studiocms
Version:
Astro Native CMS for AstroDB. Built from the ground up by the Astro community.
68 lines (55 loc) • 1.93 kB
text/typescript
import { apiResponseLogger } from 'studiocms:logger';
import { SDKCore } from 'studiocms:sdk';
import {
AllResponse,
createEffectAPIRoutes,
createJsonResponse,
Effect,
genLogger,
OptionsResponse,
} from '../../../../../../../effect.js';
import { verifyAuthTokenFromHeader } from '../../../../utils/auth-token.js';
export const { GET, OPTIONS, ALL } = createEffectAPIRoutes(
{
GET: (ctx) =>
genLogger('studioCMS:rest:v1:public:pages:[id]:history:GET')(function* () {
const [sdk, user] = yield* Effect.all([SDKCore, verifyAuthTokenFromHeader(ctx)]);
if (user instanceof Response) {
return user;
}
const { rank } = user;
if (rank !== 'owner' && rank !== 'admin' && rank !== 'editor') {
return apiResponseLogger(401, 'Unauthorized');
}
const { id } = ctx.params;
if (!id) {
return apiResponseLogger(400, 'Invalid page ID');
}
const page = yield* sdk.GET.page.byId(id);
if (!page) {
return apiResponseLogger(404, 'Page not found');
}
const searchParams = ctx.url.searchParams;
const limitParam = searchParams.get('limit');
const parsedLimit = limitParam ? Number.parseInt(limitParam, 10) : undefined;
const limit =
typeof parsedLimit === 'number' && Number.isFinite(parsedLimit) && parsedLimit > 0
? Math.min(parsedLimit, 100) // clamp to protect backend
: undefined;
const diffs =
limit !== undefined
? yield* sdk.diffTracking.get.byPageId.latest(id, limit)
: yield* sdk.diffTracking.get.byPageId.all(id);
return createJsonResponse(diffs);
}),
OPTIONS: () => Effect.try(() => OptionsResponse({ allowedMethods: ['GET'] })),
ALL: () => Effect.try(() => AllResponse()),
},
{
cors: { methods: ['GET', 'OPTIONS'] },
onError: (error) => {
console.error('API Error:', error);
return createJsonResponse({ error: 'Internal Server Error' }, { status: 500 });
},
}
);