Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
@bloomreach/spa-sdk
Advanced tools
Bloomreach SPA SDK provides simplified headless integration with Bloomreach Experience Manager for JavaScript-based applications. This library interacts with the Page Model API and exposes a simplified and framework-agnostic interface over the page model.
Bloomreach Experience Manager (brXM) is an open and flexible CMS designed for developers and marketers. As the original headless CMS, brXM allows developers to build quickly and integrate with the systems. While it’s built for speed, it also provides top-notch personalization and channel management capabilities for marketers to drive results.
To get the SDK into your project with NPM:
npm install @bloomreach/spa-sdk
And with Yarn:
yarn add @bloomreach/spa-sdk
The following code snippet requests a related page model and shows the page's title.
import axios from 'axios';
import { initialize } from '@bloomreach/spa-sdk';
async function showPage(path) {
const page = await initialize({
httpClient: axios,
options: {
live: {
cmsBaseUrl: 'http://localhost:8080/site',
spaBaseUrl: '',
},
preview: {
cmsBaseUrl: 'http://localhost:8080/site/_cmsinternal',
spaBaseUrl: '/site/_cmsinternal?bloomreach-preview=true',
},
},
request: { path },
});
document.querySelector('#title').innerText = page.getTitle();
}
showPage(`${window.location.pathname}${window.location.search}`);
The initialize
function supports several options you may use to customize page initialization.
Option | Required | Default | Description |
---|---|---|---|
httpClient | yes | none | The HTTP client that will be used to fetch the page model. Signature is similar to Axios client. |
options | yes | none | The CMS URL options. |
options.live | yes | none | The CMS URL options for the live site. |
options.live.apiBaseUrl | no | options.live.cmsBaseUrl + "/resourceapi" | Base URL of the Page Model API for the live site (e.g. http://localhost:8080/site/resourceapi or http://localhost:8080/site/channel/resourceapi ). |
options.live.cmsBaseUrl | yes | none | Base URL of the live site (e.g. http://localhost:8080/site or http://localhost:8080/site/channel ). |
options.live.spaBaseUrl | no | "" | Base URL of the live SPA (e.g. /account or //www.example.com ). |
options.preview | yes | none | The CMS URL options for the preview site. |
options.preview.apiBaseUrl | no | options.preview.cmsBaseUrl + "/resourceapi" | Base URL of the Page Model API for the preview site (e.g. http://localhost:8080/site/_cmsinternal/resourceapi or http://localhost:8080/site/_cmsinternal/channel/resourceapi ). |
options.preview.cmsBaseUrl | yes | none | Base URL of the live site (e.g. http://localhost:8080/site/_cmsinternal or http://localhost:8080/site/_cmsinternal/channel ). |
options.preview.spaBaseUrl | no | "" | Base URL of the live SPA (e.g. /site/_cmsinternal?bloomreach-preview=true or /site/_cmsinternal/channel?bloomreach-preview=true ). This path and query string parameters will be used to detect whether it is a preview mode or not. |
request | yes | none | Current user's request. |
request.path | yes | none | The path part of the URL, including a query string if present (e.g. /path/to/page?foo=1 ). |
request.headers | no | {} | An object holding request headers. It should contain a Cookie header if rendering is happening on the server-side. |
visitor | no | none | An object holding information about the current visitor. |
visitor.id | yes | none | The current visitor identifier. |
visitor.header | yes | none | An HTTP-header using to pass the visitor identifier to the Page Model API. |
window | no | window | A window object reference will be used to interact with brXM. It needs to be set when initialize is being called within an iframe or worker process. |
The complete API reference can be found here.
Function | Description |
---|---|
initialize(config, model?): Promise<Page> | This function accepts a configuration object as an argument and returns a promisified JavaScript object representing the page model. In case, when the page model has already been fetched, you can pass this JSON blob as a second parameter. |
destroy(page: Page): void | Destroys the integration with the SPA page object. |
isPage(value): boolean | Checks whether a value is a page. |
isComponent(value): boolean | Checks whether a value is a page component. |
isContainer(value): boolean | Checks whether a value is a page container. |
isContainerItem(value): boolean | Checks whether a value is a page container item. |
isMeta(value): boolean | Checks whether a value is a meta-data object. |
isMetaComment(value): boolean | Checks whether a value is a meta-data comment. |
isLink(value): boolean | Checks whether a value is a link. |
isReference(value): boolean | Checks whether a value is a content reference. |
Constant | Description |
---|---|
META_POSITION_BEGIN | Meta-data following before a page component. |
META_POSITION_END | Meta-data following after a page component. |
TYPE_CONTAINER_BOX | A blocked container with blocked items. |
TYPE_CONTAINER_INLINE | A blocked container with inline items. |
TYPE_CONTAINER_NO_MARKUP | A container without surrounding markup. |
TYPE_CONTAINER_ORDERED_LIST | An ordered list container. |
TYPE_CONTAINER_UNORDERED_LIST | An unordered list container. |
TYPE_LINK_EXTERNAL | Link to a page outside the current application. |
TYPE_LINK_INTERNAL | Link to a page inside the current application. |
TYPE_LINK_RESOURCE | Link to a CMS resource. |
The Page
class represents the brXM page to render. This is the main entry point to the page model.
