fontdue-js 3.0.6 → 3.1.0

package/dist/server/middleware.js

@@ -0,0 +1,144 @@
+// Request-scoped Fontdue context for non-RSC server frameworks (Astro, React
+// Router 7, TanStack Start). RSC apps (Next) don't use this — they drive the
+// per-render config through React.cache (see ../relay/serverConfig.ts).
+//
+// fontdue-js carries two kinds of request-scoped state to every server fetch:
+//
+//   - the admin *preview* token (reveals unpublished fonts), and
+//   - the visitor's per-collection *node-access* token (a collection they
+//     unlocked with a password).
+//
+// Both need the same plumbing: read a cookie, hold a header in ambient scope for
+// the whole render so every fontdue-js fetch/preload forwards it with no per-call
+// threading, and force the response out of any shared/CDN cache because it's now
+// per-visitor. This module provides that machinery once and exposes three
+// single-responsibility middlewares over it:
+//
+//   - runWithPreview     — forwards only the admin preview token.
+//   - runWithNodeAccess  — forwards only the visitor's node-access token.
+//   - runWithFontdue     — both, composed (runWithPreview ∘ runWithNodeAccess).
+//
+// Mount one of these in your framework's request middleware. A storefront that
+// wants both features mounts the precomposed runWithFontdue:
+//
+//   // Astro: src/middleware.ts
+//   export const onRequest = (ctx, next) => runWithFontdue(ctx.request, next);
+//
+//   // React Router 7 (root route, with future.v8_middleware):
+//   export const middleware = [({ request }, next) => runWithFontdue(request, next)];
+//
+// They compose because they share one ambient store and each merges its slice
+// onto whatever an outer middleware established — so nesting accumulates headers
+// rather than clobbering. Mount only the ones you need; the unused cookie is
+// simply never present.
+//
+// Requirement: AsyncLocalStorage must propagate from the install point into the
+// render. That holds for in-process middleware — Node (Netlify Functions, the
+// default SSR target), Deno (Netlify Edge), Bun. It does NOT hold when
+// middleware runs in a separate runtime from the render (e.g. Astro with
+// `edgeMiddleware: true`, where locals cross the boundary as a serialized
+// header); mount the middleware in-process on those setups.
+
+import { AsyncLocalStorage } from 'node:async_hooks';
+import { readPreviewToken, previewAuthHeaders } from '../preview/index.js';
+import { nodeAccessHeadersFromCookie } from '../nodeAccess.js';
+import { registerAmbientConfigResolver } from '../relay/serverConfig.js';
+const ambientStore = new AsyncLocalStorage();
+
+// Feed the ambient headers into fontdue-js's server config resolution. Returns
+// undefined outside the context, so plain public requests are untouched.
+registerAmbientConfigResolver(() => {
+  const store = ambientStore.getStore();
+  return store ? {
+    headers: store.headers
+  } : undefined;
+});
+
+/** Whether the current async context is an admin preview. */
+export function isPreviewing() {
+  var _ambientStore$getStor;
+  return ((_ambientStore$getStor = ambientStore.getStore()) === null || _ambientStore$getStor === void 0 ? void 0 : _ambientStore$getStor.previewing) === true;
+}
+
+/**
+ * Request-scoped Fontdue headers for the current async context (admin preview
+ * and/or the visitor's node-access token), or {} when there are none. Spread
+ * into a hand-rolled fetch you make inside a runWith* middleware; the fontdue-js
+ * fetch/preload helpers pick these up automatically and don't need it.
+ */
+export function ambientHeaders() {
+  var _ambientStore$getStor2;
+  return ((_ambientStore$getStor2 = ambientStore.getStore()) === null || _ambientStore$getStor2 === void 0 ? void 0 : _ambientStore$getStor2.headers) ?? {};
+}
+const NO_STORE = 'private, no-store';
+
+// A per-visitor response (preview or an unlocked collection) must never be
+// stored in or served from a shared/CDN cache.
+function forceNoStore(response) {
+  response.headers.set('Cache-Control', NO_STORE);
+  response.headers.delete('Netlify-CDN-Cache-Control');
+  response.headers.delete('CDN-Cache-Control');
+  return response;
+}
+
+// Run `next` with `patch` merged onto any ambient context an outer middleware
+// already set, so runWithPreview ∘ runWithNodeAccess accumulate (headers union,
+// previewing OR'd) instead of the inner call clobbering the outer.
