M1ngdaXie/DocNest
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: Add production fallbacks for API and WebSocket URLs

Browse Source
This commit is contained in:
M1ngdaXie
2026-01-12 01:19:29 -08:00
parent 819760662a
commit 1058299933
3 changed files with 11 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
backend/internal/handlers/websocket.go
View File

@@ -4,6 +4,7 @@ import (
"log" "log"
"net/http" "net/http"
"os" "os"
"strings"
"github.com/M1ngdaXie/realtime-collab/internal/auth" "github.com/M1ngdaXie/realtime-collab/internal/auth"
"github.com/M1ngdaXie/realtime-collab/internal/hub" "github.com/M1ngdaXie/realtime-collab/internal/hub"
@@ -17,16 +18,20 @@ var upgrader = websocket.Upgrader{
ReadBufferSize: 1024, ReadBufferSize: 1024,
WriteBufferSize: 1024, WriteBufferSize: 1024,
CheckOrigin: func(r *http.Request) bool { CheckOrigin: func(r *http.Request) bool {
// Check origin against allowed origins from environment origin := r.Header.Get("Origin")
allowedOrigins := os.Getenv("ALLOWED_ORIGINS") allowedOrigins := os.Getenv("ALLOWED_ORIGINS")
if allowedOrigins == "" { if allowedOrigins == "" {
// Default for development // Default for development
origin := r.Header.Get("Origin")
return origin == "http://localhost:5173" || origin == "http://localhost:3000" return origin == "http://localhost:5173" || origin == "http://localhost:3000"
} }
// Production: validate against ALLOWED_ORIGINS // Production: validate against ALLOWED_ORIGINS
// TODO: Parse and validate origin origins := strings.Split(allowedOrigins, ",")
for _, allowed := range origins {
if strings.TrimSpace(allowed) == origin {
return true return true
}
}
return false
}, },
} }

2
frontend/src/api/client.ts
View File

@@ -1,4 +1,4 @@
const API_BASE_URL = import.meta.env.VITE_API_URL || "http://localhost:8080/api"; const API_BASE_URL = import.meta.env.VITE_API_URL || "https://docnest-backend-mingda.fly.dev";
export async function authFetch(url: string, options?: RequestInit): Promise<Response> { export async function authFetch(url: string, options?: RequestInit): Promise<Response> {
const token = localStorage.getItem('auth_token'); const token = localStorage.getItem('auth_token');

2
frontend/src/lib/yjs.ts
View File

@@ -4,7 +4,7 @@ import { WebsocketProvider } from "y-websocket";
import * as Y from "yjs"; import * as Y from "yjs";
import { documentsApi } from "../api/document"; import { documentsApi } from "../api/document";
const WS_URL = import.meta.env.VITE_WS_URL; const WS_URL = import.meta.env.VITE_WS_URL || "wss://docnest-backend-mingda.fly.dev";
export interface YjsProviders { export interface YjsProviders {
ydoc: Y.Doc; ydoc: Y.Doc;