Something went wrong. Try again.
[READ-ONLY] Mirror of https://github.com/openstatusHQ/openstatus. 🫖 Status page with uptime monitoring & API monitoring as code 🫖 openstatus.dev
bun drizzle-orm monitoring monitoring-as-code nextjs observability on-call open-source shadcn-ui status-page statuspage synthetic-monitoring tinybird turso uptime uptime-checker uptime-monitor
Something went wrong. Try again.
1.8 kB · 53 lines
TypeScript
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354import type { Page } from "@openstatus/db/src/schema";import { evaluateMarkdownGate, type MarkdownGateResult,} from "@openstatus/services/page-access";
import { auth } from "../auth";import { createProtectedCookieKey } from "../protected";import type { getQueryClient } from "../trpc/server";import { trpc } from "../trpc/server";
export type GatePage = { accessType: Page["accessType"]; authEmailDomains: string[] | null; allowedIpRanges: string[] | null; slug: string;};
/** * Server-side orchestration around `evaluateMarkdownGate`: resolves the session * (email-domain pages) and password authorization (password pages) before * delegating to the pure decision. Shared by the markdown and status JSON API * routes, both reachable directly via `/api` — bypassing the proxy gate. */export async function resolveGate(args: { page: GatePage; queryClient: ReturnType<typeof getQueryClient>; url: URL; cookieStore: { get(name: string): { value: string } | undefined }; clientIp: string | null | undefined;}): Promise<MarkdownGateResult> { const { page, queryClient, url, cookieStore, clientIp } = args; const session = page.accessType === "email-domain" ? await auth() : null; const passwordAuthorized = page.accessType === "password" ? await queryClient.fetchQuery( trpc.statusPage.isPasswordAuthorized.queryOptions({ slug: page.slug, queryPassword: url.searchParams.get("pw"), cookiePassword: cookieStore.get(createProtectedCookieKey(page.slug)) ?.value, }), ) : false; return evaluateMarkdownGate({ accessType: page.accessType, passwordAuthorized, authEmail: session?.user?.email, authEmailDomains: page.authEmailDomains, clientIp, allowedIpRanges: page.allowedIpRanges, });}