Security News
vlt Debuts New JavaScript Package Manager and Serverless Registry at NodeConf EU
vlt introduced its new package manager and a serverless registry this week, innovating in a space where npm has stagnated.
@sanity/preview-kit
Advanced tools
Sanity.io toolkit for building live-as-you-type content preview experiences. Write GROQ queries like @sanity/client and have them resolve in-memory, locally. Updates from Content Lake are streamed in real-time with sub-second latency.
Requires React 18, support for other libraries like Solid, Svelte, Vue etc are planned. For now you can use @sanity/groq-store directly.
npm i @sanity/preview-kit
yarn add @sanity/preview-kit
You create a usePreview
hook using definePreview
import { definePreview } from '@sanity/preview-kit'
const usePreview = definePreview({ projectId, dataset })
If you want to declare the config in a separate file, and have full typings, you can import PreviewConfig
:
import type { PreviewConfig } from '@sanity/preview-kit'
export const previewConfig: PreviewConfig = {
projectId: process.env.SANITY_PROJECT_ID,
dataset: process.env.SANITY_DATASET,
// The limit on number of documents, to prevent using too much memory unexpectedly
// It's 3000 by default, increase or decrease as needed and use `includeTypes` to further optimize the performance
documentLimit: 10000,
// Optional allow list filter for document types. You can use this to limit the amount of documents by declaring the types you want to sync. Note that since you're fetching a subset of your dataset, queries that works against your Content Lake might not work against the local groq-store.
includeTypes: ['post', 'page', 'product', 'sanity.imageAsset'],
// By default documents that are "draft" are overlayed with their published counterparts.
// This lets you simulate what your app will look like after the drafts are published.
// If your queries are already equipped to handle drafts vs published
// or you otherwise show UI depending on draft status set this to false
overlayDrafts: true,
}
The component that calls usePreview
needs to be wrapped in a Suspense
boundary as it will "suspend" until the @sanity/groq-store
is done loading your dataset and ready to resolve your queries.
If you're hosting Sanity Studio on the same domain as you're doing previews, you may use cookie
based auth:
import createClient from '@sanity/client'
import { definePreview } from '@sanity/preview-kit'
import groq from 'groq'
import { Suspense, useReducer } from 'react'
import { createRoot } from 'react-dom/client'
import useSWR from 'swr/immutable'
const root = createRoot(document.getElementById('root'))
root.render(
<Suspense fallback="Loading...">
<App />
</Suspense>
)
const projectId = process.env.REACT_APP_SANITY_PROJECT_ID
const dataset = process.env.REACT_APP_SANITY_DATASET
const apiVersion = process.env.REACT_APP_SANITY_API_VERSION
const client = createClient({ projectId, dataset, apiVersion, useCdn: true })
const query = groq`count(*[])`
function App() {
const [preview, toggle] = useReducer((state) => !state, false)
const { data } = useSWR(query, (query) => client.fetch(query), {
suspense: true,
})
return (
<>
<button type="button" onClick={toggle}>
{preview ? 'Stop preview' : 'Start preview'}
</button>
{preview ? <PreviewCount /> : <Count data={data} />}
</>
)
}
const Count = ({ data }) => (
<>
Documents: <strong>{data}</strong>
</>
)
const usePreview = definePreview({
projectId,
dataset,
onPublicAccessOnly: () =>
alert('You are not logged in. You will only see public data.'),
})
const PreviewCount = () => {
const data = usePreview(null, query)
return <Count data={data} />
}
If you're not hosting Sanity Studio on the same domain as your previews, or if you need to support browsers that don't work with cookie auth (iOS Safari or browser incognito modes), you may use the token
option to provide a Sanity Viewer token:
import createClient from '@sanity/client'
import { definePreview } from '@sanity/preview-kit'
import groq from 'groq'
import { Suspense, useReducer } from 'react'
