nca-ai-cms-astro-plugin 1.0.10 → 1.0.11

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nca-ai-cms-astro-plugin",
-  "version": "1.0.10",
+  "version": "1.0.11",
   "type": "module",
   "exports": {
     ".": "./src/index.ts",

package/src/utils/authUtils.test.ts

@@ -8,6 +8,11 @@ describe('isPublicPath', () => {
     expect(isPublicPath('/login')).toBe(true);
   });
 
+  it('allows article-image paths', () => {
+    expect(isPublicPath('/api/article-image/123/hero.webp')).toBe(true);
+    expect(isPublicPath('/api/article-image/some-slug/hero.webp')).toBe(true);
+  });
+
   it('rejects other paths', () => {
     expect(isPublicPath('/api/generate-content')).toBe(false);
     expect(isPublicPath('/editor')).toBe(false);

package/src/utils/authUtils.ts

@@ -1,9 +1,10 @@
 import { getEnvVariable } from './envUtils.js';
 
 const PUBLIC_PATHS = ['/api/auth/login', '/api/auth/logout', '/login'];
+const PUBLIC_PATH_PREFIXES = ['/api/article-image/'];
 
 export function isPublicPath(pathname: string): boolean {
-  return PUBLIC_PATHS.includes(pathname);
+  return PUBLIC_PATHS.includes(pathname) || PUBLIC_PATH_PREFIXES.some(prefix => pathname.startsWith(prefix));
 }
 
 export function isProtectedPath(pathname: string): boolean {

package/update.md

@@ -1,3 +1,12 @@
+# v1.0.11
+
+## Make article-image API route public
+- Added `/api/article-image/` to public path prefixes in auth middleware
+- Article hero images are now accessible without authentication
+- Fixes image loading on public-facing frontend pages
+
+---
+
 # v1.0.8
 
 ## Generalize content generator for any topic