create-nextjs-cms 0.9.6 → 0.9.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (184) hide show
  1. package/LICENSE +21 -21
  2. package/README.md +71 -71
  3. package/dist/helpers/check-directory.d.ts +1 -0
  4. package/dist/helpers/check-directory.d.ts.map +1 -1
  5. package/dist/helpers/check-directory.js +98 -23
  6. package/dist/helpers/utils.js +16 -16
  7. package/dist/index.js +13 -8
  8. package/dist/lib/create-project.js +1 -1
  9. package/dist/lib/section-creators.js +166 -166
  10. package/package.json +1 -1
  11. package/templates/default/.eslintrc.json +5 -5
  12. package/templates/default/.prettierignore +7 -7
  13. package/templates/default/.prettierrc.json +27 -27
  14. package/templates/default/CHANGELOG.md +140 -140
  15. package/templates/default/_gitignore +57 -57
  16. package/templates/default/app/(auth)/auth/login/LoginPage.tsx +192 -192
  17. package/templates/default/app/(auth)/auth/login/page.tsx +11 -11
  18. package/templates/default/app/(auth)/auth-language-provider.tsx +34 -34
  19. package/templates/default/app/(auth)/layout.tsx +81 -81
  20. package/templates/default/app/(rootLayout)/(plugins)/[...slug]/page.tsx +40 -40
  21. package/templates/default/app/(rootLayout)/(plugins)/[...slug]/plugin-server-registry.ts +16 -16
  22. package/templates/default/app/(rootLayout)/admins/page.tsx +10 -10
  23. package/templates/default/app/(rootLayout)/browse/[section]/[page]/page.tsx +22 -22
  24. package/templates/default/app/(rootLayout)/categorized/[section]/page.tsx +15 -15
  25. package/templates/default/app/(rootLayout)/dashboard/page.tsx +63 -63
  26. package/templates/default/app/(rootLayout)/edit/[section]/[itemId]/page.tsx +20 -20
  27. package/templates/default/app/(rootLayout)/layout.tsx +81 -81
  28. package/templates/default/app/(rootLayout)/loading.tsx +10 -10
  29. package/templates/default/app/(rootLayout)/log/page.tsx +7 -7
  30. package/templates/default/app/(rootLayout)/new/[section]/page.tsx +15 -15
  31. package/templates/default/app/(rootLayout)/section/[section]/page.tsx +19 -19
  32. package/templates/default/app/(rootLayout)/settings/page.tsx +13 -13
  33. package/templates/default/app/_trpc/client.ts +3 -3
  34. package/templates/default/app/api/auth/csrf/route.ts +25 -25
  35. package/templates/default/app/api/auth/refresh/route.ts +10 -10
  36. package/templates/default/app/api/auth/route.ts +49 -49
  37. package/templates/default/app/api/auth/session/route.ts +20 -20
  38. package/templates/default/app/api/document/route.ts +165 -165
  39. package/templates/default/app/api/editor/photo/route.ts +49 -49
  40. package/templates/default/app/api/photo/route.ts +27 -27
  41. package/templates/default/app/api/submit/section/item/[slug]/route.ts +95 -95
  42. package/templates/default/app/api/submit/section/item/route.ts +56 -56
  43. package/templates/default/app/api/submit/section/simple/route.ts +86 -86
  44. package/templates/default/app/api/trpc/[trpc]/route.ts +33 -33
  45. package/templates/default/app/api/video/route.ts +174 -174
  46. package/templates/default/app/globals.css +228 -228
  47. package/templates/default/app/providers.tsx +152 -152
  48. package/templates/default/cms.config.ts +57 -58
  49. package/templates/default/components/AdminCard.tsx +166 -166
  50. package/templates/default/components/AdminEditPage.tsx +124 -124
  51. package/templates/default/components/AdminPrivilegeCard.tsx +185 -185
  52. package/templates/default/components/AdminsPage.tsx +43 -43
  53. package/templates/default/components/AnalyticsPage.tsx +144 -144
  54. package/templates/default/components/BarChartBox.tsx +42 -42
  55. package/templates/default/components/BrowsePage.tsx +106 -106
  56. package/templates/default/components/CategorizedSectionPage.tsx +31 -31