Method | Description |
---|---|
getComponent(...componentNames): Component | undefined | Gets a component in the page (e.g. getComponent('main', 'right') ). If componentNames is omitted, then the page root component will be returned. |
getContent(reference: Reference | string): Content | undefined | Gets a content item used on the page. |
getMeta(meta): Meta[] | Generates a meta-data from the provided meta model. |
getTitle(): string | undefined | Gets the title of the page, or undefined if not configured. |
getUrl(link?: Link): string | Generates a URL for a link object. - If the link object type is internal, then it will prepend spaBaseUrl . In case when the link starts with the same path as in cmsBaseUrl , this part will be removed.- If the link parameter is omitted, then the link to the current page will be returned. - In other cases, the link will be returned as-is. |
getUrl(path: string): string | Generates an SPA URL for the path. - If it is a relative path, then it will prepend spaBaseUrl .- If it is an absolute path, then the behavior will be similar to internal link generation. |
getVisitor(): Visitor | undefined | Gets the current visitor information, or undefined if the Relevance Module is not enabled. The Visitor object consists of the following properties:- id: string - the current visitor identifier;- header: string - an HTTP-header using to pass the visitor identifier to the Page Model API. |
getVisit(): Visit | undefined | Gets the current visit information, or undefined if the Relevance Module is not enabled. The Visit object consists of the following properties:- id: string - the current visit identifier;- new: boolean - a flag showing that this is a new visit. |
isPreview(): boolean | Returns whether the page is in the preview mode. |
rewriteLinks(content: string, type?: string): string | Rewrite links to pages and resources in the HTML content. This method looks up for a tags with data-type and href attributes and img tags with src attribute. Links will be updated according to the configuration used to initialize the page. The type parameter is similar to mimeType parameter of the DOMParser. |
sync(): void | Synchronizes the brXM integration state (UI elements positions). |
toJSON(): object | A plain JavaScript object of the page model. |
The Component
class corresponds to page nodes, and it may hold other components inside.
Method | Description |
---|---|
getId(): string | Returns the component id. |
getMeta(): Meta[] | Returns the component meta-data collection. |
getModels(): object | Returns the map of the component models. |
getUrl(): string | undefined | Returns the link to the partial component model. |
getName(): string | Returns the name of the component. |
getParameters(): object | Returns the parameters of the component. |
getChildren(): Component[] | Returns the direct children of the component. |
getComponent(...componentNames: string[]): Component | undefined | Looks up for a nested component. |
getComponentById(id: string): Component | undefined | Looks up for a nested component by its id. |
The Container
class represents a page node that is actually present in the DOM but as an element surrounding its children. Container extends the Component class, and therefore, all the Component methods are applicable here.
Method | Description |
---|---|
getType(): string | undefined | Returns the type of a container. |
The ContainerItem
objects are usually visible on the page and interact with the user. Container Item extends the Component class, and therefore, all the Component methods are applicable here.
Method | Description |
---|---|
getType(): string | undefined | Returns the type of a container item. The available types depend on which container items have been configured in the backend (e.g. "Banner"). |
isHidden(): boolean | Returns whether the component should not render anything. Hiding components is only possible with the Relevance feature. |
on(eventName: string, listener: Function): Function | Subscribes for an event and returns the unsubscribe function. |
off(eventName: string, listener: Function): void | Unsubscribes from an event. |
The Content
object holds document data that is used by the page components.
Method | Description |
---|---|
getId(): string | Returns the content id. |
getLocale(): string | undefined | Returns the content locale. |
getMeta(): Meta[] | Returns the content meta-data collection. |
getName(): string | Returns the content name. |
getData(): object | Returns the content data as it is returned in the Page Model API. |
getUrl(): string | undefined | Returns the link to the content. |
The Meta
objects are being used by the brXM to page and its components.
Method | Description |
---|---|
getData(): string | Returns the meta-data. |
getPosition(): string | Returns the meta-data position relative to the related element. |
Published under Apache 2.0 license.
FAQs
Bloomreach SPA SDK
The npm package @bloomreach/spa-sdk receives a total of 8,725 weekly downloads. As such, @bloomreach/spa-sdk popularity was classified as popular.
We found that @bloomreach/spa-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.