create-nextjs-cms 0.9.30 → 0.9.32

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (145) hide show
  1. package/LICENSE +21 -21
  2. package/README.md +71 -71
  3. package/dist/helpers/utils.js +16 -16
  4. package/dist/lib/section-creators.js +166 -166
  5. package/package.json +1 -1
  6. package/templates/default/.eslintrc.json +5 -5
  7. package/templates/default/.prettierignore +7 -7
  8. package/templates/default/.prettierrc.json +27 -27
  9. package/templates/default/CHANGELOG.md +140 -140
  10. package/templates/default/_gitignore +57 -57
  11. package/templates/default/app/(auth)/auth/login/LoginPage.tsx +192 -192
  12. package/templates/default/app/(auth)/auth/login/page.tsx +11 -11
  13. package/templates/default/app/(auth)/auth-language-provider.tsx +34 -34
  14. package/templates/default/app/(auth)/layout.tsx +81 -81
  15. package/templates/default/app/(rootLayout)/(plugins)/[...slug]/error.tsx +64 -0
  16. package/templates/default/app/(rootLayout)/(plugins)/[...slug]/page.tsx +59 -47
  17. package/templates/default/app/(rootLayout)/(plugins)/[...slug]/plugin-server-registry.ts +14 -16
  18. package/templates/default/app/(rootLayout)/admins/page.tsx +10 -10
  19. package/templates/default/app/(rootLayout)/browse/[section]/[page]/page.tsx +22 -22
  20. package/templates/default/app/(rootLayout)/categorized/[section]/page.tsx +15 -15
  21. package/templates/default/app/(rootLayout)/dashboard/page.tsx +68 -70
  22. package/templates/default/app/(rootLayout)/edit/[section]/[itemId]/page.tsx +20 -20
  23. package/templates/default/app/(rootLayout)/layout.tsx +81 -81
  24. package/templates/default/app/(rootLayout)/loading.tsx +10 -10
  25. package/templates/default/app/(rootLayout)/log/page.tsx +5 -7
  26. package/templates/default/app/(rootLayout)/new/[section]/page.tsx +15 -15
  27. package/templates/default/app/(rootLayout)/section/[section]/page.tsx +19 -19
  28. package/templates/default/app/(rootLayout)/settings/page.tsx +11 -13
  29. package/templates/default/app/api/auth/csrf/route.ts +25 -25
  30. package/templates/default/app/api/auth/refresh/route.ts +10 -10
  31. package/templates/default/app/api/auth/route.ts +49 -49
  32. package/templates/default/app/api/auth/session/route.ts +20 -20
  33. package/templates/default/app/api/document/route.ts +165 -165
  34. package/templates/default/app/api/editor/photo/route.ts +49 -49
  35. package/templates/default/app/api/photo/route.ts +27 -27
  36. package/templates/default/app/api/submit/section/item/[slug]/route.ts +95 -95
  37. package/templates/default/app/api/submit/section/item/route.ts +56 -56
  38. package/templates/default/app/api/submit/section/simple/route.ts +86 -86
  39. package/templates/default/app/api/video/route.ts +174 -174
  40. package/templates/default/app/globals.css +236 -236
  41. package/templates/default/cms.config.ts +56 -56
  42. package/templates/default/components/admin/admin-card.tsx +165 -165
  43. package/templates/default/components/admin/admin-edit-page.tsx +124 -124
  44. package/templates/default/components/admin/admin-privilege-card.tsx +184 -184
  45. package/templates/default/components/admin/new-admin-form.tsx +172 -172
  46. package/templates/default/components/container-box.tsx +24 -24
  47. package/templates/default/components/dnd-kit/draggable.tsx +21 -21
  48. package/templates/default/components/dnd-kit/droppable.tsx +20 -20
  49. package/templates/default/components/dnd-kit/sortable-item.tsx +18 -18
  50. package/templates/default/components/feedback/error-component.tsx +16 -16
