0 Fork 0

mirror of https://github.com/webstudio-is/webstudio.git synced 2026-10-31 09:08:15 +09:00

Files

T

Ivan Starkov 009e762dbf chore: New Auth for the Projects (#3978 )

## Description

Part of:

https://github.com/webstudio-is/webstudio-saas/issues/317#issuecomment-2289241819

This configuration is necessary for the new authentication process.

- NODE_TLS_REJECT_UNAUTHORIZED: Enables service-to-service
communications by allowing self-signed certificates.
- cors: Ensures CORS settings match those in the production environment.
- cors logout: Allows logout requests on subdomains using fetch with
credentials.



## Steps for reproduction

1. click button
2. expect xyz

## Code Review

- [ ] hi @kof, I need you to do
  - conceptual review (architecture, feature-correctness)
  - detailed review (read every line)
  - test it on preview

## Before requesting a review

- [ ] made a self-review
- [ ] added inline comments where things may be not obvious (the "why",
not "what")

## Before merging

- [ ] tested locally and on preview environment (preview dev login:
5de6)
- [ ] updated [test
cases](https://github.com/webstudio-is/webstudio/blob/main/apps/builder/docs/test-cases.md)
document
- [ ] added tests
- [ ] if any new env variables are added, added them to `.env` file

2024-08-21 22:16:30 +03:00

fullchain.pem

chore: New Auth for the Projects (#3978 )

2024-08-21 22:16:30 +03:00

privkey.pem

chore: New Auth for the Projects (#3978 )

2024-08-21 22:16:30 +03:00

README.md

chore: New Auth for the Projects (#3978 )

2024-08-21 22:16:30 +03:00

README.md

Admin only

Based on this article https://dev.to/istarkov/fast-and-easy-way-to-setup-web-developer-certificates-450e

rm -rf /tmp/certbot/
rm -rf /tmp/letsencrypt/

mkdir -p /tmp/certbot/
mkdir -p /tmp/letsencrypt/

CLOUDFLARE_API_KEY=$(infisical secrets get WSTD_DEV-CLOUDFLARE_ZONE_TOKEN --path='/CLI' --env=staging --plain)

cat > /tmp/certbot/cloudflare.ini <<-DOCKERFILE
  dns_cloudflare_api_token = ${CLOUDFLARE_API_KEY}
DOCKERFILE

docker run -it --rm --name certbot  \
-v "/tmp/letsencrypt/data:/etc/letsencrypt" \
-v "/tmp/certbot:/local/certbot" \
certbot/dns-cloudflare certonly \
--dns-cloudflare \
--dns-cloudflare-credentials /local/certbot/cloudflare.ini \
--agree-tos \
--noninteractive \
-m istarkov@gmail.com \
-d wstd.dev \
-d '*.wstd.dev'


cp /tmp/letsencrypt/data/live/wstd.dev/fullchain.pem ./https/fullchain.pem
cp /tmp/letsencrypt/data/live/wstd.dev/privkey.pem ./https/privkey.pem