  57. package/templates/default/components/CategoryDeleteConfirmPage.tsx +130 -130
  58. package/templates/default/components/CategorySectionSelectInput.tsx +140 -140
  59. package/templates/default/components/ConditionalFields.tsx +49 -49
  60. package/templates/default/components/ContainerBox.tsx +24 -24
  61. package/templates/default/components/DashboardPageAlt.tsx +45 -45
  62. package/templates/default/components/DefaultNavItems.tsx +3 -3
  63. package/templates/default/components/Dropzone.tsx +154 -154
  64. package/templates/default/components/ErrorComponent.tsx +16 -16
  65. package/templates/default/components/GalleryPhoto.tsx +93 -93
  66. package/templates/default/components/InfoCard.tsx +93 -93
  67. package/templates/default/components/ItemEditPage.tsx +294 -294
  68. package/templates/default/components/Layout.tsx +84 -84
  69. package/templates/default/components/LoadingSpinners.tsx +67 -67
  70. package/templates/default/components/LocaleSwitcher.tsx +89 -89
  71. package/templates/default/components/LogPage.tsx +107 -107
  72. package/templates/default/components/Modal.tsx +166 -166
  73. package/templates/default/components/Navbar.tsx +258 -258
  74. package/templates/default/components/NewAdminForm.tsx +173 -173
  75. package/templates/default/components/NewPage.tsx +206 -206
  76. package/templates/default/components/NewVariantComponent.tsx +229 -229
  77. package/templates/default/components/PhotoGallery.tsx +35 -35
  78. package/templates/default/components/PieChartBox.tsx +101 -101
  79. package/templates/default/components/ProgressBar.tsx +48 -48
  80. package/templates/default/components/ProtectedDocument.tsx +44 -44
  81. package/templates/default/components/ProtectedImage.tsx +143 -143
  82. package/templates/default/components/ProtectedVideo.tsx +76 -76
  83. package/templates/default/components/SectionIcon.tsx +8 -8
  84. package/templates/default/components/SectionItemCard.tsx +144 -144
  85. package/templates/default/components/SectionItemStatusBadge.tsx +17 -17
  86. package/templates/default/components/SectionPage.tsx +205 -205
  87. package/templates/default/components/SelectBox.tsx +98 -98
  88. package/templates/default/components/SelectInputButtons.tsx +125 -125
  89. package/templates/default/components/SettingsPage.tsx +232 -232
  90. package/templates/default/components/Sidebar.tsx +204 -204
  91. package/templates/default/components/SidebarDropdownItem.tsx +83 -83
  92. package/templates/default/components/SidebarItem.tsx +24 -24
  93. package/templates/default/components/ThemeProvider.tsx +8 -8
  94. package/templates/default/components/TooltipComponent.tsx +27 -27
  95. package/templates/default/components/VariantCard.tsx +124 -124
  96. package/templates/default/components/VariantEditPage.tsx +230 -230
  97. package/templates/default/components/analytics/BounceRate.tsx +70 -70
  98. package/templates/default/components/analytics/LivePageViews.tsx +55 -55
  99. package/templates/default/components/analytics/LiveUsersCount.tsx +33 -33
  100. package/templates/default/components/analytics/MonthlyPageViews.tsx +42 -42
  101. package/templates/default/components/analytics/TopCountries.tsx +52 -52
  102. package/templates/default/components/analytics/TopDevices.tsx +46 -46
  103. package/templates/default/components/analytics/TopMediums.tsx +58 -58
  104. package/templates/default/components/analytics/TopSources.tsx +45 -45
  105. package/templates/default/components/analytics/TotalPageViews.tsx +41 -41
  106. package/templates/default/components/analytics/TotalSessions.tsx +41 -41
  107. package/templates/default/components/analytics/TotalUniqueUsers.tsx +41 -41
  108. package/templates/default/components/custom/RightHomeRoomVariantCard.tsx +138 -138
  109. package/templates/default/components/dndKit/Draggable.tsx +21 -21
