zias/stats
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

feat: ignore secret or cors for client

Browse Source
This commit is contained in:
Carl-Gerhard Lindesvärd
2025-10-29 21:14:43 +01:00
parent a399209947
commit ddc99e9850
3 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
apps/api/src/utils/auth.ts
View File

@@ -104,6 +104,10 @@ export async function validateSdkRequest(
throw createError('Ingestion: Profile id is blocked by project filter'); throw createError('Ingestion: Profile id is blocked by project filter');
} }
if (client.ignoreCorsAndSecret) {
return client;
}
if (client.project.cors) { if (client.project.cors) {
const domainAllowed = client.project.cors.find((domain) => { const domainAllowed = client.project.cors.find((domain) => {
const cleanedDomain = cleanDomain(domain); const cleanedDomain = cleanDomain(domain);

2
packages/db/prisma/migrations/20251029200725_ignore_secret_and_cors/migration.sql Normal file
View File

@@ -0,0 +1,2 @@
-- AlterTable
ALTER TABLE "public"."clients" ADD COLUMN "ignoreCorsAndSecret" BOOLEAN NOT NULL DEFAULT false;

2
packages/db/prisma/schema.prisma
View File

@@ -250,6 +250,8 @@ model Client {
organization Organization @relation(fields: [organizationId], references: [id], onDelete: Cascade) organization Organization @relation(fields: [organizationId], references: [id], onDelete: Cascade)
organizationId String organizationId String
ignoreCorsAndSecret Boolean @default(false)
createdAt DateTime @default(now()) createdAt DateTime @default(now())
updatedAt DateTime @default(now()) @updatedAt updatedAt DateTime @default(now()) @updatedAt