+function withAmbient(patch, next) {
+  const existing = ambientStore.getStore();
+  return Promise.resolve(ambientStore.run({
+    headers: {
+      ...(existing === null || existing === void 0 ? void 0 : existing.headers),
+      ...patch.headers
+    },
+    previewing: (existing === null || existing === void 0 ? void 0 : existing.previewing) === true || patch.previewing === true
+  }, next));
+}
+
+/**
+ * Run `next` (your framework's render/loader chain) with the request's admin
+ * preview token in ambient scope, then return its Response. While active, every
+ * fontdue-js server fetch forwards the token (reveals unpublished fonts) with no
+ * per-call plumbing; when previewing, the response is forced out of any
+ * shared/CDN cache. Public requests (no preview cookie) pass through untouched
+ * and stay fully cacheable. For the visitor password-unlock token use
+ * runWithNodeAccess; for both, runWithFontdue.
+ */
+export async function runWithPreview(request, next) {
+  const token = readPreviewToken(request.headers.get('cookie'));
+  if (!token) return next();
+  const response = await withAmbient({
+    headers: previewAuthHeaders(token),
+    previewing: true
+  }, next);
+  return forceNoStore(response);
+}
+
+/**
+ * Run `next` with the visitor's per-collection node-access token in ambient
+ * scope, then return its Response. The token is read from the first-party cookie
+ * the password form set; while active, every fontdue-js server fetch forwards it
+ * so a collection the visitor unlocked resolves for them. A request carrying an
+ * unlock is per-visitor, so its response is forced out of any shared/CDN cache —
+ * an unlocked render is never served to someone who hasn't unlocked. Requests
+ * with no node-access cookie pass through untouched and stay cacheable.
+ */
+export async function runWithNodeAccess(request, next) {
+  const headers = nodeAccessHeadersFromCookie(request.headers.get('cookie'));
+  if (Object.keys(headers).length === 0) return next();
+  const response = await withAmbient({
+    headers
+  }, next);
+  return forceNoStore(response);
+}
+
+/**
+ * The precomposed middleware most storefronts want: forwards the admin preview
+ * token AND the visitor's node-access token, each handled by its own
+ * single-responsibility middleware. Equivalent to nesting
+ * `runWithPreview(request, () => runWithNodeAccess(request, next))` — mount this
+ * in place of runWithPreview to get the password-unlock forwarding too.
+ */
+export async function runWithFontdue(request, next) {
+  return runWithPreview(request, () => runWithNodeAccess(request, next));
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fontdue-js",
-  "version": "3.0.6",
+  "version": "3.1.0",
   "type": "module",
   "scripts": {
     "build": "npm run relay && run-p build-js build-css build-ts",
@@ -86,6 +86,7 @@
     "./preview": "./dist/preview/index.js",
     "./preview/server": "./dist/preview/server.js",
     "./server": "./dist/server/index.js",
+    "./server/middleware": "./dist/server/middleware.js",
     "./next": "./dist/next/index.js",
     "./next/config": "./dist/next/config.js",
     "./next/revalidate": "./dist/next/revalidate.js",
@@ -101,6 +102,10 @@
       "default": "./dist/components/CharacterViewer/index.js"
     },
     "./CustomerLoginForm": "./dist/components/CustomerLoginForm/index.js",
+    "./FeatureTesters": {
+      "react-server": "./dist/components/FeatureTester/FeatureTesters.server.js",
+      "default": "./dist/components/FeatureTester/FeatureTesters.js"
+    },
     "./FontdueProvider": {
       "react-server": "./dist/components/FontdueProvider/index.server.js",
       "default": "./dist/components/FontdueProvider/index.js"
@@ -109,6 +114,7 @@
       "react-server": "./dist/components/NewsletterSignup/index.server.js",
       "default": "./dist/components/NewsletterSignup/index.js"
     },
+    "./NodePasswordForm": "./dist/components/NodePasswordForm/index.js",
     "./StoreModal": "./dist/components/StoreModal/index.js",
     "./TestFontsForm": {
       "react-server": "./dist/components/TestFontsForm/index.server.js",
@@ -128,4 +134,4 @@
     "./useFont": "./dist/components/useFont.js",
     "./useFontStyle": "./dist/components/useFont.js"
   }
-}
+}