Add fastify private network fix

unchainedshop · Nov 27, 2024 · 445f073 · 445f073
1 parent 10bb765
commit 445f073
Show file tree

Hide file tree

Showing 4 changed files with 14 additions and 10 deletions.
diff --git a/examples/kitchensink/boot.ts b/examples/kitchensink/boot.ts
@@ -23,7 +23,7 @@ const { UNCHAINED_COOKIE_NAME = 'unchained_token' } = process.env;
 const start = async () => {
   const app = express();
 
-  // Workaround Express Secure Proxy
+  // Workaround: Allow to use sandbox with localhost
   app.set('trust proxy', 1);
   app.use((req, res, next) => {
     req.headers['x-forwarded-proto'] = 'https';

diff --git a/examples/minimal/.env.defaults b/examples/minimal/.env.defaults
@@ -9,5 +9,6 @@ UNCHAINED_SECRET=secret
 UNCHAINED_CLOUD_ENDPOINT=https://engine.unchained.shop/graphql
 UNCHAINED_TOKEN_SECRET=random-token-that-is-not-secret-at-all
 UNCHAINED_COOKIE_SAMESITE=none
+UNCHAINED_COOKIE_INSECURE=
 REDIS_DB=0
 MONGOMS_VERSION=8.0.1
diff --git a/examples/minimal/boot.ts b/examples/minimal/boot.ts
@@ -9,6 +9,18 @@ import Fastify from 'fastify';
 const start = async () => {
   const fastify = Fastify({
     logger: true,
+    trustProxy: true,
+  });
+
+  // Workaround: Allow to use sandbox with localhost
+  fastify.addHook('preHandler', async function (request) {
+    request.headers['x-forwarded-proto'] = 'https';
+  });
+
+  fastify.addHook('onSend', async function (_, reply) {
+    reply.headers({
+      'Access-Control-Allow-Private-Network': 'true',
+    });
   });
 
   const engine = await startPlatform({

diff --git a/packages/api/src/fastify/index.ts b/packages/api/src/fastify/index.ts
@@ -97,15 +97,6 @@ export const connect = (
     '0': false,
   }[UNCHAINED_COOKIE_SAMESITE?.trim()?.toLowerCase()] || false) as boolean | 'none' | 'lax' | 'strict';
 
-  console.log({
-    domain,
-    httpOnly: true,
-    path,
-    secure,
-    sameSite,
-    maxAge: 1000 * 60 * 60 * 24 * 7,
-  });
-
   fastify.register(fastifyCookie);
   fastify.register(fastifySession, {
     secret: process.env.UNCHAINED_TOKEN_SECRET,