  110. package/templates/default/components/dndKit/Droppable.tsx +20 -20
  111. package/templates/default/components/dndKit/SortableItem.tsx +18 -18
  112. package/templates/default/components/form/Form.tsx +370 -370
  113. package/templates/default/components/form/FormInputElement.tsx +70 -70
  114. package/templates/default/components/form/FormInputs.tsx +136 -136
  115. package/templates/default/components/form/helpers/_section-hot-reload.js +1 -1
  116. package/templates/default/components/form/helpers/util.ts +17 -17
  117. package/templates/default/components/form/inputs/CheckboxFormInput.tsx +46 -46
  118. package/templates/default/components/form/inputs/ColorFormInput.tsx +44 -44
  119. package/templates/default/components/form/inputs/DateFormInput.tsx +167 -110
  120. package/templates/default/components/form/inputs/DateRangeFormInput.tsx +46 -6
  121. package/templates/default/components/form/inputs/DocumentFormInput.tsx +222 -222
  122. package/templates/default/components/form/inputs/MapFormInput.tsx +140 -140
  123. package/templates/default/components/form/inputs/MultipleSelectFormInput.tsx +85 -85
  124. package/templates/default/components/form/inputs/NumberFormInput.tsx +43 -43
  125. package/templates/default/components/form/inputs/PasswordFormInput.tsx +47 -47
  126. package/templates/default/components/form/inputs/PhotoFormInput.tsx +275 -275
  127. package/templates/default/components/form/inputs/RichTextFormInput.tsx +138 -138
  128. package/templates/default/components/form/inputs/SelectFormInput.tsx +175 -175
  129. package/templates/default/components/form/inputs/SlugFormInput.tsx +131 -131
  130. package/templates/default/components/form/inputs/TagsFormInput.tsx +265 -265
  131. package/templates/default/components/form/inputs/TextFormInput.tsx +51 -51
  132. package/templates/default/components/form/inputs/TextareaFormInput.tsx +50 -50
  133. package/templates/default/components/form/inputs/VideoFormInput.tsx +118 -118
  134. package/templates/default/components/multi-select.tsx +1146 -1146
  135. package/templates/default/components/pagination/Pagination.tsx +36 -36
  136. package/templates/default/components/pagination/PaginationButtons.tsx +147 -147
  137. package/templates/default/components/theme-toggle.tsx +39 -39
  138. package/templates/default/components/ui/accordion.tsx +53 -53
  139. package/templates/default/components/ui/alert-dialog.tsx +157 -157
  140. package/templates/default/components/ui/alert.tsx +47 -47
  141. package/templates/default/components/ui/badge.tsx +38 -38
  142. package/templates/default/components/ui/button.tsx +62 -62
  143. package/templates/default/components/ui/calendar.tsx +166 -166
  144. package/templates/default/components/ui/card.tsx +43 -43
  145. package/templates/default/components/ui/checkbox.tsx +29 -29
  146. package/templates/default/components/ui/command.tsx +137 -137
  147. package/templates/default/components/ui/custom-alert-dialog.tsx +113 -113
  148. package/templates/default/components/ui/custom-dialog.tsx +123 -123
  149. package/templates/default/components/ui/dialog.tsx +123 -123
  150. package/templates/default/components/ui/direction.tsx +22 -22
  151. package/templates/default/components/ui/dropdown-menu.tsx +182 -182
  152. package/templates/default/components/ui/input-group.tsx +54 -54
  153. package/templates/default/components/ui/input.tsx +22 -22
  154. package/templates/default/components/ui/label.tsx +19 -19
  155. package/templates/default/components/ui/popover.tsx +42 -42
  156. package/templates/default/components/ui/progress.tsx +31 -31
  157. package/templates/default/components/ui/scroll-area.tsx +42 -42
  158. package/templates/default/components/ui/select.tsx +165 -165
