CMS content is now cached based on a tag rather than time.

src/app/api/cache/revalidate/cms/route.ts

@@ -0,0 +1,12 @@
+import { NextResponse } from 'next/server';
+import { revalidateTag } from 'next/cache';
+import { NEXT_CACHE_TAG_STRAPI } from '@lib/constants/app';
+
+export const POST = () => {
+  revalidateTag(NEXT_CACHE_TAG_STRAPI);
+
+  return NextResponse.json({
+    revalidated: true,
+    date: new Date().toISOString()
+  }, { status: 200 });
+};

src/global.d.ts

@@ -9,6 +9,7 @@ declare global {
       LOCAL_DOWNLOADS_URL?: string
 
       NEXT_REVALIDATE_TIME?: string
+      NEXT_INTERNAL_AUTH_SECRET?: string
 
       STRAPI_API_TOKEN?: string
       NEXT_PUBLIC_STRAPI_URL?: string

src/lib/config/app.ts

@@ -6,6 +6,7 @@ export const NEXT_PUBLIC_DOWNLOADS_URL = process.env.NEXT_PUBLIC_DOWNLOADS_URL!;
 export const LOCAL_DOWNLOADS_URL = process.env.LOCAL_DOWNLOADS_URL!;
 
 export const NEXT_REVALIDATE_TIME = process.env.NEXT_REVALIDATE_TIME ? parseInt(process.env.NEXT_REVALIDATE_TIME, 10) : 3600;
+export const NEXT_INTERNAL_AUTH_SECRET = process.env.NEXT_INTERNAL_AUTH_SECRET!;
 
 export const STRAPI_API_TOKEN = process.env.STRAPI_API_TOKEN!;
 export const NEXT_PUBLIC_STRAPI_URL = process.env.NEXT_PUBLIC_STRAPI_URL!;

src/lib/constants/app.ts

@@ -9,3 +9,5 @@ export const PEPTIDE_ATTRIBUTE_MAX_DECIMALS = 4;
 export const PEPTIDE_SCORE_DECIMALS = 2;
 
 export const DEFAULT_AUTO_RELOAD_INTERVAL_SECONDS = 5;
+
+export const NEXT_CACHE_TAG_STRAPI = 'strapi-cms';

src/lib/next/auth.ts

@@ -0,0 +1,7 @@
+import { NextRequest } from 'next/server';
+import { NEXT_INTERNAL_AUTH_SECRET } from '@lib/config/app';
+
+export const isInternalApiRequestAuthenticated = (req: NextRequest) => {
+  const token = req.headers.get('X-Auth-Secret');
+  return token === NEXT_INTERNAL_AUTH_SECRET;
+};

src/lib/services/strapi/graphql/client.ts

@@ -1,7 +1,8 @@
 import 'server-only';
 import { ApolloClient, ApolloLink, HttpLink, InMemoryCache, NormalizedCacheObject, OperationVariables, QueryOptions } from '@apollo/client';
 import { DeepPartial } from 'utility-types';
-import { NEXT_REVALIDATE_TIME, NEXT_PUBLIC_STRAPI_URL, STRAPI_API_TOKEN } from '@lib/config/app';
+import { NEXT_PUBLIC_STRAPI_URL, STRAPI_API_TOKEN } from '@lib/config/app';
+import { NEXT_CACHE_TAG_STRAPI } from '@lib/constants/app';
 
 const httpLink = new HttpLink({
   uri: `${NEXT_PUBLIC_STRAPI_URL}/graphql`,
@@ -13,7 +14,7 @@ const httpLink = new HttpLink({
         Authorization: `Bearer ${STRAPI_API_TOKEN}`
       },
       next: {
-        revalidate: NEXT_REVALIDATE_TIME
+        tags: [NEXT_CACHE_TAG_STRAPI]
       }
     });
   }

src/middleware.ts

@@ -0,0 +1,22 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { isInternalApiRequestAuthenticated } from '@lib/next/auth';
+
+export const config = {
+  matcher: ['/api/:path*']
+};
+
+const middleware = (req: NextRequest) => {
+  if (!req.nextUrl.pathname.startsWith('/api')) {
+    return NextResponse.next();
+  }
+
+  if (!isInternalApiRequestAuthenticated(req)) {
+    return NextResponse.json({
+      message: 'You are not authenticated.'
+    }, { status: 401 });
+  }
+
+  return NextResponse.next();
+};
+
+export default middleware;