import { createRoot } from 'react-dom/client'
import useSWR from 'swr/immutable'
const root = createRoot(document.getElementById('root'))
root.render(
<Suspense fallback="Loading...">
<App />
</Suspense>
)
const projectId = process.env.REACT_APP_SANITY_PROJECT_ID
const dataset = process.env.REACT_APP_SANITY_DATASET
const apiVersion = process.env.REACT_APP_SANITY_API_VERSION
const client = createClient({ projectId, dataset, apiVersion, useCdn: true })
const query = groq`count(*[])`
function App() {
const [preview, toggle] = useReducer((state) => !state, false)
const { data } = useSWR(query, (query) => client.fetch(query), {
suspense: true,
})
return (
<>
<button type="button" onClick={toggle}>
{preview ? 'Stop preview' : 'Start preview'}
</button>
{preview ? <PreviewCount /> : <Count data={data} />}
</>
)
}
const Count = ({ data }) => (
<>
Documents: <strong>{data}</strong>
</>
)
const usePreview = definePreview({ projectId, dataset })
const PreviewCount = () => {
// Call custom authenticated backend to fetch the Sanity Viewer token
const { data: token } = useSWR(
'https://example.com/preview/token',
(url) => fetch(url, { credentials: 'include' }).then((res) => res.text()),
{ suspense: true }
)
const data = usePreview(token, query)
return <Count data={data} />
}
import { json } from '@remix-run/node'
import { useLoaderData } from '@remix-run/react'
import createClient from '@sanity/client'
import type { UsePreview } from '@sanity/preview-kit'
import { definePreview, PreviewSuspense } from '@sanity/preview-kit'
import groq from 'groq'
import { useReducer } from 'react'
const projectId = 'pv8y60vp'
const dataset = 'production'
const query = groq`count(*[])`
export const loader = async () => {
const client = createClient({
projectId,
dataset,
apiVersion: '2022-11-15',
useCdn: true,
})
return json({ data: await client.fetch<number>(query) })
}
export default function CountPage() {
const { data } = useLoaderData<typeof loader>()
const [preview, toggle] = useReducer((state) => !state, false)
return (
<>
<button type="button" onClick={toggle}>
{preview ? 'Stop preview' : 'Start preview'}
</button>
{preview ? (
<PreviewSuspense fallback={<Count data={data} />}>
<PreviewCount />
</PreviewSuspense>
) : (
<Count data={data} />
)}
</>
)
}
const Count = ({ data }: { data: number }) => (
<>
Documents: <strong>{data}</strong>
</>
)
const usePreview: UsePreview<number> = definePreview({
projectId,
dataset,
onPublicAccessOnly: () =>
alert('You are not logged in. You will only see public data.'),
})
const PreviewCount = () => {
const data = usePreview(null, query)
return <Count data={data!} />
}
// pages/index.js
import { PreviewSuspense } from '@sanity/preview-kit'
import sanityClient from '@sanity/client'
import DataTable from 'components/DataTable'
import { lazy } from 'react'
const PreviewDataTable = lazy(() => import('components/PreviewDataTable'))
const projectId = process.env.NEXT_PUBLIC_SANITY_PROJECT_ID
const dataset = process.env.NEXT_PUBLIC_SANITY_DATASET
const apiVersion = process.env.NEXT_PUBLIC_SANITY_API_VERSION
export const getStaticProps = async ({ preview = false }) => {
if (preview) {
return { props: { preview } }
}
const client = sanityClient({
projectId,
dataset,
apiVersion,
useCdn: false,
})
const data = await client.fetch(`*[]`)
return { props: { preview, data } }
}
export default function IndexPage({ preview, data }) {
if (preview) {
return (
<PreviewSuspense fallback="Loading...">
<PreviewDataTable />
</PreviewSuspense>
)
}
return <DataTable data={data} />
}
// components/PreviewDataTable.js
import { definePreview } from '@sanity/preview-kit'
const projectId = process.env.NEXT_PUBLIC_SANITY_PROJECT_ID
const dataset = process.env.NEXT_PUBLIC_SANITY_DATASET
const usePreview = definePreview({ projectId, dataset })
export default function PreviewDataTable() {
const data = usePreview(null, `*[]`)
return <DataTable data={data} />
}
This example have the added benefit that it works in non-chromium browsers like Safari. And without needing a Sanity authenticated session to exist on the origin.