  51. package/templates/default/components/feedback/info-card.tsx +93 -93
  52. package/templates/default/components/feedback/loading-spinners.tsx +67 -67
  53. package/templates/default/components/feedback/modal.tsx +166 -166
  54. package/templates/default/components/feedback/progress-bar.tsx +48 -48
  55. package/templates/default/components/feedback/tooltip-component.tsx +27 -27
  56. package/templates/default/components/form/form-input-element.tsx +70 -70
  57. package/templates/default/components/form/helpers/_section-hot-reload.js +1 -1
  58. package/templates/default/components/form/helpers/util.ts +17 -17
  59. package/templates/default/components/form/inputs/checkbox-form-input.tsx +46 -46
  60. package/templates/default/components/form/inputs/color-form-input.tsx +44 -44
  61. package/templates/default/components/form/inputs/date-form-input.tsx +93 -93
  62. package/templates/default/components/form/inputs/map-form-input.tsx +141 -141
  63. package/templates/default/components/form/inputs/multiple-select-form-input.tsx +85 -85
  64. package/templates/default/components/form/inputs/number-form-input.tsx +43 -43
  65. package/templates/default/components/form/inputs/password-form-input.tsx +47 -47
  66. package/templates/default/components/form/inputs/photo-form-input.tsx +279 -279
  67. package/templates/default/components/form/inputs/rich-text-form-input.tsx +148 -148
  68. package/templates/default/components/form/inputs/select-form-input.tsx +159 -159
  69. package/templates/default/components/form/inputs/slug-form-input.tsx +131 -131
  70. package/templates/default/components/form/inputs/tags-form-input.tsx +255 -255
  71. package/templates/default/components/form/inputs/text-form-input.tsx +61 -61
  72. package/templates/default/components/form/inputs/textarea-form-input.tsx +61 -61
  73. package/templates/default/components/layout/default-nav-items.tsx +3 -3
  74. package/templates/default/components/layout/layout.tsx +84 -84
  75. package/templates/default/components/layout/navbar.tsx +258 -258
  76. package/templates/default/components/layout/sidebar-dropdown-item.tsx +83 -83
  77. package/templates/default/components/layout/sidebar-item.tsx +24 -24
  78. package/templates/default/components/layout/sidebar.tsx +229 -229
  79. package/templates/default/components/layout/theme-provider.tsx +8 -8
  80. package/templates/default/components/layout/theme-toggle.tsx +39 -39
  81. package/templates/default/components/locale/locale-switcher.tsx +98 -98
  82. package/templates/default/components/media/dropzone.tsx +154 -154
  83. package/templates/default/components/media/protected-document.tsx +44 -44
  84. package/templates/default/components/media/protected-image.tsx +143 -143
  85. package/templates/default/components/media/protected-video.tsx +76 -76
  86. package/templates/default/components/multi-select.tsx +1150 -1150
  87. package/templates/default/components/pages/admins-page.tsx +43 -43
  88. package/templates/default/components/pages/browse-page.tsx +106 -106
  89. package/templates/default/components/pages/categorized-section-page.tsx +31 -31
  90. package/templates/default/components/pages/dashboard-page-alt.tsx +45 -45
  91. package/templates/default/components/pages/item-edit-page.tsx +267 -267
  92. package/templates/default/components/pages/log-page.tsx +107 -107
  93. package/templates/default/components/pages/new-page.tsx +183 -183
  94. package/templates/default/components/pages/section-page.tsx +203 -203