  159. package/templates/default/components/ui/separator.tsx +28 -28
  160. package/templates/default/components/ui/sheet.tsx +103 -103
  161. package/templates/default/components/ui/spinner.tsx +16 -16
  162. package/templates/default/components/ui/switch.tsx +29 -29
  163. package/templates/default/components/ui/table.tsx +83 -83
  164. package/templates/default/components/ui/tabs.tsx +55 -55
  165. package/templates/default/components/ui/toast.tsx +113 -113
  166. package/templates/default/components/ui/toaster.tsx +35 -35
  167. package/templates/default/components/ui/tooltip.tsx +30 -30
  168. package/templates/default/components/ui/use-toast.ts +188 -188
  169. package/templates/default/components.json +21 -21
  170. package/templates/default/context/ModalProvider.tsx +53 -53
  171. package/templates/default/drizzle.config.ts +4 -4
  172. package/templates/default/dynamic-schemas/schema.ts +475 -0
  173. package/templates/default/env/env.js +130 -130
  174. package/templates/default/envConfig.ts +4 -4
  175. package/templates/default/hooks/useModal.ts +8 -8
  176. package/templates/default/lib/apiHelpers.ts +92 -92
  177. package/templates/default/lib/postinstall.js +14 -14
  178. package/templates/default/lib/utils.ts +6 -6
  179. package/templates/default/next-env.d.ts +6 -6
  180. package/templates/default/next.config.ts +23 -23
  181. package/templates/default/package.json +1 -1
  182. package/templates/default/postcss.config.mjs +6 -6
  183. package/templates/default/proxy.ts +32 -32
  184. package/templates/default/tsconfig.json +48 -48
@@ -1,19 +1,19 @@
1
- import SectionPage from '@/components/SectionPage'
2
- import { api, HydrateClient } from 'nextjs-cms/api/trpc/server'
3
- type Params = Promise<{ section: string }>
4
- type SearchParams = Promise<{ locale?: string }>
5
-
6
- export default async function Page(props: { params: Params; searchParams: SearchParams }) {
7
- const params = await props.params
8
- const searchParams = await props.searchParams
9
- await api.simpleSections.create.prefetch({
10
- sectionName: params.section,
11
- locale: searchParams.locale,
12
- })
13
-
14
- return (
15
- <HydrateClient>
16
- <SectionPage section={params.section} />
17
- </HydrateClient>
18
- )
19
- }
1
+ import SectionPage from '@/components/SectionPage'
2
+ import { api, HydrateClient } from 'nextjs-cms/api/trpc/server'
3
+ type Params = Promise<{ section: string }>
4
+ type SearchParams = Promise<{ locale?: string }>
5
+
6
+ export default async function Page(props: { params: Params; searchParams: SearchParams }) {
7
+ const params = await props.params
8
+ const searchParams = await props.searchParams
9
+ await api.simpleSections.create.prefetch({
10
+ sectionName: params.section,
11
+ locale: searchParams.locale,
12
+ })
13
+
14
+ return (
15
+ <HydrateClient>
16
+ <SectionPage section={params.section} />
17
+ </HydrateClient>
18
+ )
19
+ }
@@ -1,13 +1,13 @@
1
- import SettingsPage from '@/components/SettingsPage'
2
- import { api, HydrateClient } from 'nextjs-cms/api/trpc/server'
3
-
4
- export const dynamic = 'force-dynamic'
5
-
6
- export default async function Page() {
7
- await api.accountSettings.get.prefetch()
8
- return (
9
- <HydrateClient>
10
- <SettingsPage />
11
- </HydrateClient>
12
- )
13
- }
1
+ import SettingsPage from '@/components/SettingsPage'
2
+ import { api, HydrateClient } from 'nextjs-cms/api/trpc/server'
3
+
4
+ export const dynamic = 'force-dynamic'
5
+
6
+ export default async function Page() {
7
+ await api.accountSettings.get.prefetch()
8
+ return (
9
+ <HydrateClient>
10
+ <SettingsPage />
11
+ </HydrateClient>
12
+ )
13
+ }
@@ -1,3 +1,3 @@
1
- 'use client'
2
-
3
- export { trpc } from 'nextjs-cms/api/trpc/client'
1
+ 'use client'
2
+
3
+ export { trpc } from 'nextjs-cms/api/trpc/client'
@@ -1,25 +1,25 @@
