mirror of
https://github.com/TryGhost/Ghost.git
synced 2024-12-22 18:31:57 +03:00
f770e9f2ad
no issue - Member gating on post/page content is done using member context on request's frame - Custom static page route was incorrectly setting the member context as `members` instead of `member`, which caused logged-in members to still not able to see content while logged in as a member - Fix corrects the member context for these routes to use `member` as expected
72 lines
2.5 KiB
JavaScript
72 lines
2.5 KiB
JavaScript
const _ = require('lodash');
|
|
const Promise = require('bluebird');
|
|
const debug = require('ghost-ignition').debug('services:routing:controllers:static');
|
|
const helpers = require('../helpers');
|
|
|
|
function processQuery(query, locals) {
|
|
const api = require('../../../../server/api')[locals.apiVersion];
|
|
query = _.cloneDeep(query);
|
|
|
|
// CASE: If you define a single data key for a static route (e.g. data: page.team), this static route will represent
|
|
// the target resource. That means this static route has to behave the same way than the original resource url.
|
|
// e.g. the meta data package needs access to the full resource including relations.
|
|
// We override the `include` property for now, because the full data set is required anyway.
|
|
if (_.get(query, 'resource') === 'posts' || _.get(query, 'resource') === 'pages') {
|
|
_.extend(query.options, {
|
|
include: 'authors,tags'
|
|
});
|
|
}
|
|
|
|
Object.assign(query.options, {
|
|
context: {
|
|
member: locals.member
|
|
}
|
|
});
|
|
|
|
return api[query.controller][query.type](query.options);
|
|
}
|
|
|
|
/**
|
|
* @description Static route controller.
|
|
* @param {Object} req
|
|
* @param {Object} res
|
|
* @param {Function} next
|
|
* @returns {Promise}
|
|
*/
|
|
module.exports = function staticController(req, res, next) {
|
|
debug('staticController', res.routerOptions);
|
|
|
|
let props = {};
|
|
|
|
_.each(res.routerOptions.data, function (query, name) {
|
|
props[name] = processQuery(query, res.locals);
|
|
});
|
|
|
|
return Promise.props(props)
|
|
.then(function handleResult(result) {
|
|
let response = {};
|
|
|
|
if (res.routerOptions.data) {
|
|
response.data = {};
|
|
|
|
_.each(res.routerOptions.data, function (config, name) {
|
|
response.data[name] = result[name][config.resource];
|
|
|
|
if (config.type === 'browse') {
|
|
response.data[name].meta = result[name].meta;
|
|
// @TODO: remove in Ghost 3.0 (see https://github.com/TryGhost/Ghost/issues/10434)
|
|
response.data[name][config.resource] = result[name][config.resource];
|
|
}
|
|
});
|
|
}
|
|
|
|
// @TODO: See helpers/secure for more context.
|
|
_.each(response.data, function (data) {
|
|
helpers.secure(req, data);
|
|
});
|
|
|
|
helpers.renderer(req, res, helpers.formatResponse.entries(response));
|
|
})
|
|
.catch(helpers.handleError(next));
|
|
};
|