  95. package/templates/default/components/pages/settings-page.tsx +232 -232
  96. package/templates/default/components/pagination/pagination-buttons.tsx +147 -147
  97. package/templates/default/components/pagination/pagination.tsx +36 -36
  98. package/templates/default/components/sections/category-delete-confirm-page.tsx +130 -130
  99. package/templates/default/components/sections/category-section-select-input.tsx +139 -139
  100. package/templates/default/components/sections/conditional-fields.tsx +49 -49
  101. package/templates/default/components/sections/section-icon.tsx +8 -8
  102. package/templates/default/components/sections/section-item-card.tsx +143 -143
  103. package/templates/default/components/sections/section-item-status-badge.tsx +17 -17
  104. package/templates/default/components/sections/select-input-buttons.tsx +125 -125
  105. package/templates/default/components/select-box.tsx +98 -98
  106. package/templates/default/components/ui/accordion.tsx +53 -53
  107. package/templates/default/components/ui/alert-dialog.tsx +113 -113
  108. package/templates/default/components/ui/alert.tsx +47 -47
  109. package/templates/default/components/ui/badge.tsx +38 -38
  110. package/templates/default/components/ui/card.tsx +43 -43
  111. package/templates/default/components/ui/command.tsx +137 -137
  112. package/templates/default/components/ui/custom-alert-dialog.tsx +113 -113
  113. package/templates/default/components/ui/custom-dialog.tsx +123 -123
  114. package/templates/default/components/ui/dialog.tsx +123 -123
  115. package/templates/default/components/ui/direction.tsx +22 -22
  116. package/templates/default/components/ui/dropdown-menu.tsx +182 -182
  117. package/templates/default/components/ui/input-group.tsx +54 -54
  118. package/templates/default/components/ui/input.tsx +22 -22
  119. package/templates/default/components/ui/label.tsx +19 -19
  120. package/templates/default/components/ui/popover.tsx +42 -42
  121. package/templates/default/components/ui/progress.tsx +31 -31
  122. package/templates/default/components/ui/scroll-area.tsx +42 -42
  123. package/templates/default/components/ui/select.tsx +165 -165
  124. package/templates/default/components/ui/separator.tsx +28 -28
  125. package/templates/default/components/ui/sheet.tsx +103 -103
  126. package/templates/default/components/ui/spinner.tsx +16 -16
  127. package/templates/default/components/ui/switch.tsx +29 -29
  128. package/templates/default/components/ui/table.tsx +83 -83
  129. package/templates/default/components/ui/tabs.tsx +55 -55
  130. package/templates/default/components/ui/toast.tsx +113 -113
  131. package/templates/default/components/ui/toaster.tsx +35 -35
  132. package/templates/default/components/ui/tooltip.tsx +30 -30
  133. package/templates/default/components/ui/use-toast.ts +187 -187
  134. package/templates/default/drizzle.config.ts +4 -4
  135. package/templates/default/dynamic-schemas/schema.ts +225 -75
  136. package/templates/default/env/env.ts +46 -46
  137. package/templates/default/envConfig.ts +4 -4
  138. package/templates/default/lib/postinstall.js +14 -14
  139. package/templates/default/lib/utils.ts +6 -6
  140. package/templates/default/next-env.d.ts +6 -6
  141. package/templates/default/next.config.ts +24 -24
  142. package/templates/default/package.json +1 -1
  143. package/templates/default/postcss.config.mjs +6 -6
  144. package/templates/default/proxy.ts +32 -32
  145. package/templates/default/tsconfig.json +48 -48