This also means you need to protect your pages/api/preview
handler with a secret, since the token
can be used to query any data in your dataset. Only share preview links with people that you're ok with being able to see everything in your dataset.
// pages/index.js
import { PreviewSuspense } from '@sanity/preview-kit'
import sanityClient from '@sanity/client'
import DataTable from 'components/DataTable'
import { lazy } from 'react'
const PreviewDataTable = lazy(() => import('components/PreviewDataTable'))
const projectId = process.env.NEXT_PUBLIC_SANITY_PROJECT_ID
const dataset = process.env.NEXT_PUBLIC_SANITY_DATASET
const apiVersion = process.env.NEXT_PUBLIC_SANITY_API_VERSION
export const getStaticProps = async ({ preview = false, previewData = {} }) => {
if (preview) {
return { props: { preview, token: previewData.token } }
}
const client = sanityClient({
projectId,
dataset,
apiVersion,
useCdn: false,
})
const data = await client.fetch(`*[]`)
return { props: { preview, data } }
}
export default function IndexPage({ preview, data, token }) {
if (preview) {
return (
<PreviewSuspense fallback="Loading...">
<PreviewDataTable token={token} />
</PreviewSuspense>
)
}
return <DataTable data={data} />
}
// components/PreviewDataTable.js
import { definePreview } from '@sanity/preview-kit'
const projectId = process.env.NEXT_PUBLIC_SANITY_PROJECT_ID
const dataset = process.env.NEXT_PUBLIC_SANITY_DATASET
const usePreview = definePreview({ projectId, dataset })
export default function PreviewDataTable({ token }) {
const data = usePreview(token, `*[]`)
return <DataTable data={data} />
}
// pages/api/preview.js
export default function preview(req, res) {
const secret = process.env.PREVIEW_SECRET
// Check the secret if it's provided, enables running preview mode locally before the env var is setup
if (secret && req.query.secret !== secret) {
return res.status(401).json({ message: 'Invalid secret' })
}
// This token should only have `viewer` access rights in https://manage.sanity.io
const token = process.env.SANITY_API_READ_TOKEN
if (!token) {
throw new TypeError(`Missing SANITY_API_READ_TOKEN`)
}
res.setPreviewData({ token })
res.writeHead(307, { Location: '/' })
res.end()
}
If you have access to the test studio and our Vercel Team, then:
npx vercel link && npx vercel env pull
npm run dev
which gives you the test Next app running on http://localhost:3000
.If you don't have access then you need to:
.env.local
(use .env.local.example
to get started).src/App.tsx
to update projectId
and dataset
.npm run dev
and test things on http://localhost:3000
.Run "CI & Release" workflow. Make sure to select the main branch and check "Release new version".
Semantic release will only release on configured branches, so it is safe to run release on any branch.
MIT-licensed. See LICENSE.
FAQs
General purpose utils for live content and visual editing
The npm package @sanity/preview-kit receives a total of 65,102 weekly downloads. As such, @sanity/preview-kit popularity was classified as popular.
We found that @sanity/preview-kit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 63 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt introduced its new package manager and a serverless registry this week, innovating in a space where npm has stagnated.
Security News
Research
The Socket Research Team uncovered a malicious Python package typosquatting the popular 'fabric' SSH library, silently exfiltrating AWS credentials from unsuspecting developers.
Security News
At its inaugural meeting, the JSR Working Group outlined plans for an open governance model and a roadmap to enhance JavaScript package management.