nuxt-media-library 0.0.53 → 0.0.55

package/README.md

@@ -52,6 +52,9 @@ export default defineNuxtConfig({
     baseURL: 'http://media-library.internal/v1',
     // Only for direct browser uploads (proxyUploads: false): a public address.
     // publicBaseURL: 'https://media.example.com/v1',
+    // false when your own server/api/media-library/[...].ts serves /manage
+    // (media grants, below). Default true: the module's /manage proxies.
+    // manageProxy: false,
     // Uploads always go through Nuxt server (/api/media-library/uploads/*)
     routes: {
       createSession: '/uploads/sessions',
@@ -103,6 +106,18 @@ request is checked by your rules and sent upstream with a short-lived
 endpoints, and no long-lived credential reaches the media library from the
 browser.
 
+Turn off the module's built-in `/manage` proxies so your handler gets the
+requests. Their routes (`/api/media-library/manage/assets/**`…) are more
+specific than a catch-all file and would otherwise answer first, without
+`authorize` (the module warns at startup when it sees a shadowed catch-all):
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  mediaLibrary: { manageProxy: false },
+})
+```
+
 ```ts
 // server/api/media-library/[...].ts
 import { createMLCatchAllProxy, specFromNeed } from '@fritill-team/nuxt-media-library/server'
@@ -139,6 +154,9 @@ export default createMLCatchAllProxy({
   before they expire; an upload's parts, finalize and abort reuse the grant
   that created the session.
 - `/delivery` and the processing metadata routes are not affected.
+- With `manageProxy: false` the module still serves `/api/media-library/delivery/**`
+  and, when `serviceUploads.proxy` is on, the service-upload pass-through.
+  Your catch-all handles everything else under `/api/media-library`.
 
 ### Showing assets of several services: read grants
 

package/dist/module.d.mts

@@ -52,6 +52,16 @@ interface ModuleOptions {
         baseURL?: string;
         backends?: Record<string, ServiceUploadBackend>;
     };
+    /**
+     * The built-in `/api/media-library/manage/**` proxies (default `true`).
+     * Set `false` when the app serves `/manage` itself, e.g. with
+     * `createMLCatchAllProxy({ authorize })` in
+     * `server/api/media-library/[...].ts`: the built-in routes are more
+     * specific than an app's catch-all and would otherwise answer first, so
+     * `authorize` would never run. `/delivery/**` and the service-upload
+     * pass-through are still registered.
+     */
+    manageProxy?: boolean;
 }
 declare const SERVICE_UPLOADS_ROUTE = "/api/media-library/service-uploads";
 declare const _default: _nuxt_schema.NuxtModule<ModuleOptions, ModuleOptions, false>;

package/dist/module.d.ts

@@ -52,6 +52,16 @@ interface ModuleOptions {
         baseURL?: string;
         backends?: Record<string, ServiceUploadBackend>;
     };
+    /**
+     * The built-in `/api/media-library/manage/**` proxies (default `true`).
+     * Set `false` when the app serves `/manage` itself, e.g. with
+     * `createMLCatchAllProxy({ authorize })` in
+     * `server/api/media-library/[...].ts`: the built-in routes are more
+     * specific than an app's catch-all and would otherwise answer first, so
+     * `authorize` would never run. `/delivery/**` and the service-upload
+     * pass-through are still registered.
+     */
+    manageProxy?: boolean;
 }
 declare const SERVICE_UPLOADS_ROUTE = "/api/media-library/service-uploads";
 declare const _default: _nuxt_schema.NuxtModule<ModuleOptions, ModuleOptions, false>;

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "name": "media-library",
   "configKey": "mediaLibrary",
-  "version": "0.0.53",
+  "version": "0.0.55",
   "builder": {
     "@nuxt/module-builder": "1.0.2",
     "unbuild": "3.6.1"

package/dist/module.mjs

@@ -1,3 +1,5 @@
+import { existsSync, readdirSync } from 'node:fs';
+import { join } from 'node:path';
 import { defineNuxtModule, createResolver, addImportsDir, addComponentsDir, addServerHandler, useLogger, addPlugin } from '@nuxt/kit';
 export * from '../dist/runtime/types/resourcePolicy.js';
 export * from '../dist/runtime/types/uploader.js';
@@ -37,6 +39,20 @@ function serviceBackends(backends, logger) {
   }
   return out;
 }
+function appCatchAlls(layers) {
+  const found = [];
+  for (const { config } of layers) {
+    const serverDir = config.serverDir ?? join(config.rootDir, "server");
+    for (const sub of ["api/media-library", "api/media-library/manage"]) {
+      const dir = join(serverDir, sub);
