@@ -1224,7 +1251,7 @@ function CourseRecords() {
customization={customizationProps}
courseInfo={courseInfo}
collegeParam={collegeParam}
- isAuthenticated={isAuthenticated}
+ canBypassVisibility={canBypassResourceVisibility}
isGrouped
/>
@@ -1251,7 +1278,7 @@ function CourseRecords() {
customization={customizationProps}
courseInfo={courseInfo}
collegeParam={collegeParam}
- isAuthenticated={isAuthenticated}
+ canBypassVisibility={canBypassResourceVisibility}
/>
@@ -1285,7 +1312,7 @@ function CourseRecords() {
customization={customizationProps}
courseInfo={courseInfo}
collegeParam={collegeParam}
- isAuthenticated={isAuthenticated}
+ canBypassVisibility={canBypassResourceVisibility}
/>
))
)}
@@ -1315,7 +1342,7 @@ function CourseRecords() {
customization={customizationProps}
courseInfo={courseInfo}
collegeParam={collegeParam}
- isAuthenticated={isAuthenticated}
+ canBypassVisibility={canBypassResourceVisibility}
/>
))
)}
@@ -1334,6 +1361,7 @@ function CourseRecords() {
collegeParam={collegeParam}
viewMode={viewMode}
records={records} // Pass all records for split view
+ canBypassVisibility={canBypassResourceVisibility}
/>
)
)}
diff --git a/src/util/resourceVisibility.js b/src/util/resourceVisibility.js
index 0f2e334..cb87c49 100644
--- a/src/util/resourceVisibility.js
+++ b/src/util/resourceVisibility.js
@@ -2,16 +2,39 @@
* Utility functions for handling resource visibility logic
*/
+const DATE_ONLY_PATTERN = /^\d{4}-\d{2}-\d{2}$/;
+
+/**
+ * Parse a visibility boundary without converting date-only values to UTC.
+ * Timestamp values keep their exact time and timezone semantics.
+ *
+ * @param {string|Date|null} value - Visibility boundary value
+ * @param {'start'|'end'} boundary - Boundary side to parse
+ * @returns {Date|null} Parsed boundary, or null when absent/invalid
+ */
+export const parseVisibilityDate = (value, boundary = 'start') => {
+ if (!value) return null;
+
+ const date = value instanceof Date
+ ? new Date(value.getTime())
+ : new Date(
+ DATE_ONLY_PATTERN.test(value)
+ ? `${value}T${boundary === 'end' ? '23:59:59.999' : '00:00:00.000'}`
+ : value
+ );
+
+ return Number.isNaN(date.getTime()) ? null : date;
+};
+
/**
* Check if a primary resource link is visible based on visibility settings
*
* @param {Object} resource - The resource object containing visibility settings
- * @param {boolean} isAuthenticated - Whether the user is authenticated
+ * @param {boolean} canBypassVisibility - Whether visibility restrictions can be bypassed
* @returns {boolean} Whether the primary link should be visible
*/
-export const isPrimaryLinkVisible = (resource, isAuthenticated) => {
- // Authenticated users see all links
- if (isAuthenticated) return true;
+export const isPrimaryLinkVisible = (resource, canBypassVisibility) => {
+ if (canBypassVisibility) return true;
// If no resource, no link is visible
if (!resource) return false;
@@ -25,12 +48,8 @@ export const isPrimaryLinkVisible = (resource, isAuthenticated) => {
if (usePrimaryLinkVisibility) {
// Use primary link visibility dates
- const startVisibility = resource.primary_link_start_visibility
- ? new Date(resource.primary_link_start_visibility)
- : null;
- const endVisibility = resource.primary_link_end_visibility
- ? new Date(resource.primary_link_end_visibility)
- : null;
+ const startVisibility = parseVisibilityDate(resource.primary_link_start_visibility);
+ const endVisibility = parseVisibilityDate(resource.primary_link_end_visibility, 'end');
// If current time is before the start of the primary link visibility window
if (startVisibility && now < startVisibility) {
@@ -49,12 +68,8 @@ export const isPrimaryLinkVisible = (resource, isAuthenticated) => {
// Only apply resource-level visibility dates if resource visibility is enabled
if (useResourceVisibility) {
- const startVisibility = resource.start_visibility
- ? new Date(resource.start_visibility)
- : null;
- const endVisibility = resource.end_visibility
- ? new Date(resource.end_visibility)
- : null;
+ const startVisibility = parseVisibilityDate(resource.start_visibility);
+ const endVisibility = parseVisibilityDate(resource.end_visibility, 'end');
// If current time is before the start of the visibility window
if (startVisibility && now < startVisibility) {
@@ -75,12 +90,11 @@ export const isPrimaryLinkVisible = (resource, isAuthenticated) => {
* Check if an individual resource link is visible based on its visibility settings
*
* @param {Object} link - The link object containing visibility settings
- * @param {boolean} isAuthenticated - Whether the user is authenticated
+ * @param {boolean} canBypassVisibility - Whether visibility restrictions can be bypassed
* @returns {boolean} Whether the link should be visible
*/
-export const isLinkVisible = (link, isAuthenticated) => {
- // Authenticated users see all links
- if (isAuthenticated) return true;
+export const isLinkVisible = (link, canBypassVisibility) => {