@@ -1,56 +1,56 @@
1
- import { NextRequest, NextResponse } from 'next/server'
2
- import { NewSubmit } from 'nextjs-cms/core/submit'
3
- import auth from 'nextjs-cms/auth'
4
- import { getRequestMetadataFromHeaders } from 'nextjs-cms/logging'
5
-
6
- export async function POST(request: NextRequest) {
7
- const session = await auth()
8
-
9
- if (!session || !session.user) {
10
- return NextResponse.json(
11
- {
12
- error: 'Access token not provided',
13
- },
14
- { status: 401 },
15
- )
16
- }
17
-
18
- const user = session.user
19
- const formData = await request.formData()
20
- const sectionName = formData.get('sectionName') as string | null
21
- const requestMetadata = getRequestMetadataFromHeaders(request.headers)
22
-
23
- if (!sectionName) {
24
- return NextResponse.json(
25
- {
26
- error: 'Section name not provided',
27
- },
28
- { status: 400 },
29
- )
30
- }
31
-
32
- const submit = new NewSubmit({
33
- sectionName,
34
- user,
35
- postData: formData,
36
- requestMetadata,
37
- })
38
-
39
- await submit.initialize()
40
- await submit.submit()
41
- if (submit.error) {
42
- return NextResponse.json(
43
- {
44
- error: submit.errorMessage,
45
- },
46
- { status: 400 },
47
- )
48
- }
49
-
50
- return NextResponse.json(
51
- {
52
- message: 'Section item submitted successfully',
53
- },
54
- { status: 200 },
55
- )
56
- }
1
+ import { NextRequest, NextResponse } from 'next/server'
2
+ import { NewSubmit } from 'nextjs-cms/core/submit'
3
+ import auth from 'nextjs-cms/auth'
4
+ import { getRequestMetadataFromHeaders } from 'nextjs-cms/logging'
5
+
6
+ export async function POST(request: NextRequest) {
7
+ const session = await auth()
8
+
9
+ if (!session || !session.user) {
10
+ return NextResponse.json(
11
+ {
12
+ error: 'Access token not provided',
13
+ },
14
+ { status: 401 },
15
+ )
16
+ }
17
+
18
+ const user = session.user
19
+ const formData = await request.formData()
20
+ const sectionName = formData.get('sectionName') as string | null
21
+ const requestMetadata = getRequestMetadataFromHeaders(request.headers)
22
+
23
+ if (!sectionName) {
24
+ return NextResponse.json(
25
+ {
26
+ error: 'Section name not provided',
27
+ },
28
+ { status: 400 },
29
+ )
30
+ }
31
+
32
+ const submit = new NewSubmit({
33
+ sectionName,
34
+ user,
35
+ postData: formData,
36
+ requestMetadata,
37
+ })
38
+
39
+ await submit.initialize()
40
+ await submit.submit()
41
+ if (submit.error) {
42
+ return NextResponse.json(
43
+ {
44
+ error: submit.errorMessage,
45
+ },
46
+ { status: 400 },
47
+ )
48
+ }
49
+
50
+ return NextResponse.json(
51
+ {
52
+ message: 'Section item submitted successfully',
53
+ },
54
+ { status: 200 },
55
+ )
56
+ }
@@ -1,86 +1,86 @@
1
- import { NextRequest, NextResponse } from 'next/server'
2
- import { SimpleSectionSubmit, LocaleSubmit } from 'nextjs-cms/core/submit'
3
- import auth from 'nextjs-cms/auth'
4
- import { getRequestMetadataFromHeaders } from 'nextjs-cms/logging'
5
- import { getCMSConfig } from 'nextjs-cms/core/config'
6
- import { resolveLocale } from 'nextjs-cms/core/localization'
7
- import getString from 'nextjs-cms/translations'
8
-
9
- export async function PUT(request: NextRequest) {
10
- const session = await auth()
11
-
12
- if (!session || !session.user) {
13
- return NextResponse.json(
14
- {
15
- error: 'Access token not provided',
16
- },
17
- { status: 401 },
18
- )
19
- }
20
-
21
- const user = session.user
22
- const formData = await request.formData()
23
- const sectionName = formData.get('sectionName') as string | null