+      if (!existsSync(dir)) continue;
+      for (const name of readdirSync(dir)) {
+        if (name.startsWith("[...")) found.push(join(dir, name));
+      }
+    }
+  }
+  return found;
+}
 const module$1 = defineNuxtModule({
   meta: {
     name: "media-library",
@@ -56,7 +72,8 @@ const module$1 = defineNuxtModule({
     partSize: 8 * 1024 * 1024,
     concurrency: 3,
     checksum: { algorithm: "SHA-256", perPart: true, final: true },
-    headers: {}
+    headers: {},
+    manageProxy: true
   },
   async setup(options, nuxt) {
     const resolver = createResolver(import.meta.url);
@@ -101,30 +118,37 @@ const module$1 = defineNuxtModule({
       route: "/api/media-library/delivery/**",
       handler: resolver.resolve("./runtime/server/delivery-proxy")
     });
-    addServerHandler({
-      route: "/api/media-library/manage/uploads/**",
-      handler: resolver.resolve("./runtime/server/uploads-proxy")
-    });
-    addServerHandler({
-      route: "/api/media-library/manage/resource-policies/**",
-      handler: resolver.resolve("./runtime/server/resource-policy-proxy")
-    });
-    addServerHandler({
-      route: "/api/media-library/manage/resource-policies",
-      handler: resolver.resolve("./runtime/server/resource-policy-proxy")
-    });
-    addServerHandler({
-      route: "/api/media-library/manage/assets/**",
-      handler: resolver.resolve("./runtime/server/assets-proxy")
-    });
-    addServerHandler({
-      route: "/api/media-library/manage/assets",
-      handler: resolver.resolve("./runtime/server/assets-proxy")
-    });
-    addServerHandler({
-      route: "/api/media-library/manage/processing/**",
-      handler: resolver.resolve("./runtime/server/processing-proxy")
-    });
+    const logger = useLogger("media-library");
+    if (options.manageProxy !== false) {
+      addServerHandler({
+        route: "/api/media-library/manage/uploads/**",
+        handler: resolver.resolve("./runtime/server/uploads-proxy")
+      });
+      addServerHandler({
+        route: "/api/media-library/manage/resource-policies/**",
+        handler: resolver.resolve("./runtime/server/resource-policy-proxy")
+      });
+      addServerHandler({
+        route: "/api/media-library/manage/resource-policies",
+        handler: resolver.resolve("./runtime/server/resource-policy-proxy")
+      });
+      addServerHandler({
+        route: "/api/media-library/manage/assets/**",
+        handler: resolver.resolve("./runtime/server/assets-proxy")
+      });
+      addServerHandler({
+        route: "/api/media-library/manage/assets",
+        handler: resolver.resolve("./runtime/server/assets-proxy")
+      });
+      addServerHandler({
+        route: "/api/media-library/manage/processing/**",
+        handler: resolver.resolve("./runtime/server/processing-proxy")
+      });
+      const shadowed = appCatchAlls(nuxt.options._layers);
+      if (shadowed.length) {
+        logger.warn(`${shadowed.join(", ")} will not receive /api/media-library/manage requests: the module's own /manage routes answer first. Set mediaLibrary.manageProxy: false to serve /manage from your handler (e.g. createMLCatchAllProxy({ authorize })).`);
+      }
+    }
     if (options.serviceUploads?.proxy) {
       addServerHandler({
         route: `${SERVICE_UPLOADS_ROUTE}/**`,
@@ -140,7 +164,6 @@ const module$1 = defineNuxtModule({
       // grants). Declared so NUXT_MEDIA_LIBRARY_SERVICE_TOKEN applies.
       serviceToken: existingPrivate.serviceToken ?? ""
     };
-    const logger = useLogger("media-library");
     const publicHeaders = browserHeaders(existingPublic.headers ?? options.headers);
     if (publicHeaders.dropped.length) {
       logger.warn(`mediaLibrary.headers: ${publicHeaders.dropped.join(", ")} kept server-side, not sent to browsers.`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nuxt-media-library",
-  "version": "0.0.53",
+  "version": "0.0.55",
   "description": "Nuxt module for media library management — chunked uploads, asset previews, and resource policies",
   "repository": {
     "type": "git",
@@ -41,7 +41,7 @@
     "admin:dev": "yarn dev:prepare && yarn --cwd admin-playground dev",
     "prepack": "nuxt-module-build build",
     "lint": "eslint .",
-    "test": "yarn dev:prepare && nuxi prepare test/fixtures/basic && vitest run"
+    "test": "yarn dev:prepare && nuxi prepare test/fixtures/basic && nuxi prepare test/fixtures/manage-grants && vitest run"
   },
   "peerDependencies": {
     "@nuxt/ui": "^4.0.0",