Security News
RubyGems.org Adds New Maintainer Role
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
@sanity/preview-kit
Advanced tools
Sanity.io toolkit for building live-as-you-type content preview experiences. Write GROQ queries like @sanity/client and have them resolve in-memory, locally. Updates from Content Lake are streamed in real-time with sub-second latency.
Requires React 18, support for other libraries like Solid, Svelte, Vue etc are planned. For now you can use @sanity/groq-store directly.
npm i @sanity/preview-kit
yarn add @sanity/preview-kit
You create a usePreview
hook using definePreview
import { definePreview } from '@sanity/preview-kit'
const usePreview = definePreview({ projectId, dataset })
If you want to declare the config in a separate file, and have full typings, you can import PreviewConfig
:
import type { PreviewConfig } from '@sanity/preview-kit'
export const previewConfig: PreviewConfig = {
projectId: process.env.SANITY_PROJECT_ID,
dataset: process.env.SANITY_DATASET,
// The limit on number of documents, to prevent using too much memory unexpectedly
// It's 3000 by default, increase or decrease as needed and use `includeTypes` to further optimize the performance
documentLimit: 10000,
// Optional allow list filter for document types. You can use this to limit the amount of documents by declaring the types you want to sync. Note that since you're fetching a subset of your dataset, queries that works against your Content Lake might not work against the local groq-store.
includeTypes: ['post', 'page', 'product', 'sanity.imageAsset'],
// By default documents that are "draft" are overlayed with their published counterparts.
// This lets you simulate what your app will look like after the drafts are published.
// If your queries are already equipped to handle drafts vs published
// or you otherwise show UI depending on draft status set this to false
overlayDrafts: true,
}
The component that calls usePreview
needs to be wrapped in a Suspense
boundary as it will "suspend" until the @sanity/groq-store
is done loading your dataset and ready to resolve your queries.
If you're hosting Sanity Studio on the same domain as you're doing previews, you may use cookie
based auth:
import createClient from '@sanity/client'
import { definePreview } from '@sanity/preview-kit'
import groq from 'groq'
import { Suspense, useReducer } from 'react'
import { createRoot } from 'react-dom/client'
import useSWR from 'swr/immutable'
const root = createRoot(document.getElementById('root'))
root.render(
<Suspense fallback="Loading...">
<App />
</Suspense>
)
const projectId = process.env.REACT_APP_SANITY_PROJECT_ID
const dataset = process.env.REACT_APP_SANITY_DATASET
const apiVersion = process.env.REACT_APP_SANITY_API_VERSION
const client = createClient({ projectId, dataset, apiVersion, useCdn: true })
const query = groq`count(*[])`
function App() {
const [preview, toggle] = useReducer((state) => !state, false)
const { data } = useSWR(query, (query) => client.fetch(query), {
suspense: true,
})
return (
<>
<button type="button" onClick={toggle}>
{preview ? 'Stop preview' : 'Start preview'}
</button>
{preview ? <PreviewCount /> : <Count data={data} />}
</>
)
}
const Count = ({ data }) => (
<>
Documents: <strong>{data}</strong>
</>
)
const usePreview = definePreview({
projectId,
dataset,
onPublicAccessOnly: () =>
alert('You are not logged in. You will only see public data.'),
})
const PreviewCount = () => {
const data = usePreview(null, query)
return <Count data={data} />
}
If you're not hosting Sanity Studio on the same domain as your previews, or if you need to support browsers that don't work with cookie auth (iOS Safari or browser incognito modes), you may use the token
option to provide a Sanity Viewer token:
import createClient from '@sanity/client'
import { definePreview } from '@sanity/preview-kit'
import groq from 'groq'
import { Suspense, useReducer } from 'react'
import { createRoot } from 'react-dom/client'
import useSWR from 'swr/immutable'
const root = createRoot(document.getElementById('root'))
root.render(
<Suspense fallback="Loading...">
<App />
</Suspense>
)
const projectId = process.env.REACT_APP_SANITY_PROJECT_ID