24
- const requestMetadata = getRequestMetadataFromHeaders(request.headers)
25
-
26
- if (!sectionName) {
27
- return NextResponse.json(
28
- {
29
- error: 'Section name not provided',
30
- },
31
- { status: 400 },
32
- )
33
- }
34
-
35
- const localeCode = formData.get('locale')
36
- const localeValue = typeof localeCode === 'string' ? localeCode : undefined
37
- const cmsConfig = await getCMSConfig()
38
- const localeResult = resolveLocale({
39
- localization: cmsConfig.localization,
40
- locale: localeValue,
41
- })
42
- const isLocaleSubmit = localeValue && localeResult.localizationEnabled && localeResult.isDefault === false
43
- const localeForSubmit = localeResult.resolvedLocale?.code
44
-
45
- if (isLocaleSubmit && !localeForSubmit) {
46
- return NextResponse.json(
47
- {
48
- error: getString('invalidLocale', user.language, {
49
- locale: localeValue,
50
- locales: localeResult.availableLocales.map((l) => l.code).join(', '),
51
- }),
52
- },
53
- { status: 400 },
54
- )
55
- }
56
-
57
- const config = {
58
- itemId: '1',
59
- sectionName,
60
- user,
61
- postData: formData,
62
- requestMetadata,
63
- }
64
-
65
- const submit = isLocaleSubmit
66
- ? new LocaleSubmit({ ...config, locale: localeForSubmit as string })
67
- : new SimpleSectionSubmit(config)
68
-
69
- await submit.initialize()
70
- await submit.submit()
71
- if (submit.error) {
72
- return NextResponse.json(
73
- {
74
- error: submit.errorMessage,
75
- },
76
- { status: 400 },
77
- )
78
- }
79
-
80
- return NextResponse.json(
81
- {
82
- message: 'Section item submitted successfully',
83
- },
84
- { status: 200 },
85
- )
86
- }
1
+ import { NextRequest, NextResponse } from 'next/server'
2
+ import { SimpleSectionSubmit, LocaleSubmit } from 'nextjs-cms/core/submit'
3
+ import auth from 'nextjs-cms/auth'
4
+ import { getRequestMetadataFromHeaders } from 'nextjs-cms/logging'
5
+ import { getCMSConfig } from 'nextjs-cms/core/config'
6
+ import { resolveLocale } from 'nextjs-cms/core/localization'
7
+ import getString from 'nextjs-cms/translations'
8
+
9
+ export async function PUT(request: NextRequest) {
10
+ const session = await auth()
11
+
12
+ if (!session || !session.user) {
13
+ return NextResponse.json(
14
+ {
15
+ error: 'Access token not provided',
16
+ },
17
+ { status: 401 },
18
+ )
19
+ }
20
+
21
+ const user = session.user
22
+ const formData = await request.formData()
23
+ const sectionName = formData.get('sectionName') as string | null
24
+ const requestMetadata = getRequestMetadataFromHeaders(request.headers)
25
+
26
+ if (!sectionName) {
27
+ return NextResponse.json(
28
+ {
29
+ error: 'Section name not provided',
30
+ },
31
+ { status: 400 },
32
+ )
33
+ }
34
+
35
+ const localeCode = formData.get('locale')
36
+ const localeValue = typeof localeCode === 'string' ? localeCode : undefined
37
+ const cmsConfig = await getCMSConfig()
38
+ const localeResult = resolveLocale({
39
+ localization: cmsConfig.localization,
40
+ locale: localeValue,
41
+ })
42
+ const isLocaleSubmit = localeValue && localeResult.localizationEnabled && localeResult.isDefault === false
43
+ const localeForSubmit = localeResult.resolvedLocale?.code
44
+
45
+ if (isLocaleSubmit && !localeForSubmit) {
46
+ return NextResponse.json(
47
+ {
48
+ error: getString('invalidLocale', user.language, {
49
+ locale: localeValue,
50
+ locales: localeResult.availableLocales.map((l) => l.code).join(', '),
51
+ }),
52
+ },
53
+ { status: 400 },
54
+ )
55
+ }
56
+
57
+ const config = {
58
+ itemId: '1',
59
+ sectionName,
