. package/templates/default/components/analytics/MonthlyPageViews.tsx +42 -42
  103. package/templates/default/components/analytics/TopCountries.tsx +52 -52
  104. package/templates/default/components/analytics/TopDevices.tsx +46 -46
  105. package/templates/default/components/analytics/TopMediums.tsx +58 -58
  106. package/templates/default/components/analytics/TopSources.tsx +45 -45
  107. package/templates/default/components/analytics/TotalPageViews.tsx +41 -41
  108. package/templates/default/components/analytics/TotalSessions.tsx +41 -41
  109. package/templates/default/components/analytics/TotalUniqueUsers.tsx +41 -41
  110. package/templates/default/components/custom/RightHomeRoomVariantCard.tsx +138 -138
  111. package/templates/default/components/dndKit/Draggable.tsx +21 -21
  112. package/templates/default/components/dndKit/Droppable.tsx +20 -20
  113. package/templates/default/components/dndKit/SortableItem.tsx +18 -18
  114. package/templates/default/components/form/DateRangeFormInput.tsx +57 -57
  115. package/templates/default/components/form/Form.tsx +360 -360
  116. package/templates/default/components/form/FormInputElement.tsx +70 -70
  117. package/templates/default/components/form/FormInputs.tsx +111 -111
  118. package/templates/default/components/form/helpers/_section-hot-reload.js +1 -1
  119. package/templates/default/components/form/helpers/util.ts +17 -17
  120. package/templates/default/components/form/inputs/CheckboxFormInput.tsx +46 -46
  121. package/templates/default/components/form/inputs/ColorFormInput.tsx +44 -44
  122. package/templates/default/components/form/inputs/DateFormInput.tsx +156 -156
  123. package/templates/default/components/form/inputs/DocumentFormInput.tsx +222 -222
  124. package/templates/default/components/form/inputs/MapFormInput.tsx +140 -140
  125. package/templates/default/components/form/inputs/MultipleSelectFormInput.tsx +85 -85
  126. package/templates/default/components/form/inputs/NumberFormInput.tsx +43 -43
  127. package/templates/default/components/form/inputs/PasswordFormInput.tsx +47 -47
  128. package/templates/default/components/form/inputs/PhotoFormInput.tsx +275 -275
  129. package/templates/default/components/form/inputs/RichTextFormInput.tsx +138 -138
  130. package/templates/default/components/form/inputs/SelectFormInput.tsx +175 -175
  131. package/templates/default/components/form/inputs/SlugFormInput.tsx +131 -131
  132. package/templates/default/components/form/inputs/TagsFormInput.tsx +260 -260
  133. package/templates/default/components/form/inputs/TextFormInput.tsx +51 -51
  134. package/templates/default/components/form/inputs/TextareaFormInput.tsx +50 -50
  135. package/templates/default/components/form/inputs/VideoFormInput.tsx +118 -118
  136. package/templates/default/components/multi-select.tsx +1146 -1146
  137. package/templates/default/components/pagination/Pagination.tsx +36 -36
  138. package/templates/default/components/pagination/PaginationButtons.tsx +147 -147
  139. package/templates/default/components/theme-toggle.tsx +39 -39
  140. package/templates/default/components/ui/accordion.tsx +53 -53
  141. package/templates/default/components/ui/alert-dialog.tsx +157 -157
  142. package/templates/default/components/ui/alert.tsx +47 -47
  143. package/templates/default/components/ui/badge.tsx +38 -38
  144. package/templates/default/components/ui/button.tsx +62 -62