const dataset = process.env.REACT_APP_SANITY_DATASET
const apiVersion = process.env.REACT_APP_SANITY_API_VERSION
const client = createClient({ projectId, dataset, apiVersion, useCdn: true })
const query = groq`count(*[])`
function App() {
const [preview, toggle] = useReducer((state) => !state, false)
const { data } = useSWR(query, (query) => client.fetch(query), {
suspense: true,
})
return (
<>
<button type="button" onClick={toggle}>
{preview ? 'Stop preview' : 'Start preview'}
</button>
{preview ? <PreviewCount /> : <Count data={data} />}
</>
)
}
const Count = ({ data }) => (
<>
Documents: <strong>{data}</strong>
</>
)
const usePreview = definePreview({ projectId, dataset })
const PreviewCount = () => {
// Call custom authenticated backend to fetch the Sanity Viewer token
const { data: token } = useSWR(
'https://example.com/preview/token',
(url) => fetch(url, { credentials: 'include' }).then((res) => res.text()),
{ suspense: true }
)
const data = usePreview(token, query)
return <Count data={data} />
}
import { json } from '@remix-run/node'
import { useLoaderData } from '@remix-run/react'
import createClient from '@sanity/client'
import type { UsePreview } from '@sanity/preview-kit'
import { definePreview, PreviewSuspense } from '@sanity/preview-kit'
import groq from 'groq'
import { useReducer } from 'react'
const projectId = 'pv8y60vp'
const dataset = 'production'
const query = groq`count(*[])`
export const loader = async () => {
const client = createClient({
projectId,
dataset,
apiVersion: '2022-11-15',
useCdn: true,
})
return json({ data: await client.fetch<number>(query) })
}
export default function CountPage() {
const { data } = useLoaderData<typeof loader>()
const [preview, toggle] = useReducer((state) => !state, false)
return (
<>
<button type="button" onClick={toggle}>
{preview ? 'Stop preview' : 'Start preview'}
</button>
{preview ? (
<PreviewSuspense fallback={<Count data={data} />}>
<PreviewCount />
</PreviewSuspense>
) : (
<Count data={data} />
)}
</>
)
}
const Count = ({ data }: { data: number }) => (
<>
Documents: <strong>{data}</strong>
</>
)
const usePreview: UsePreview<number> = definePreview({
projectId,
dataset,
onPublicAccessOnly: () =>
alert('You are not logged in. You will only see public data.'),
})
const PreviewCount = () => {
const data = usePreview(null, query)
return <Count data={data!} />
}
/pages
Preview Mode, cookie auth onlyFor NextJS with appDir
, see the next-sanity docs.
// pages/index.js
import { PreviewSuspense } from '@sanity/preview-kit'
import createClient from '@sanity/client'
import DataTable from 'components/DataTable'
import { lazy } from 'react'
const PreviewDataTable = lazy(() => import('components/PreviewDataTable'))
const projectId = process.env.NEXT_PUBLIC_SANITY_PROJECT_ID
const dataset = process.env.NEXT_PUBLIC_SANITY_DATASET
const apiVersion = process.env.NEXT_PUBLIC_SANITY_API_VERSION
const client = createClient({
projectId,
dataset,
apiVersion,
useCdn: false,
})
export const getStaticProps = async ({ preview = false }) => {
if (preview) {
return { props: { preview } }
}
const data = await client.fetch(`*[]`)
return { props: { preview, data } }
}
export default function IndexPage({ preview, data }) {
if (preview) {
return (
<PreviewSuspense fallback="Loading...">
<PreviewDataTable />
</PreviewSuspense>
)
}
return <DataTable data={data} />
}
// components/PreviewDataTable.js
import { definePreview } from '@sanity/preview-kit'
const projectId = process.env.NEXT_PUBLIC_SANITY_PROJECT_ID
const dataset = process.env.NEXT_PUBLIC_SANITY_DATASET
const usePreview = definePreview({ projectId, dataset })
export default function PreviewDataTable() {
const data = usePreview(null, `*[]`)
return <DataTable data={data} />
}
/pages
Preview Mode, with a viewer tokenThis example have the added benefit that it works in non-chromium browsers like Safari. And without needing a Sanity authenticated session to exist on the origin.
This also means you need to protect your pages/api/preview
handler with a secret, since the token
can be used to query any data in your dataset. Only share preview links with people that you're ok with being able to see everything in your dataset.