1
- import { responseHeaders } from 'nextjs-cms/utils'
2
- import { createCSRFToken } from 'nextjs-cms/auth/actions'
3
- import { cookies } from 'next/headers'
4
-
5
- export async function GET() {
6
- const cookieStore = await cookies()
7
- const csrfTokenCookie = cookieStore.get('csrf_token')
8
- const { csrfToken, cookie } = await createCSRFToken(csrfTokenCookie?.value)
9
-
10
- if (cookie) {
11
- (await cookies()).set({
12
- name: 'csrf_token',
13
- value: cookie,
14
- httpOnly: true,
15
- secure: true,
16
- sameSite: true,
17
- })
18
- }
19
- return Response.json(
20
- {
21
- csrfToken,
22
- },
23
- responseHeaders,
24
- )
25
- }
1
+ import { responseHeaders } from 'nextjs-cms/utils'
2
+ import { createCSRFToken } from 'nextjs-cms/auth/actions'
3
+ import { cookies } from 'next/headers'
4
+
5
+ export async function GET() {
6
+ const cookieStore = await cookies()
7
+ const csrfTokenCookie = cookieStore.get('csrf_token')
8
+ const { csrfToken, cookie } = await createCSRFToken(csrfTokenCookie?.value)
9
+
10
+ if (cookie) {
11
+ (await cookies()).set({
12
+ name: 'csrf_token',
13
+ value: cookie,
14
+ httpOnly: true,
15
+ secure: true,
16
+ sameSite: true,
17
+ })
18
+ }
19
+ return Response.json(
20
+ {
21
+ csrfToken,
22
+ },
23
+ responseHeaders,
24
+ )
25
+ }
@@ -1,10 +1,10 @@
1
- import { NextRequest } from 'next/server'
2
- import { authRefresh } from 'nextjs-cms/auth/actions'
3
-
4
- export async function GET(request: NextRequest) {
5
- const refreshToken = request.cookies.get('refresh_token')
6
- const loginResult = await authRefresh(refreshToken)
7
- return Response.json(loginResult, {
8
- status: loginResult.status,
9
- })
10
- }
1
+ import { NextRequest } from 'next/server'
2
+ import { authRefresh } from 'nextjs-cms/auth/actions'
3
+
4
+ export async function GET(request: NextRequest) {
5
+ const refreshToken = request.cookies.get('refresh_token')
6
+ const loginResult = await authRefresh(refreshToken)
7
+ return Response.json(loginResult, {
8
+ status: loginResult.status,
9
+ })
10
+ }
@@ -1,49 +1,49 @@
1
- import { NextRequest } from 'next/server'
2
- import auth from 'nextjs-cms/auth'
3
- import { deleteSession, login } from 'nextjs-cms/auth/actions'
4
- import { getRequestMetadataFromHeaders, recordLog } from 'nextjs-cms/logging'
5
-
6
- export async function POST(request: NextRequest) {
7
- const { username, password, language } = await request.json()
8
- try {
9
- const loginResult = await login({ username, password, language })
10
- const requestMetadata = getRequestMetadataFromHeaders(request.headers)
11
-
12
- await recordLog({
13
- eventType: 'auth.login',
14
- actorId: loginResult.user?.id ?? null,
15
- actorUsername: loginResult.user?.username ?? null,
16
- entityType: 'admin',
17
- entityId: loginResult.user?.id ?? null,
18
- entityLabel: loginResult.user?.username ?? null,
19
- sectionName: 'auth',
20
- requestMetadata,
21
- })
22
- return Response.json(loginResult, { status: 200 })
23
- } catch (error: any) {
24
- return Response.json({ error: error.message }, { status: 400 })
25
- }
26
- }
27
-
28
- export async function DELETE(request: NextRequest) {
29
- const session = await auth()
30
- try {
31
- const loginResult = await deleteSession(session)
32
- if (session?.user?.id) {
33
- const requestMetadata = getRequestMetadataFromHeaders(request.headers)
34
- await recordLog({
35
- eventType: 'auth.logout',
36
- actorId: session.user.id,
37
- actorUsername: session.user.name ?? null,
38
- entityType: 'admin',
39
- entityId: session.user.id,
40
- entityLabel: session.user.name ?? null,
41
- sectionName: 'auth',
42
- requestMetadata,
43
- })
44
- }
45
- return Response.json(loginResult, { status: 200 })
46
- } catch (error: any) {
47
- return Response.json({ error: error.message }, { status: 400 })