  145. package/templates/default/components/ui/calendar.tsx +166 -166
  146. package/templates/default/components/ui/card.tsx +43 -43
  147. package/templates/default/components/ui/checkbox.tsx +29 -29
  148. package/templates/default/components/ui/command.tsx +137 -137
  149. package/templates/default/components/ui/custom-alert-dialog.tsx +113 -113
  150. package/templates/default/components/ui/custom-dialog.tsx +123 -123
  151. package/templates/default/components/ui/dialog.tsx +123 -123
  152. package/templates/default/components/ui/direction.tsx +22 -22
  153. package/templates/default/components/ui/dropdown-menu.tsx +182 -182
  154. package/templates/default/components/ui/input-group.tsx +54 -54
  155. package/templates/default/components/ui/input.tsx +22 -22
  156. package/templates/default/components/ui/label.tsx +19 -19
  157. package/templates/default/components/ui/popover.tsx +42 -42
  158. package/templates/default/components/ui/progress.tsx +31 -31
  159. package/templates/default/components/ui/scroll-area.tsx +42 -42
  160. package/templates/default/components/ui/select.tsx +165 -165
  161. package/templates/default/components/ui/separator.tsx +28 -28
  162. package/templates/default/components/ui/sheet.tsx +103 -103
  163. package/templates/default/components/ui/spinner.tsx +16 -16
  164. package/templates/default/components/ui/switch.tsx +29 -29
  165. package/templates/default/components/ui/table.tsx +83 -83
  166. package/templates/default/components/ui/tabs.tsx +55 -55
  167. package/templates/default/components/ui/toast.tsx +113 -113
  168. package/templates/default/components/ui/toaster.tsx +35 -35
  169. package/templates/default/components/ui/tooltip.tsx +30 -30
  170. package/templates/default/components/ui/use-toast.ts +188 -188
  171. package/templates/default/components.json +21 -21
  172. package/templates/default/context/ModalProvider.tsx +53 -53
  173. package/templates/default/drizzle.config.ts +4 -4
  174. package/templates/default/dynamic-schemas/schema.ts +475 -474
  175. package/templates/default/env/env.js +130 -130
  176. package/templates/default/envConfig.ts +4 -4
  177. package/templates/default/hooks/useModal.ts +8 -8
  178. package/templates/default/lib/apiHelpers.ts +92 -92
  179. package/templates/default/lib/postinstall.js +14 -14
  180. package/templates/default/lib/utils.ts +6 -6
  181. package/templates/default/next-env.d.ts +6 -6
  182. package/templates/default/next.config.ts +23 -23
  183. package/templates/default/package.json +1 -1
  184. package/templates/default/postcss.config.mjs +6 -6
  185. package/templates/default/proxy.ts +32 -32
  186. package/templates/default/tsconfig.json +48 -48
@@ -1,19 +1,19 @@
1
- import SectionPage from '@/components/SectionPage'
2
- import { api, HydrateClient } from 'nextjs-cms/api/trpc/server'
3
- type Params = Promise<{ section: string }>
4
- type SearchParams = Promise<{ locale?: string }>
5
-
6
- export default async function Page(props: { params: Params; searchParams: SearchParams }) {
7
- const params = await props.params
8
- const searchParams = await props.searchParams
9
- await api.simpleSections.create.prefetch({
10
- sectionName: params.section,
11
- locale: searchParams.locale,
12
- })
13
-
14
- return (
15
- <HydrateClient>
16
- <SectionPage section={params.section} />
17
- </HydrateClient>
18
- )
19
- }
1
+ import SectionPage from '@/components/SectionPage'
2
