hansjone/netx
1
0
Fork 0
mirror of https://github.com/hansjone/netx.git synced 2026-10-09 20:30:45 +08:00
Code Issues Projects Releases 1 Packages Wiki Activity Actions 3

Harden auth scopes, SQL/WebCRT gates, and per-install JWT secrets.

Browse source 
Add capability RBAC, Alembic bootstrap, optional worker schedulers, and close public docs by default so lab installs stay usable without shared signing keys.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
oliver 2026-08-02 16:24:34 +08:00
parent cb8e0d23c5
commit 633a9d55bd
38 changed files with 1808 additions and 452 deletions
Download patch file Download diff file Expand all files Collapse all files

15
web/src/services/api.ts
View file

@ -817,11 +817,18 @@ export function webcrtSftpUpload(
return withSftpRetries(() => webcrtSftpUploadOnce(body, opts), opts);
}
export const webcrtWsUrl = (sessionId: string): string => {
export async function webcrtWsUrl(sessionId: string): Promise<string> {
const proto = window.location.protocol === "https:" ? "wss:" : "ws:";
const path = `/v1/webcrt/sessions/${encodeURIComponent(sessionId)}/ws`;
const tok = getAuthToken();
const qs = tok ? `?access_token=${encodeURIComponent(tok)}` : "";
let qs = "";
try {
const ticketResp = await apiPost<{ ticket: string; expires_in: number }>("/v1/webcrt/ws-ticket", {});
if (ticketResp?.ticket) {
qs = `?ws_ticket=${encodeURIComponent(ticketResp.ticket)}`;
}
} catch {
qs = "";
}
// Optional override, e.g. ws://127.0.0.1:8890
const override = String((import.meta as ImportMeta & { env?: Record<string, string> }).env?.VITE_NETX_WS_BASE || "").trim();
if (override) {
@ -834,7 +841,7 @@ export const webcrtWsUrl = (sessionId: string): string => {
return `${proto}//${apiHost}:8890${path}${qs}`;
}
return `${proto}//${window.location.host}${path}${qs}`;
};
}
export const fetchCliMeta = () => apiGet<CliMeta>("/v1/cli/meta");