48
- }
49
- }
1
+ import { NextRequest } from 'next/server'
2
+ import auth from 'nextjs-cms/auth'
3
+ import { deleteSession, login } from 'nextjs-cms/auth/actions'
4
+ import { getRequestMetadataFromHeaders, recordLog } from 'nextjs-cms/logging'
5
+
6
+ export async function POST(request: NextRequest) {
7
+ const { username, password, language } = await request.json()
8
+ try {
9
+ const loginResult = await login({ username, password, language })
10
+ const requestMetadata = getRequestMetadataFromHeaders(request.headers)
11
+
12
+ await recordLog({
13
+ eventType: 'auth.login',
14
+ actorId: loginResult.user?.id ?? null,
15
+ actorUsername: loginResult.user?.username ?? null,
16
+ entityType: 'admin',
17
+ entityId: loginResult.user?.id ?? null,
18
+ entityLabel: loginResult.user?.username ?? null,
19
+ sectionName: 'auth',
20
+ requestMetadata,
21
+ })
22
+ return Response.json(loginResult, { status: 200 })
23
+ } catch (error: any) {
24
+ return Response.json({ error: error.message }, { status: 400 })
25
+ }
26
+ }
27
+
28
+ export async function DELETE(request: NextRequest) {
29
+ const session = await auth()
30
+ try {
31
+ const loginResult = await deleteSession(session)
32
+ if (session?.user?.id) {
33
+ const requestMetadata = getRequestMetadataFromHeaders(request.headers)
34
+ await recordLog({
35
+ eventType: 'auth.logout',
36
+ actorId: session.user.id,
37
+ actorUsername: session.user.name ?? null,
38
+ entityType: 'admin',
39
+ entityId: session.user.id,
40
+ entityLabel: session.user.name ?? null,
41
+ sectionName: 'auth',
42
+ requestMetadata,
43
+ })
44
+ }
45
+ return Response.json(loginResult, { status: 200 })
46
+ } catch (error: any) {
47
+ return Response.json({ error: error.message }, { status: 400 })
48
+ }
49
+ }
@@ -1,20 +1,20 @@
1
- import auth from 'nextjs-cms/auth'
2
- import { NextRequest } from 'next/server'
3
-
4
- export async function GET(request: NextRequest) {
5
- const session = await auth()
6
- return Response.json(session, {
7
- status: session ? 200 : 404,
8
- })
9
- }
10
-
11
- export async function POST(request: NextRequest) {
12
- const session = await auth()
13
- if (!session) {
14
- return Response.json('Unauthorized', { status: 401 })
15
- }
16
-
17
- // TODO: Handle POST request to update session with new data
18
-
19
- return Response.json(session)
20
- }
1
+ import auth from 'nextjs-cms/auth'
2
+ import { NextRequest } from 'next/server'
3
+
4
+ export async function GET(request: NextRequest) {
5
+ const session = await auth()
6
+ return Response.json(session, {
7
+ status: session ? 200 : 404,
8
+ })
9
+ }
10
+
11
+ export async function POST(request: NextRequest) {
12
+ const session = await auth()
13
+ if (!session) {
14
+ return Response.json('Unauthorized', { status: 401 })
15
+ }
16
+
17
+ // TODO: Handle POST request to update session with new data
18
+
19
+ return Response.json(session)
20
+ }
@@ -1,165 +1,165 @@
1
- import { NextRequest, NextResponse } from 'next/server'
2
- import path from 'path'
3
- import fs from 'fs'
4
- import { readChunk } from 'read-chunk'
5
- import { fileTypeFromBuffer } from 'file-type'
6
- import { SectionFactory } from 'nextjs-cms/core/factories'
7
- import type { DocumentFieldConfigType } from 'nextjs-cms/core/fields'
8
- import auth from 'nextjs-cms/auth'
9
- import { sanitizeFileName, sanitizeFolderOrFileName } from 'nextjs-cms/utils'
10
- import { streamFile } from 'nextjs-cms/api/helpers'
11
- import { getCMSConfig } from 'nextjs-cms/core/config'
12
-
13
- /**
14
- * This route handler streams a document file from the server.
15
- * It protects document files from being accessed directly and avoids
16
- * the base64 payload size limits that occur with the tRPC approach.
17
- * Used by the `<ProtectedDocument />` component.