60
+ user,
61
+ postData: formData,
62
+ requestMetadata,
63
+ }
64
+
65
+ const submit = isLocaleSubmit
66
+ ? new LocaleSubmit({ ...config, locale: localeForSubmit as string })
67
+ : new SimpleSectionSubmit(config)
68
+
69
+ await submit.initialize()
70
+ await submit.submit()
71
+ if (submit.error) {
72
+ return NextResponse.json(
73
+ {
74
+ error: submit.errorMessage,
75
+ },
76
+ { status: 400 },
77
+ )
78
+ }
79
+
80
+ return NextResponse.json(
81
+ {
82
+ message: 'Section item submitted successfully',
83
+ },
84
+ { status: 200 },
85
+ )
86
+ }
@@ -1,174 +1,174 @@
1
- import { NextRequest, NextResponse } from 'next/server'
2
- import path from 'path'
3
- import fs from 'fs'
4
- import { readChunk } from 'read-chunk'
5
- import { fileTypeFromBuffer } from 'file-type'
6
- import { SectionFactory } from 'nextjs-cms/core/factories'
7
- import type { VideoField } from 'nextjs-cms/core/fields'
8
- import auth from 'nextjs-cms/auth'
9
- import { sanitizeFileName, sanitizeFolderOrFileName } from 'nextjs-cms/utils'
10
- import { streamFile } from 'nextjs-cms/api/server/actions'
11
- import { getCMSConfig } from 'nextjs-cms/core/config'
12
-
13
- /**
14
- * This route handler is used to stream a video file from the server
15
- * It's used to protect the video files from being accessed directly
16
- * It's being used in the `<ProtectedVideo />` component
17
- * @param request
18
- * @constructor
19
- */
20
-
21
- export async function GET(request: NextRequest) {
22
- const session = await auth()
23
- const searchParams = request.nextUrl.searchParams
24
-
25
- const name = searchParams.get('name')
26
- const sectionName = searchParams.get('sectionName')
27
- const fieldName = searchParams.get('fieldName')
28
-
29
- if (!name || !sectionName || !fieldName) {
30
- return NextResponse.json(
31
- {
32
- error: 'Invalid request',
33
- },
34
- { status: 400 },
35
- )
36
- }
37
-
38
- // Check if the session is valid
39
- if (!session || !session.user) {
40
- return NextResponse.json(
41
- {
42
- error: 'Invalid token',
43
- },
44
- { status: 401 },
45
- )
46
- }
47
-
48
- const uploadsFolder: string = (await getCMSConfig()).media.upload.path
49
-
50
- // Sanitize the inputs
51
- const sanitizedFolder = sanitizeFolderOrFileName(sectionName)
52
- const sanitizedName = sanitizeFileName(name)
53
- /**
54
- * Check the section and the field name, and get the allowed extensions,
55
- * while also checking if the user has access to the section
56
- */
57
- const section = await SectionFactory.getSectionForAdmin({
58
- name: sanitizedFolder,
59
- admin: { id: session.user.id },
60
- })
61
-
62
- /**
63
- * If the check fails, throw an error
64
- */
65
- if (!section || !section.name) {
66
- return NextResponse.json(
67
- {
68
- error: 'File not found, or you do not have access to it.',
69
- },
70
- { status: 400 },
71
- )
72
- }
73
-
74
- const fieldInfo = section.fields.find((field) => field.name === fieldName)?.build() as VideoField
75
-
76
- /**
77
- * If field is not found, throw an error
78
- */
79
- if (!fieldInfo || !fieldInfo.name || !fieldInfo.extensions || fieldInfo.extensions.length === 0) {
80
- return NextResponse.json(
81
- {
82
- error: 'Invalid request',
83
- },
84
- { status: 400 },
85
- )
86
- }
87
-
88
- /**
89
- * Split the allowed extensions into an array
90
- */
91
- const videoAllowedExtensions = fieldInfo.extensions
92
- const dir = '.videos'
93
- const pathToFile = path.join(uploadsFolder, dir, sanitizedFolder, sanitizedName)
94
- /**
95
