4nk/lecoffre-back-mini
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci: docker_tag=ext feat: CORS dynamique + vars exemple
All checks were successful
build-and-push-ext / build_push (push) Successful in 16s
Details

Browse Source
This commit is contained in:
dev4 2025-09-18 15:11:09 +00:00
parent 8eb33adc1f
commit e78df8a9f1
3 changed files with 32 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
.env.exemple
View File

@ -44,9 +44,9 @@ NEXT_PUBLIC_DEFAULT_STORAGE_URLS=https://dev4.4nkweb.com/storage
# WS
# RELAY_URLS=wss://demo.4nkweb.com/ws
RELAY_URLS=wss://dev4.4nkweb.com/ws
# SIGNER_WS_URL=https://dev4.4nkweb.com/signer/
SIGNER_WS_URL=https://dev3.4nkweb.com/signer/
SIGNER_BASE_URL=https://dev3.4nkweb.com/signer/
# SIGNER_WS_URL=ws://dev4.4nkweb.com/signer/
SIGNER_WS_URL=ws://dev3.4nkweb.com/signer/
SIGNER_BASE_URL=https://dev3.4nkweb.com
# IHM URLS
# VITE_BOOTSTRAPURL=http://sdk_relay:8090/
@ -56,6 +56,9 @@ VITE_BOOTSTRAPURL=https://dev4.4nkweb.com/ws/
SUCCES='4242 4242 4242 4242'
DECLINED='4000 0025 0000 3155'
ENABLE_SUBSCRIPTION_STUB=true
CORS_ALLOWED_ORIGINS=http://local.4nkweb.com:3000,https://dev4.4nkweb.com
# ================================= /!\ sensible ========================
# Configuration IDNOT
@ -86,4 +89,4 @@ STRIPE_STANDARD_ANNUAL_SUBSCRIPTION_PRICE_ID=
STRIPE_UNLIMITED_SUBSCRIPTION_PRICE_ID=
STRIPE_UNLIMITED_ANNUAL_SUBSCRIPTION_PRICE_ID=
SIGNER_API_KEY=
SIGNER_API_KEY=your-api-key-change-this

7
lecoffre-front.code-workspace
View File

@ -1,13 +1,20 @@
{
"folders": [
{
"name": "lecoffre-front",
"path": "../lecoffre-front"
},
{
"name": "lecoffre-back-mini",
"path": "."
},
{
"name": "ihm_client",
"path": "../ihm_client"
},
{
"name": "lecoffre_node",
"path": "../lecoffre_node"
}
],
"settings": {

18
src/config/index.ts
View File

@ -7,8 +7,24 @@ export const config = {
defaultStorage: process.env.DEFAULT_STORAGE || 'https://dev3.4nkweb.com/storage',
appHost: process.env.APP_HOST || 'http://localhost:3000',
// CORS dynamique: autorise une liste d'origines connues
cors: {
origin: 'http://localhost:3000',
origin: (origin: string | undefined, callback: (err: Error | null, allow?: boolean) => void) => {
const defaultAllowed = ['http://localhost:3000', 'http://local.4nkweb.com:3000', 'https://dev4.4nkweb.com'];
const envAllowed = (process.env.CORS_ALLOWED_ORIGINS || '')
.split(',')
.map((s) => s.trim())
.filter((s) => s.length > 0);
const allowedOrigins = envAllowed.length > 0 ? envAllowed : defaultAllowed;
if (!origin) {
return callback(null, true);
}
if (allowedOrigins.includes(origin)) {
return callback(null, true);
}
return callback(new Error(`CORS origin not allowed: ${origin}`));
},
methods: ['GET', 'POST', 'PUT', 'DELETE', 'OPTIONS'],
allowedHeaders: ['Content-Type', 'x-session-id', 'Authorization'],
credentials: true