+ if (canBypassVisibility) return true;
// If no link, it's not visible
if (!link) return false;
@@ -93,8 +107,8 @@ export const isLinkVisible = (link, isAuthenticated) => {
if (!useLinkVisibility) return true;
const now = new Date();
- const linkStartDate = link.start_visibility ? new Date(link.start_visibility) : null;
- const linkEndDate = link.end_visibility ? new Date(link.end_visibility) : null;
+ const linkStartDate = parseVisibilityDate(link.start_visibility);
+ const linkEndDate = parseVisibilityDate(link.end_visibility, 'end');
if (linkStartDate && now < linkStartDate) return false;
if (linkEndDate && now > linkEndDate) return false;
@@ -106,11 +120,11 @@ export const isLinkVisible = (link, isAuthenticated) => {
* Get visibility information for displaying to authenticated users
*
* @param {Object} resource - The resource object containing visibility settings
- * @param {boolean} isAuthenticated - Whether the user is authenticated
+ * @param {boolean} canBypassVisibility - Whether visibility restrictions can be bypassed
* @returns {Object} Object containing visibility date information
*/
-export const getVisibilityInfo = (resource, isAuthenticated) => {
- if (!isAuthenticated || !resource) {
+export const getVisibilityInfo = (resource, canBypassVisibility) => {
+ if (!canBypassVisibility || !resource) {
return { showVisibilityDates: false };
}
diff --git a/src/util/resourceVisibility.test.js b/src/util/resourceVisibility.test.js
new file mode 100644
index 0000000..345b22f
--- /dev/null
+++ b/src/util/resourceVisibility.test.js
@@ -0,0 +1,32 @@
+import { afterEach, describe, expect, it, vi } from 'vitest';
+import { isLinkVisible, isPrimaryLinkVisible } from './resourceVisibility';
+
+describe('visibility date boundaries', () => {
+ afterEach(() => {
+ vi.useRealTimers();
+ });
+
+ it('keeps date-only end dates visible through the local calendar day', () => {
+ vi.useFakeTimers();
+ vi.setSystemTime(new Date(2026, 7, 22, 12, 0, 0));
+
+ expect(isLinkVisible({
+ use_link_visibility: '1',
+ end_visibility: '2026-08-22',
+ }, false)).toBe(true);
+ expect(isPrimaryLinkVisible({
+ use_primary_link_visibility: '1',
+ primary_link_end_visibility: '2026-08-22',
+ }, false)).toBe(true);
+ });
+
+ it('preserves exact end-time semantics for timestamp values', () => {
+ vi.useFakeTimers();
+ vi.setSystemTime(new Date('2026-08-22T16:00:00.000Z'));
+
+ expect(isLinkVisible({
+ use_link_visibility: '1',
+ end_visibility: '2026-08-22T15:59:59.000Z',
+ }, false)).toBe(false);
+ });
+});
diff --git a/src/util/studentPreview.js b/src/util/studentPreview.js
new file mode 100644
index 0000000..6a7fb4c
--- /dev/null
+++ b/src/util/studentPreview.js
@@ -0,0 +1,23 @@
+const PREVIEW_PARAM = 'preview';
+const STUDENT_PREVIEW_VALUE = 'student';
+
+export const isStudentPreview = (search = '') => {
+ return new URLSearchParams(search).get(PREVIEW_PARAM) === STUDENT_PREVIEW_VALUE;
+};
+
+export const withStudentPreview = (search = '', enabled) => {
+ const params = new URLSearchParams(search);
+
+ if (enabled) {
+ params.set(PREVIEW_PARAM, STUDENT_PREVIEW_VALUE);
+ } else {
+ params.delete(PREVIEW_PARAM);
+ }
+
+ const query = params.toString();
+ return query ? `?${query}` : '';
+};
+
+export const canBypassVisibility = (isAuthenticated, studentPreview) => {
+ return Boolean(isAuthenticated && !studentPreview);
+};
diff --git a/src/util/studentPreview.test.js b/src/util/studentPreview.test.js
new file mode 100644
index 0000000..021182e
--- /dev/null
+++ b/src/util/studentPreview.test.js
@@ -0,0 +1,31 @@
+import { describe, expect, it } from 'vitest';
+import {
+ canBypassVisibility,
+ isStudentPreview,
+ withStudentPreview,
+} from './studentPreview';
+
+describe('student preview policy', () => {
+ it('recognizes only the explicit student preview value', () => {
+ expect(isStudentPreview('?preview=student')).toBe(true);
+ expect(isStudentPreview('?preview=staff')).toBe(false);
+ expect(isStudentPreview('')).toBe(false);
+ });
+
+ it('allows only non-preview authenticated sessions to bypass visibility', () => {
+ expect(canBypassVisibility(true, false)).toBe(true);
+ expect(canBypassVisibility(true, true)).toBe(false);
+ expect(canBypassVisibility(false, false)).toBe(false);
+ expect(canBypassVisibility(false, true)).toBe(false);
+ });
+
+ it('adds preview without losing existing parameters', () => {
+ expect(withStudentPreview('?college=smith§ion=01', true))
+ .toBe('?college=smith§ion=01&preview=student');
+ });
+
+ it('removes only preview when exiting', () => {
+ expect(withStudentPreview('?college=smith&preview=student§ion=01', false))
+ .toBe('?college=smith§ion=01');
+ });
+});
diff --git a/vitest.unit.workspace.js b/vitest.unit.workspace.js
new file mode 100644
index 0000000..8097e94
--- /dev/null
+++ b/vitest.unit.workspace.js
@@ -0,0 +1 @@
+export default ['vite.config.js'];