- * First, check if the file exists
96
- */
97
- if (!fs.existsSync(pathToFile)) {
98
- return NextResponse.json(
99
- {
100
- error: 'File not found',
101
- },
102
- { status: 404 },
103
- )
104
- }
105
-
106
- /**
107
- * Read the first 4100 bytes of the file
108
- */
109
- const chunkBuffer = await readChunk(pathToFile, { length: 4100 })
110
- /**
111
- * Get the file type from the buffer
112
- */
113
- const fileType = await fileTypeFromBuffer(chunkBuffer)
114
-
115
- /**
116
- * If the file type is invalid, return an error
117
- */
118
- if (!fileType) {
119
- return NextResponse.json(
120
- {
121
- error: 'Invalid file type',
122
- },
123
- { status: 400 },
124
- )
125
- }
126
-
127
- /**
128
- * Check if the file type is allowed
129
- */
130
- if (!videoAllowedExtensions.includes(fileType.ext)) {
131
- return NextResponse.json(
132
- {
133
- error: 'Invalid file type',
134
- },
135
- { status: 400 },
136
- )
137
- }
138
-
139
- const fileStats = fs.statSync(pathToFile)
140
- const range = request.headers.get('range')
141
- const videoSize = fileStats.size
142
- const videoMimeType = fileType.mime
143
-
144
- let res = null
145
- if (range) {
146
- const parts = range.replace(/bytes=/, '').split('-')
147
- const start = parseInt(parts[0] ?? '0', 10)
148
- const end = parts[1] ? parseInt(parts[1], 10) : videoSize - 1
149
- const chunkSize = end - start + 1
150
-
151
- const data: ReadableStream<Uint8Array> = await streamFile(pathToFile, { start, end })
152
-
153
- res = new NextResponse(data, {
154
- headers: {
155
- 'Content-Range': `bytes ${start}-${end}/${videoSize}`,
156
- 'Accept-Ranges': 'bytes',
157
- 'Content-Length': chunkSize.toString(),
158
- 'Content-Type': videoMimeType,
159
- },
160
- status: 206,
161
- })
162
- } else {
163
- const data: ReadableStream<Uint8Array> = await streamFile(pathToFile)
164
- res = new NextResponse(data, {
165
- headers: {
166
- 'Content-Length': videoSize.toString(),
167
- 'Content-Type': videoMimeType,
168
- },
169
- status: 200,
170
- })
171
- }
172
-
173
- return res
174
- }
1
+ import { NextRequest, NextResponse } from 'next/server'
2
+ import path from 'path'
3
+ import fs from 'fs'
4
+ import { readChunk } from 'read-chunk'
5
+ import { fileTypeFromBuffer } from 'file-type'
6
+ import { SectionFactory } from 'nextjs-cms/core/factories'
7
+ import type { VideoField } from 'nextjs-cms/core/fields'
8
+ import auth from 'nextjs-cms/auth'
9
+ import { sanitizeFileName, sanitizeFolderOrFileName } from 'nextjs-cms/utils'
10
+ import { streamFile } from 'nextjs-cms/api/server/actions'
11
+ import { getCMSConfig } from 'nextjs-cms/core/config'
12
+
13
+ /**
14
+ * This route handler is used to stream a video file from the server
15
+ * It's used to protect the video files from being accessed directly
16
+ * It's being used in the `<ProtectedVideo />` component
17
+ * @param request
18
+ * @constructor
19
+ */
20
+
21
+ export async function GET(request: NextRequest) {
22
+ const session = await auth()
23
+ const searchParams = request.nextUrl.searchParams
24
+
25
+ const name = searchParams.get('name')
26
+ const sectionName = searchParams.get('sectionName')
27
+ const fieldName = searchParams.get('fieldName')
28
+
29
+ if (!name || !sectionName || !fieldName) {
30
+ return NextResponse.json(
31
+ {
32
+ error: 'Invalid request',
33
+ },
34
+ { status: 400 },
35
+ )
36
+ }
37
+
38
+ // Check if the session is valid
39
+ if (!session || !session.user) {
40
+ return NextResponse.json(
41
+ {
42
+ error: 'Invalid token',