18
- */
19
-
20
- export async function GET(request: NextRequest) {
21
- const session = await auth()
22
- const searchParams = request.nextUrl.searchParams
23
-
24
- const name = searchParams.get('name')
25
- const sectionName = searchParams.get('sectionName')
26
- const fieldName = searchParams.get('fieldName')
27
-
28
- if (!name || !sectionName || !fieldName) {
29
- return NextResponse.json(
30
- {
31
- error: 'Invalid request',
32
- },
33
- { status: 400 },
34
- )
35
- }
36
-
37
- // Check if the session is valid
38
- if (!session || !session.user) {
39
- return NextResponse.json(
40
- {
41
- error: 'Invalid token',
42
- },
43
- { status: 401 },
44
- )
45
- }
46
-
47
- const uploadsFolder: string = (await getCMSConfig()).media.upload.path
48
-
49
- // Sanitize the inputs
50
- const sanitizedFolder = sanitizeFolderOrFileName(sectionName)
51
- const sanitizedName = sanitizeFileName(name)
52
-
53
- /**
54
- * Check the section and the field name, and get the allowed extensions,
55
- * while also checking if the user has access to the section
56
- */
57
- const section = await SectionFactory.getSectionForAdmin({
58
- name: sanitizedFolder,
59
- admin: { id: session.user.id },
60
- })
61
-
62
- /**
63
- * If the check fails, return an error
64
- */
65
- if (!section || !section.name) {
66
- return NextResponse.json(
67
- {
68
- error: 'File not found, or you do not have access to it.',
69
- },
70
- { status: 400 },
71
- )
72
- }
73
-
74
- const fieldConfig = section.fields.find((field) => field.name === fieldName) as DocumentFieldConfigType | undefined
75
-
76
- if (!fieldConfig || typeof fieldConfig.build !== 'function') {
77
- return NextResponse.json(
78
- {
79
- error: 'Invalid request',
80
- },
81
- { status: 400 },
82
- )
83
- }
84
-
85
- const field = fieldConfig.build()
86
-
87
- /**
88
- * If field is not found, return an error
89
- */
90
- if (!field || !field.name || !field.extensions || field.extensions.length === 0) {
91
- return NextResponse.json(
92
- {
93
- error: 'Invalid request',
94
- },
95
- { status: 400 },
96
- )
97
- }
98
-
99
- /**
100
- * Split the allowed extensions into an array
101
- */
102
- const documentAllowedExtensions = field.extensions
103
- const dir = '.documents'
104
- const pathToFile = path.join(uploadsFolder, dir, sanitizedFolder, sanitizedName)
105
-
106
- /**
107
- * First, check if the file exists
108
- */
109
- if (!fs.existsSync(pathToFile)) {
110
- return NextResponse.json(
111
- {
112
- error: 'File not found',
113
- },
114
- { status: 404 },
115
- )
116
- }
117
-
118
- /**
119
- * Read the first 4100 bytes of the file
120
- */
121
- const chunkBuffer = await readChunk(pathToFile, { length: 4100 })
122
- /**
123
- * Get the file type from the buffer
124
- */
125
- const fileType = await fileTypeFromBuffer(chunkBuffer)
126
-
127
- /**
128
- * If the file type is invalid, return an error
129
- */
130
- if (!fileType) {
131
- return NextResponse.json(
132
- {
133
- error: 'Invalid file type',
134
- },
135
- { status: 400 },
136
- )
137
- }
138
-
139
- /**
140
- * Check if the file type is allowed
141
- */
142
- if (!documentAllowedExtensions.includes(fileType.ext)) {
143
- return NextResponse.json(
144
- {
145
- error: 'Invalid file type',
146
- },
147
- { status: 400 },
148
- )
149
- }
150
-
151
- const fileStats = fs.statSync(pathToFile)
152
- const fileSize = fileStats.size
153
- const fileMimeType = fileType.mime
154
-
155
- const data: ReadableStream<Uint8Array> = await streamFile(pathToFile)
156
-
157
- return new NextResponse(data, {
158
- headers: {
159
- 'Content-Length': fileSize.toString(),
160
- 'Content-Type': fileMimeType,
161
- 'Content-Disposition': 'inline',
162
- },
163
- status: 200,
164
- })
165
- }
1
+ import { NextRequest, NextResponse } from 'next/server'
2
+ import path from 'path'
3
+ import fs from 'fs'
4
+ import { readChunk } from 'read-chunk'
5
+ import { fileTypeFromBuffer } from 'file-type'
6
+ import { SectionFactory } from 'nextjs-cms/core/factories'
7
+ import type { DocumentFieldConfigType } from 'nextjs-cms/core/fields'
8
+ import auth from 'nextjs-cms/auth'
9
+ import { sanitizeFileName, sanitizeFolderOrFileName } from 'nextjs-cms/utils'
10
+ import { streamFile } from 'nextjs-cms/api/helpers'
11
+ import { getCMSConfig } from 'nextjs-cms/core/config'
12
+
13
+ /**
14
+ * This route handler streams a document file from the server.
15
+ * It protects document files from being accessed directly and avoids
16
+ * the base64 payload size limits that occur with the tRPC approach.
17
+ * Used by the `<ProtectedDocument />` component.