+ import { api, HydrateClient } from 'nextjs-cms/api/trpc/server'
3
+ type Params = Promise<{ section: string }>
4
+ type SearchParams = Promise<{ locale?: string }>
5
+
6
+ export default async function Page(props: { params: Params; searchParams: SearchParams }) {
7
+ const params = await props.params
8
+ const searchParams = await props.searchParams
9
+ await api.simpleSections.create.prefetch({
10
+ sectionName: params.section,
11
+ locale: searchParams.locale,
12
+ })
13
+
14
+ return (
15
+ <HydrateClient>
16
+ <SectionPage section={params.section} />
17
+ </HydrateClient>
18
+ )
19
+ }
@@ -1,13 +1,13 @@
1
- import SettingsPage from '@/components/SettingsPage'
2
- import { api, HydrateClient } from 'nextjs-cms/api/trpc/server'
3
-
4
- export const dynamic = 'force-dynamic'
5
-
6
- export default async function Page() {
7
- await api.accountSettings.get.prefetch()
8
- return (
9
- <HydrateClient>
10
- <SettingsPage />
11
- </HydrateClient>
12
- )
13
- }
1
+ import SettingsPage from '@/components/SettingsPage'
2
+ import { api, HydrateClient } from 'nextjs-cms/api/trpc/server'
3
+
4
+ export const dynamic = 'force-dynamic'
5
+
6
+ export default async function Page() {
7
+ await api.accountSettings.get.prefetch()
8
+ return (
9
+ <HydrateClient>
10
+ <SettingsPage />
11
+ </HydrateClient>
12
+ )
13
+ }
@@ -1,3 +1,3 @@
1
- 'use client'
2
-
3
- export { trpc } from 'nextjs-cms/api/trpc/client'
1
+ 'use client'
2
+
3
+ export { trpc } from 'nextjs-cms/api/trpc/client'
@@ -1,25 +1,25 @@
1
- import { responseHeaders } from 'nextjs-cms/utils'
2
- import { createCSRFToken } from 'nextjs-cms/auth/actions'
3
- import { cookies } from 'next/headers'
4
-
5
- export async function GET() {
6
- const cookieStore = await cookies()
7
- const csrfTokenCookie = cookieStore.get('csrf_token')
8
- const { csrfToken, cookie } = await createCSRFToken(csrfTokenCookie?.value)
9
-
10
- if (cookie) {
11
- (await cookies()).set({
12
- name: 'csrf_token',
13
- value: cookie,
14
- httpOnly: true,
15
- secure: true,
16
- sameSite: true,
17
- })
18
- }
19
- return Response.json(
20
- {
21
- csrfToken,
22
- },
23
- responseHeaders,
24
- )
25
- }
1
+ import { responseHeaders } from 'nextjs-cms/utils'
2
+ import { createCSRFToken } from 'nextjs-cms/auth/actions'
3
+ import { cookies } from 'next/headers'
4
+
5
+ export async function GET() {
6
+ const cookieStore = await cookies()
7
+ const csrfTokenCookie = cookieStore.get('csrf_token')
8
+ const { csrfToken, cookie } = await createCSRFToken(csrfTokenCookie?.value)
9
+
10
+ if (cookie) {
11
+ (await cookies()).set({
12
+ name: 'csrf_token',
13
+ value: cookie,
14
+ httpOnly: true,
15
+ secure: true,
16
+ sameSite: true,
17
+ })
18
+ }
19
+ return Response.json(
20
+ {
21
+ csrfToken,
22
+ },
23
+ responseHeaders,
24
+ )
25
+ }
@@ -1,10 +1,10 @@
1
- import { NextRequest } from 'next/server'
2
- import { authRefresh } from 'nextjs-cms/auth/actions'
3
-
4
- export async function GET(request: NextRequest) {
5
- const refreshToken = request.cookies.get('refresh_token')
6
- const loginResult = await authRefresh(refreshToken)
7
- return Response.json(loginResult, {
8
- status: loginResult.status,
9
- })
10
- }
1
+ import { NextRequest } from 'next/server'
2
+ import { authRefresh } from 'nextjs-cms/auth/actions'
3
+
4
+ export async function GET(request: NextRequest) {
5
+ const refreshToken = request.cookies.get('refresh_token')
6