// pages/index.js
import { PreviewSuspense } from '@sanity/preview-kit'
import createClient from '@sanity/client'
import DataTable from 'components/DataTable'
import { lazy } from 'react'
const PreviewDataTable = lazy(() => import('components/PreviewDataTable'))
const projectId = process.env.NEXT_PUBLIC_SANITY_PROJECT_ID
const dataset = process.env.NEXT_PUBLIC_SANITY_DATASET
const apiVersion = process.env.NEXT_PUBLIC_SANITY_API_VERSION
const client = createClient({
projectId,
dataset,
apiVersion,
useCdn: false,
})
export const getStaticProps = async ({ preview = false, previewData = {} }) => {
if (preview) {
return { props: { preview, token: previewData.token } }
}
const data = await client.fetch(`*[]`)
return { props: { preview, data } }
}
export default function IndexPage({ preview, data, token }) {
if (preview) {
return (
<PreviewSuspense fallback="Loading...">
<PreviewDataTable token={token} />
</PreviewSuspense>
)
}
return <DataTable data={data} />
}
// components/PreviewDataTable.js
import { definePreview } from '@sanity/preview-kit'
const projectId = process.env.NEXT_PUBLIC_SANITY_PROJECT_ID
const dataset = process.env.NEXT_PUBLIC_SANITY_DATASET
const usePreview = definePreview({ projectId, dataset })
export default function PreviewDataTable({ token }) {
const data = usePreview(token, `*[]`)
return <DataTable data={data} />
}
// pages/api/preview.js
export default function preview(req, res) {
const secret = process.env.PREVIEW_SECRET
// Check the secret if it's provided, enables running preview mode locally before the env var is setup
if (secret && req.query.secret !== secret) {
return res.status(401).json({ message: 'Invalid secret' })
}
// This token should only have `viewer` access rights in https://manage.sanity.io
const token = process.env.SANITY_API_READ_TOKEN
if (!token) {
throw new TypeError(`Missing SANITY_API_READ_TOKEN`)
}
res.setPreviewData({ token })
res.writeHead(307, { Location: '/' })
res.end()
}
/pages
Preview Mode, with fast SSR hydrationThis example extends the preview token
version to use fast SSR hydration.
The way it works is by providing the data use for Server Side Rendering (SSR) as the 4th argument to usePreview
. This will cause usePreview
to no longer suspend while it does the initial dataset export, instead it'll return your provided snapshot until it's ready to run GROQ in-memory.
// pages/index.js
import { PreviewSuspense } from '@sanity/preview-kit'
import createClient from '@sanity/client'
import DataTable from 'components/DataTable'
import { lazy } from 'react'
const PreviewDataTable = lazy(() => import('components/PreviewDataTable'))
const projectId = process.env.NEXT_PUBLIC_SANITY_PROJECT_ID
const dataset = process.env.NEXT_PUBLIC_SANITY_DATASET
const apiVersion = process.env.NEXT_PUBLIC_SANITY_API_VERSION
const client = createClient({
projectId,
dataset,
apiVersion,
useCdn: false,
})
export const getStaticProps = async ({ preview = false, previewData = {} }) => {
if (preview) {
const previewClient = client.withConfig({ token: previewData.token })
// Query altered to include drafts, and all documents that don't have a draft
const data = await client.fetch(`*[!(_id in path("drafts.**"))]`)
return { props: { preview, token: previewData.token } }
}
const data = await client.fetch(`*[]`)
return { props: { preview, data } }
}
export default function IndexPage({ preview, data, token }) {
if (preview) {
// We render DataTable with the preview data, and PreviewDataTable will stream updates that might happen after the initial SSR hydration and the client takes over rendering
return (
<PreviewSuspense fallback={<DataTable data={data} />}>
<PreviewDataTable token={token} />
</PreviewSuspense>
)
}
return <DataTable data={data} />
}
// components/PreviewDataTable.js
import { definePreview } from '@sanity/preview-kit'
const projectId = process.env.NEXT_PUBLIC_SANITY_PROJECT_ID
const dataset = process.env.NEXT_PUBLIC_SANITY_DATASET
// We turn off `overlayDrafts` since the GROQ queries that run in preview mode is updated to overlay drafts instead, this lets us
// reuse the same query during preview mode, with @sanity/client when rendering
// preview data on the server, with `@sanity/groq-store` taking over in the browser
const usePreview = definePreview({ projectId, dataset, overlayDrafts: false })
export default function PreviewDataTable({ token }) {
// Query altered to include drafts, and all documents that don't have a draft
const data = usePreview(token, `*[!(_id in path("drafts.**"))]`)
return <DataTable data={data} />
}
If you have access to the test studio and our Vercel Team, then:
npx vercel link && npx vercel env pull
npm run dev
which gives you the test Next app running on http://localhost:3000
.If you don't have access then you need to:
.env.local
(use .env.local.example
to get started).src/App.tsx
to update projectId
and dataset
.npm run dev
and test things on http://localhost:3000
.Run "CI & Release" workflow. Make sure to select the main branch and check "Release new version".
Semantic release will only release on configured branches, so it is safe to run release on any branch.
MIT-licensed. See LICENSE.
FAQs
General purpose utils for live content and visual editing
The npm package @sanity/preview-kit receives a total of 65,102 weekly downloads. As such, @sanity/preview-kit popularity was classified as popular.
We found that @sanity/preview-kit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 63 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.
Security News
Research
Socket's threat research team has detected five malicious npm packages targeting Roblox developers, deploying malware to steal credentials and personal data.