43
+ },
44
+ { status: 401 },
45
+ )
46
+ }
47
+
48
+ const uploadsFolder: string = (await getCMSConfig()).media.upload.path
49
+
50
+ // Sanitize the inputs
51
+ const sanitizedFolder = sanitizeFolderOrFileName(sectionName)
52
+ const sanitizedName = sanitizeFileName(name)
53
+ /**
54
+ * Check the section and the field name, and get the allowed extensions,
55
+ * while also checking if the user has access to the section
56
+ */
57
+ const section = await SectionFactory.getSectionForAdmin({
58
+ name: sanitizedFolder,
59
+ admin: { id: session.user.id },
60
+ })
61
+
62
+ /**
63
+ * If the check fails, throw an error
64
+ */
65
+ if (!section || !section.name) {
66
+ return NextResponse.json(
67
+ {
68
+ error: 'File not found, or you do not have access to it.',
69
+ },
70
+ { status: 400 },
71
+ )
72
+ }
73
+
74
+ const fieldInfo = section.fields.find((field) => field.name === fieldName)?.build() as VideoField
75
+
76
+ /**
77
+ * If field is not found, throw an error
78
+ */
79
+ if (!fieldInfo || !fieldInfo.name || !fieldInfo.extensions || fieldInfo.extensions.length === 0) {
80
+ return NextResponse.json(
81
+ {
82
+ error: 'Invalid request',
83
+ },
84
+ { status: 400 },
85
+ )
86
+ }
87
+
88
+ /**
89
+ * Split the allowed extensions into an array
90
+ */
91
+ const videoAllowedExtensions = fieldInfo.extensions
92
+ const dir = '.videos'
93
+ const pathToFile = path.join(uploadsFolder, dir, sanitizedFolder, sanitizedName)
94
+ /**
95
+ * First, check if the file exists
96
+ */
97
+ if (!fs.existsSync(pathToFile)) {
98
+ return NextResponse.json(
99
+ {
100
+ error: 'File not found',
101
+ },
102
+ { status: 404 },
103
+ )
104
+ }
105
+
106
+ /**
107
+ * Read the first 4100 bytes of the file
108
+ */
109
+ const chunkBuffer = await readChunk(pathToFile, { length: 4100 })
110
+ /**
111
+ * Get the file type from the buffer
112
+ */
113
+ const fileType = await fileTypeFromBuffer(chunkBuffer)
114
+
115
+ /**
116
+ * If the file type is invalid, return an error
117
+ */
118
+ if (!fileType) {
119
+ return NextResponse.json(
120
+ {
121
+ error: 'Invalid file type',
122
+ },
123
+ { status: 400 },
124
+ )
125
+ }
126
+
127
+ /**
128
+ * Check if the file type is allowed
129
+ */
130
+ if (!videoAllowedExtensions.includes(fileType.ext)) {
131
+ return NextResponse.json(
132
+ {
133
+ error: 'Invalid file type',
134
+ },
135
+ { status: 400 },
136
+ )
137
+ }
138
+
139
+ const fileStats = fs.statSync(pathToFile)
140
+ const range = request.headers.get('range')
141
+ const videoSize = fileStats.size
142
+ const videoMimeType = fileType.mime
143
+
144
+ let res = null
145
+ if (range) {
146
+ const parts = range.replace(/bytes=/, '').split('-')
147
+ const start = parseInt(parts[0] ?? '0', 10)
148
+ const end = parts[1] ? parseInt(parts[1], 10) : videoSize - 1
149
+ const chunkSize = end - start + 1
150
+
151
+ const data: ReadableStream<Uint8Array> = await streamFile(pathToFile, { start, end })
152
+
153
+ res = new NextResponse(data, {
154
+ headers: {
155
+ 'Content-Range': `bytes ${start}-${end}/${videoSize}`,
156
+ 'Accept-Ranges': 'bytes',
157
+ 'Content-Length': chunkSize.toString(),
158
+ 'Content-Type': videoMimeType,
159
+ },
160
+ status: 206,
161
+ })
162
+ } else {
163
+ const data: ReadableStream<Uint8Array> = await streamFile(pathToFile)
164
+ res = new NextResponse(data, {
165
+ headers: {
166
+ 'Content-Length': videoSize.toString(),
167
+ 'Content-Type': videoMimeType,
168
+ },
169
+ status: 200,
170
+ })
171
+ }
172
+
173
+ return res
174
+ }