+ const loginResult = await authRefresh(refreshToken)
7
+ return Response.json(loginResult, {
8
+ status: loginResult.status,
9
+ })
10
+ }
@@ -1,49 +1,49 @@
1
- import { NextRequest } from 'next/server'
2
- import auth from 'nextjs-cms/auth'
3
- import { deleteSession, login } from 'nextjs-cms/auth/actions'
4
- import { getRequestMetadataFromHeaders, recordLog } from 'nextjs-cms/logging'
5
-
6
- export async function POST(request: NextRequest) {
7
- const { username, password, language } = await request.json()
8
- try {
9
- const loginResult = await login({ username, password, language })
10
- const requestMetadata = getRequestMetadataFromHeaders(request.headers)
11
-
12
- await recordLog({
13
- eventType: 'auth.login',
14
- actorId: loginResult.user?.id ?? null,
15
- actorUsername: loginResult.user?.username ?? null,
16
- entityType: 'admin',
17
- entityId: loginResult.user?.id ?? null,
18
- entityLabel: loginResult.user?.username ?? null,
19
- sectionName: 'auth',
20
- requestMetadata,
21
- })
22
- return Response.json(loginResult, { status: 200 })
23
- } catch (error: any) {
24
- return Response.json({ error: error.message }, { status: 400 })
25
- }
26
- }
27
-
28
- export async function DELETE(request: NextRequest) {
29
- const session = await auth()
30
- try {
31
- const loginResult = await deleteSession(session)
32
- if (session?.user?.id) {
33
- const requestMetadata = getRequestMetadataFromHeaders(request.headers)
34
- await recordLog({
35
- eventType: 'auth.logout',
36
- actorId: session.user.id,
37
- actorUsername: session.user.name ?? null,
38
- entityType: 'admin',
39
- entityId: session.user.id,
40
- entityLabel: session.user.name ?? null,
41
- sectionName: 'auth',
42
- requestMetadata,
43
- })
44
- }
45
- return Response.json(loginResult, { status: 200 })
46
- } catch (error: any) {
47
- return Response.json({ error: error.message }, { status: 400 })
48
- }
49
- }
1
+ import { NextRequest } from 'next/server'
2
+ import auth from 'nextjs-cms/auth'
3
+ import { deleteSession, login } from 'nextjs-cms/auth/actions'
4
+ import { getRequestMetadataFromHeaders, recordLog } from 'nextjs-cms/logging'
5
+
6
+ export async function POST(request: NextRequest) {
7
+ const { username, password, language } = await request.json()
8
+ try {
9
+ const loginResult = await login({ username, password, language })
10
+ const requestMetadata = getRequestMetadataFromHeaders(request.headers)
11
+
12
+ await recordLog({
13
+ eventType: 'auth.login',
14
+ actorId: loginResult.user?.id ?? null,
15
+ actorUsername: loginResult.user?.username ?? null,
16
+ entityType: 'admin',
17
+ entityId: loginResult.user?.id ?? null,
18
+ entityLabel: loginResult.user?.username ?? null,
19
+ sectionName: 'auth',
20
+ requestMetadata,
21
+ })
22
+ return Response.json(loginResult, { status: 200 })
23
+ } catch (error: any) {
24
+ return Response.json({ error: error.message }, { status: 400 })
25
+ }
26
+ }
27
+
28
+ export async function DELETE(request: NextRequest) {
29
+ const session = await auth()
30
+ try {
31
+ const loginResult = await deleteSession(session)
32
+ if (session?.user?.id) {
33
+ const requestMetadata = getRequestMetadataFromHeaders(request.headers)
34
+ await recordLog({
35
+ eventType: 'auth.logout',
36
+ actorId: session.user.id,
37
+ actorUsername: session.user.name ?? null,
38
+ entityType: 'admin',
39
+ entityId: session.user.id,
40
+ entityLabel: session.user.name ?? null,
