From 7590fde1dd6239d418cb51308fcab71c8e43d324 Mon Sep 17 00:00:00 2001 From: danielswiatek Date: Mon, 10 Feb 2025 14:19:59 +0100 Subject: [PATCH 1/7] fix: update content security policy to allow images from Azure Blob Storage --- apps/api/src/server.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/api/src/server.ts b/apps/api/src/server.ts index 35f7a75e..1a8a4143 100644 --- a/apps/api/src/server.ts +++ b/apps/api/src/server.ts @@ -23,7 +23,7 @@ app.use( helmet({ contentSecurityPolicy: { directives: { - 'img-src': ["'self'", '*.githubusercontent.com'], + 'img-src': ["'self'", '*.githubusercontent.com', 'data', 'dlrgbrahmseedigitalprod.blob.core.windows.net'], }, }, }) From 91a67634532135241f98a4769f8437ae7431aeab Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Barne=20J=C3=BCrgensen?= Date: Mon, 10 Feb 2025 14:33:52 +0100 Subject: [PATCH 2/7] add dynamic origin --- apps/api/src/server.ts | 2 +- apps/frontend/src/views/Login/Login.vue | 5 ++++- .../src/views/Registrierung/GliederungRegistrierung.vue | 5 ++++- 3 files changed, 9 insertions(+), 3 deletions(-) diff --git a/apps/api/src/server.ts b/apps/api/src/server.ts index 1a8a4143..d62261e5 100644 --- a/apps/api/src/server.ts +++ b/apps/api/src/server.ts @@ -45,7 +45,7 @@ app.use( transport: 'session', }, dlrg: { - dynamic: ['mode'], + dynamic: ['mode', 'origin'], transport: 'session', oauth: 2, response: ['token', 'profile'], diff --git a/apps/frontend/src/views/Login/Login.vue b/apps/frontend/src/views/Login/Login.vue index 7d20105f..fda98fda 100644 --- a/apps/frontend/src/views/Login/Login.vue +++ b/apps/frontend/src/views/Login/Login.vue @@ -50,6 +50,9 @@ const formatLoginError = computed(() => { }) const version = `${import.meta.env.VITE_APP_VERSION || 'unknown'}-${import.meta.env.VITE_APP_COMMIT_HASH || 'unknown'}` + +const origin = `${location.href}/api` +const oauthHref = `/api/connect/dlrg?mode=login&origin=${encodeURIComponent(origin)}`