18
+ */
19
+
20
+ export async function GET(request: NextRequest) {
21
+ const session = await auth()
22
+ const searchParams = request.nextUrl.searchParams
23
+
24
+ const name = searchParams.get('name')
25
+ const sectionName = searchParams.get('sectionName')
26
+ const fieldName = searchParams.get('fieldName')
27
+
28
+ if (!name || !sectionName || !fieldName) {
29
+ return NextResponse.json(
30
+ {
31
+ error: 'Invalid request',
32
+ },
33
+ { status: 400 },
34
+ )
35
+ }
36
+
37
+ // Check if the session is valid
38
+ if (!session || !session.user) {
39
+ return NextResponse.json(
40
+ {
41
+ error: 'Invalid token',
42
+ },
43
+ { status: 401 },
44
+ )
45
+ }
46
+
47
+ const uploadsFolder: string = (await getCMSConfig()).media.upload.path
48
+
49
+ // Sanitize the inputs
50
+ const sanitizedFolder = sanitizeFolderOrFileName(sectionName)
51
+ const sanitizedName = sanitizeFileName(name)
52
+
53
+ /**
54
+ * Check the section and the field name, and get the allowed extensions,
55
+ * while also checking if the user has access to the section
56
+ */
57
+ const section = await SectionFactory.getSectionForAdmin({
58
+ name: sanitizedFolder,
59
+ admin: { id: session.user.id },
60
+ })
61
+
62
+ /**
63
+ * If the check fails, return an error
64
+ */
65
+ if (!section || !section.name) {
66
+ return NextResponse.json(
67
+ {
68
+ error: 'File not found, or you do not have access to it.',
69
+ },
70
+ { status: 400 },
71
+ )
72
+ }
73
+
74
+ const fieldConfig = section.fields.find((field) => field.name === fieldName) as DocumentFieldConfigType | undefined
75
+
76
+ if (!fieldConfig || typeof fieldConfig.build !== 'function') {
77
+ return NextResponse.json(
78
+ {
79
+ error: 'Invalid request',
80
+ },
81
+ { status: 400 },
82
+ )
83
+ }
84
+
85
+ const field = fieldConfig.build()
86
+
87
+ /**
88
+ * If field is not found, return an error
89
+ */
90
+ if (!field || !field.name || !field.extensions || field.extensions.length === 0) {
91
+ return NextResponse.json(
92
+ {
93
+ error: 'Invalid request',
94
+ },
95
+ { status: 400 },
96
+ )
97
+ }
98
+
99
+ /**
100
+ * Split the allowed extensions into an array
101
+ */
102
+ const documentAllowedExtensions = field.extensions
103
+ const dir = '.documents'
104
+ const pathToFile = path.join(uploadsFolder, dir, sanitizedFolder, sanitizedName)
105
+
106
+ /**
107
+ * First, check if the file exists
108
+ */
109
+ if (!fs.existsSync(pathToFile)) {
110
+ return NextResponse.json(
111
+ {
112
+ error: 'File not found',
113
+ },
114
+ { status: 404 },
115
+ )
116
+ }
117
+
118
+ /**
119
+ * Read the first 4100 bytes of the file
120
+ */
121
+ const chunkBuffer = await readChunk(pathToFile, { length: 4100 })
122
+ /**
123
+ * Get the file type from the buffer
124
+ */
125
+ const fileType = await fileTypeFromBuffer(chunkBuffer)
126
+
127
+ /**
128
+ * If the file type is invalid, return an error
129
+ */
130
+ if (!fileType) {
131
+ return NextResponse.json(
132
+ {
133
+ error: 'Invalid file type',
134
+ },
135
+ { status: 400 },
136
+ )
137
+ }
138
+
139
+ /**
140
+ * Check if the file type is allowed
141
+ */
142
+ if (!documentAllowedExtensions.includes(fileType.ext)) {
143
+ return NextResponse.json(
144
+ {
145
+ error: 'Invalid file type',
146
+ },
147
+ { status: 400 },
148
+ )
149
+ }
150
+
151
+ const fileStats = fs.statSync(pathToFile)
152
+ const fileSize = fileStats.size
153
+ const fileMimeType = fileType.mime
154
+
155
+ const data: ReadableStream<Uint8Array> = await streamFile(pathToFile)
156
+
157
+ return new NextResponse(data, {
158
+ headers: {
159
+ 'Content-Length': fileSize.toString(),
160
+ 'Content-Type': fileMimeType,
161
+ 'Content-Disposition': 'inline',
162
+ },
163
+ status: 200,
164
+ })
165
+ }