41
+ sectionName: 'auth',
42
+ requestMetadata,
43
+ })
44
+ }
45
+ return Response.json(loginResult, { status: 200 })
46
+ } catch (error: any) {
47
+ return Response.json({ error: error.message }, { status: 400 })
48
+ }
49
+ }
@@ -1,20 +1,20 @@
1
- import auth from 'nextjs-cms/auth'
2
- import { NextRequest } from 'next/server'
3
-
4
- export async function GET(request: NextRequest) {
5
- const session = await auth()
6
- return Response.json(session, {
7
- status: session ? 200 : 404,
8
- })
9
- }
10
-
11
- export async function POST(request: NextRequest) {
12
- const session = await auth()
13
- if (!session) {
14
- return Response.json('Unauthorized', { status: 401 })
15
- }
16
-
17
- // TODO: Handle POST request to update session with new data
18
-
19
- return Response.json(session)
20
- }
1
+ import auth from 'nextjs-cms/auth'
2
+ import { NextRequest } from 'next/server'
3
+
4
+ export async function GET(request: NextRequest) {
5
+ const session = await auth()
6
+ return Response.json(session, {
7
+ status: session ? 200 : 404,
8
+ })
9
+ }
10
+
11
+ export async function POST(request: NextRequest) {
12
+ const session = await auth()
13
+ if (!session) {
14
+ return Response.json('Unauthorized', { status: 401 })
15
+ }
16
+
17
+ // TODO: Handle POST request to update session with new data
18
+
19
+ return Response.json(session)
20
+ }
@@ -1,165 +1,165 @@
1
- import { NextRequest, NextResponse } from 'next/server'
2
- import path from 'path'
3
- import fs from 'fs'
4
- import { readChunk } from 'read-chunk'
5
- import { fileTypeFromBuffer } from 'file-type'
6
- import { SectionFactory } from 'nextjs-cms/core/factories'
7
- import type { DocumentFieldConfigType } from 'nextjs-cms/core/fields'
8
- import auth from 'nextjs-cms/auth'
9
- import { sanitizeFileName, sanitizeFolderOrFileName } from 'nextjs-cms/utils'
10
- import { streamFile } from 'nextjs-cms/api/helpers'
11
- import { getCMSConfig } from 'nextjs-cms/core/config'
12
-
13
- /**
14
- * This route handler streams a document file from the server.
15
- * It protects document files from being accessed directly and avoids
16
- * the base64 payload size limits that occur with the tRPC approach.
17
- * Used by the `<ProtectedDocument />` component.
18
- */
19
-
20
- export async function GET(request: NextRequest) {
21
- const session = await auth()
22
- const searchParams = request.nextUrl.searchParams
23
-
24
- const name = searchParams.get('name')
25
- const sectionName = searchParams.get('sectionName')
26
- const fieldName = searchParams.get('fieldName')
27
-
28
- if (!name || !sectionName || !fieldName) {
29
- return NextResponse.json(
30
- {
31
- error: 'Invalid request',
32
- },
33
- { status: 400 },
34
- )
35
- }
36
-
37
- // Check if the session is valid
38
- if (!session || !session.user) {
39
- return NextResponse.json(
40
- {
41
- error: 'Invalid token',
42
- },
43
- { status: 401 },
44
- )
45
- }
46
-
47
- const uploadsFolder: string = (await getCMSConfig()).media.upload.path
48
-
49
- // Sanitize the inputs
50
- const sanitizedFolder = sanitizeFolderOrFileName(sectionName)
51
- const sanitizedName = sanitizeFileName(name)
52
-
53
- /**
54
- * Check the section and the field name, and get the allowed extensions,
55
- * while also checking if the user has access to the section
56
- */
57
- const section = await SectionFactory.getSectionForAdmin({
58
- name: sanitizedFolder,
59
- admin: { id: session.user.id },
60
- })
61
-
62
- /**
63
- * If the check fails, return an error
64
- */
65
- if (!section || !section.name) {
66
- return NextResponse.json(
67
- {
68
- error: 'File not found, or you do not have access to it.',
69
- },
70
- { status: 400 },
71
- )
72
- }
73
-
74
- const fieldConfig = section.fields.find((field) => field.name === fieldName) as DocumentFieldConfigType | undefined
75
-
76
- if (!fieldConfig || typeof fieldConfig.build !== 'function') {
77
- return NextResponse.json(
78
- {
79
- error: 'Invalid request',
80
- },
81
- { status: 400 },
82
- )
83
- }
84
-
85
- const field = fieldConfig.build()
86
-
87
- /**
88
- * If field is not found, return an error
89
- */
90
- if (!field || !field.name || !field.extensions || field.extensions.length === 0) {
91
- return NextResponse.json(
92
- {
93
- error: 'Invalid request',
94
- },
95
- { status: 400 },
96
- )
97
- }
98
-
99
- /**
100
- * Split the allowed extensions into an array
101
- */
102
- const documentAllowedExtensions = field.extensions
103
- const dir = '.documents'
104
- const pathToFile = path.join(uploadsFolder, dir, sanitizedFolder, sanitizedName)
105
-
106
- /**
107
- * First, check if the file exists
108
- */
109
- if (!fs.existsSync(pathToFile)) {
110
- return NextResponse.json(
111
- {
112
- error: 'File not found',
113
- },
114
- { status: 404 },
115
- )
116
- }
117
-
118
- /**
119
- * Read the first 4100 bytes of the file
120
- */
121
- const chunkBuffer = await readChunk(pathToFile, { length: 4100 })
122
- /**
123
- * Get the file type from the buffer
124
- */
125
- const fileType = await fileTypeFromBuffer(chunkBuffer)
126
-
127
- /**
128
- * If the file type is invalid, return an error
129
- */
130
- if (!fileType) {
131
- return NextResponse.json(
132
- {
133
- error: 'Invalid file type',
134
- },
135
- { status: 400 },
136
- )
137
- }
138
-
139
- /**
140
- * Check if the file type is allowed
141
- */
142
- if (!documentAllowedExtensions.includes(fileType.ext)) {
143
- return NextResponse.json(
144
- {
145
- error: 'Invalid file type',
146
- },
147
- { status: 400 },
148
- )
149
- }
150
-
151
- const fileStats = fs.statSync(pathToFile)
152
- const fileSize = fileStats.size
153
- const fileMimeType = fileType.mime
154
-
155
- const data: ReadableStream<Uint8Array> = await streamFile(pathToFile)
156
-
157
- return new NextResponse(data, {
158
- headers: {
159
- 'Content-Length': fileSize.toString(),
160
- 'Content-Type': fileMimeType,
161
- 'Content-Disposition': 'inline',
162
- },
163
- status: 200,
164
- })
165
- }
1
+ import { NextRequest, NextResponse } from 'next/server'
2
+ import path from 'path'
3
+ import fs from 'fs'
4
+ import { readChunk } from 'read-chunk'
5
+ import { fileTypeFromBuffer } from 'file-type'
6
+ import { SectionFactory } from 'nextjs-cms/core/factories'
7
+ import type { DocumentFieldConfigType } from 'nextjs-cms/core/fields'
8
+ import auth from 'nextjs-cms/auth'
9
+ import { sanitizeFileName, sanitizeFolderOrFileName } from 'nextjs-cms/utils'
10
+ import { streamFile } from 'nextjs-cms/api/helpers'
11
+ import { getCMSConfig } from 'nextjs-cms/core/config'
12
+
13
+ /**
14
+ * This route handler streams a document file from the server.
15
+ * It protects document files from being accessed directly and avoids
16
+ * the base64 payload size limits that occur with the tRPC approach.
17
+ * Used by the `<ProtectedDocument />` component.
18
+ */
19
+
20
+ export async function GET(request: NextRequest) {
21
+ const session = await auth()
22
+ const searchParams = request.nextUrl.searchParams
23
+
24
+ const name = searchParams.get('name')
25
+ const sectionName = searchParams.get('sectionName')
26
+ const fieldName = searchParams.get('fieldName')
27
+
28
+ if (!name || !sectionName || !fieldName) {
29
+ return NextResponse.json(
30
+ {
31
+ error: 'Invalid request',
32
+ },
33
+ { status: 400 },
34
+ )
35
+ }
36
+
37
+ // Check if the session is valid
38
+ if (!session || !session.user) {
39
+ return NextResponse.json(
40
+ {
41
+ error: 'Invalid token',
42
+ },
43
+ { status: 401 },
44
+ )
45
+ }
46
+
47
+ const uploadsFolder: string = (await getCMSConfig()).media.upload.path
48
+
49
+ // Sanitize the inputs
50
+ const sanitizedFolder = sanitizeFolderOrFileName(sectionName)
51
+ const sanitizedName = sanitizeFileName(name)
52
+
53
+ /**
54
+ * Check the section and the field name, and get the allowed extensions,
55
+ * while also checking if the user has access to the section
56
+ */
57
+ const section = await SectionFactory.getSectionForAdmin({
58
+ name: sanitizedFolder,
59
+ admin: { id: session.user.id },
60
+ })
61
+
62
+ /**
63
+ * If the check fails, return an error
64
+ */
65
+ if (!section || !section.name) {
66
+ return NextResponse.json(
67
+ {
68
+ error: 'File not found, or you do not have access to it.',
69
+ },
70
+ { status: 400 },
71
+ )
72
+ }
73
+
74
+ const fieldConfig = section.fields.find((field) => field.name === fieldName) as DocumentFieldConfigType | undefined
75
+
76
+ if (!fieldConfig || typeof fieldConfig.build !== 'function') {
77
+ return NextResponse.json(
78
+ {
79
+ error: 'Invalid request',
80
+ },
81
+ { status: 400 },
82
+ )
83
+ }
84
+
85
+ const field = fieldConfig.build()
86
+
87
+ /**
88
+ * If field is not found, return an error
89
+ */
90
+ if (!field || !field.name || !field.extensions || field.extensions.length === 0) {
91
+ return NextResponse.json(
92
+ {
93
+ error: 'Invalid request',
94
+ },
95
+ { status: 400 },
96
+ )
97
+ }
98
+
99
+ /**
100
+ * Split the allowed extensions into an array
101
+ */
102
+ const documentAllowedExtensions = field.extensions
103
+ const dir = '.documents'
104
+ const pathToFile = path.join(uploadsFolder, dir, sanitizedFolder, sanitizedName)
105
+
106
+ /**
107
+ * First, check if the file exists
108
+ */
109
+ if (!fs.existsSync(pathToFile)) {
110
+ return NextResponse.json(
111
+ {
112
+ error: 'File not found',
113
+ },
114
+ { status: 404 },
115
+ )
116
+ }
117
+
118
+ /**
119
+ * Read the first 4100 bytes of the file
120
+ */
121
+ const chunkBuffer = await readChunk(pathToFile, { length: 4100 })
122
+ /**
123
+ * Get the file type from the buffer
124
+ */
125
+ const fileType = await fileTypeFromBuffer(chunkBuffer)
126
+
127
+ /**
128
+ * If the file type is invalid, return an error
129
+ */
130
+ if (!fileType) {
131
+ return NextResponse.json(
132
+ {
133
+ error: 'Invalid file type',
134
+ },
135
+ { status: 400 },
136
+ )
137
+ }
138
+
139
+ /**
140
+ * Check if the file type is allowed
141
+ */
142
+ if (!documentAllowedExtensions.includes(fileType.ext)) {
143
+ return NextResponse.json(
144
+ {
145
+ error: 'Invalid file type',
146
+ },
147
+ { status: 400 },
148
+ )
149
+ }
150
+
151
+ const fileStats = fs.statSync(pathToFile)
152
+ const fileSize = fileStats.size
153
+ const fileMimeType = fileType.mime
154
+
155
+ const data: ReadableStream<Uint8Array> = await streamFile(pathToFile)
156
+
157
+ return new NextResponse(data, {
158
+ headers: {
159
+ 'Content-Length': fileSize.toString(),
160
+ 'Content-Type': fileMimeType,
161
+ 'Content-Disposition': 'inline',
162
+ },
163
+ status: 200,
164
+ })
165
+ }