Compare commits

...
6 changed files with 53 additions and 48 deletions
+1
View File
@@ -13,3 +13,4 @@ hostname: maestro.stg.dadosfera.ai
replicaCount: 1 replicaCount: 1
affinity: null
+3 -3
View File
@@ -1,4 +1,4 @@
charts: releases:
- name: maestro - name: maestro
chart: ../helm-chart chart: ../helm-chart
values: values:
@@ -49,5 +49,5 @@ charts:
value: dea2c27f-0973-4588-a2e0-9e31b64c7ffd value: dea2c27f-0973-4588-a2e0-9e31b64c7ffd
- name: replicaCount - name: replicaCount
value: 1 value: 1
- name: maestro.restricted_ip # - name: maestro.restricted_ip
value: "177.52.172.0/24,189.84.160.157/32,186.237.171.146/32,57.151.113.140/30" # value: "177.52.172.0/24,189.84.160.157/32,186.237.171.146/32,10.70.1.0/24"
+21 -34
View File
@@ -7,37 +7,24 @@ charts:
# Environment to test Network Policies # Environment to test Network Policies
# - name: private-maestro - name: private-maestro
# chart: ../helm-chart chart: ../helm-chart
# values: values:
# - ../helm-chart/values.yaml - ../helm-chart/values.yaml
# set: - ../helm-chart/values-stg.yaml
# - name: app_name set:
# value: maestro-private - name: app_name
# - name: maestro.env value: maestro-private
# value: stg - name: hostname
# - name: maestro.duc_url value: private-maestro.stg.dadosfera.ai
# value: duc.stg.dadosfera.ai # Customer id
# - name: hostname - name: maestro.dedicated_proxy
# value: private-maestro.stg.dadosfera.ai value: 14d52fd4-d83d-4cdd-be34-bf11cc28b3bd
# - name: maestro.pi_factory_url - name: replicaCount
# value: pi-factory.dadosfera.ai value: 1
# - name: maestro.in_factory_url - name: affinity
# value: in-factory.stg.dadosfera.ai value: null
# - name: maestro.tr_factory_url - name: resources
# value: in-factory.dadosfera.ai value: null
# - name: maestro.open_customer_id - name: maestro.restricted_ip
# value: b3e3dfe5-b992-4586-a73c-c0b0c00f615d value: "137.131.167.254/32,10.70.0.0/16,163.176.242.27/32"
# - name: maestro.open_group_id
# value: e3f98a2f-7748-4981-8505-7695c8ca8218
# # Customer id
# - name: maestro.dedicated_proxy
# value: 14d52fd4-d83d-4cdd-be34-bf11cc28b3bd
# - name: replicaCount
# value: 1
# - name: affinity
# value: null
# - name: resources
# value: null
# - name: maestro.restricted_ip
# value: "57.151.113.140/30"
+12 -3
View File
@@ -21,18 +21,27 @@ async function bootstrap() {
const app = await NestFactory.create(AppModule, { const app = await NestFactory.create(AppModule, {
logger, logger,
cors: { cors: {
origin: '*', origin: [
'https://app.stg.dadosfera.ai',
'https://app.dadosfera.ai',
'https://unimed.dadosfera.ai',
'https://boston-scientific.dadosfera.ai',
'https://plataforma.dadosfera.ai'
],
methods: 'GET,HEAD,PUT,PATCH,POST,DELETE', methods: 'GET,HEAD,PUT,PATCH,POST,DELETE',
preflightContinue: false, preflightContinue: false,
optionsSuccessStatus: 204, optionsSuccessStatus: 204,
credentials: true credentials: true,
}, },
}); });
app.use(helmet()); app.use(helmet());
app.use(cookieParser(process.env.COOKIE_SECRET)); app.use(cookieParser(process.env.COOKIE_SECRET));
if (process.env.ENV === 'prd') { if (process.env.ENV === 'prd') {
app.use('/catalog/register-dataset', json({ limit: '10mb' })); app.use('/catalog/register-dataset', json({ limit: '10mb' }));
app.use('/catalog/register-dataset', urlencoded({ extended: true, limit: '10mb' })); app.use(
'/catalog/register-dataset',
urlencoded({ extended: true, limit: '10mb' }),
);
} }
configureSwagger(app); configureSwagger(app);
+4 -3
View File
@@ -114,6 +114,7 @@ export class AuthController {
return res.send(data); return res.send(data);
} catch (error) { } catch (error) {
this.logger.error('/auth - SignIn - ERROR', error); this.logger.error('/auth - SignIn - ERROR', error);
throw error;
} }
} }
@@ -572,7 +573,7 @@ export class AuthController {
this.logger.info('Set Cookie ddf-auth') this.logger.info('Set Cookie ddf-auth')
res.cookie('ddf-auth', data.accessToken, { res.cookie('ddf-auth', data.accessToken, {
domain: 'stg.dadosfera.ai', domain: '.dadosfera.ai',
maxAge: exp, maxAge: exp,
httpOnly: true, httpOnly: true,
secure: true, secure: true,
@@ -583,7 +584,7 @@ export class AuthController {
if (data.refreshToken) { if (data.refreshToken) {
this.logger.info('Set Cookie ddf-refresh-auth') this.logger.info('Set Cookie ddf-refresh-auth')
res.cookie('ddf-refresh-auth', data.refreshToken, { res.cookie('ddf-refresh-auth', data.refreshToken, {
domain: 'stg.dadosfera.ai', domain: '.dadosfera.ai',
maxAge: exp, maxAge: exp,
httpOnly: true, httpOnly: true,
secure: true, secure: true,
@@ -594,7 +595,7 @@ export class AuthController {
if (data.userId) { if (data.userId) {
this.logger.info('Set Cookie ddf-refresh-auth') this.logger.info('Set Cookie ddf-refresh-auth')
res.cookie('ddf-user-id', data.userId, { res.cookie('ddf-user-id', data.userId, {
domain: 'stg.dadosfera.ai', domain: '.dadosfera.ai',
maxAge: exp, maxAge: exp,
httpOnly: true, httpOnly: true,
secure: true, secure: true,
+12 -5
View File
@@ -5,18 +5,25 @@ import { redisStore } from 'cache-manager-ioredis-yet';
@Module({ @Module({
imports: [ imports: [
CacheModule.registerAsync({ CacheModule.registerAsync({
useFactory: async () => ({ useFactory: async () => {
store: await redisStore({ const baseRedisConfig = {
ttl: 5 * 1000 * 60, // 5 minute ttl: 5 * 1000 * 60, // 5 minute
host: process.env.REDIS_HOST, host: process.env.REDIS_HOST,
port: process.env.REDIS_PORT && Number(process.env.REDIS_PORT), port: process.env.REDIS_PORT && Number(process.env.REDIS_PORT),
db: process.env.REDIS_DATABASE && Number(process.env.REDIS_DATABASE), db: process.env.REDIS_DATABASE && Number(process.env.REDIS_DATABASE),
keyPrefix: 'maestro:sso', keyPrefix: 'maestro:sso',
tls: { }
if (process.env.ENV !== 'local') {
baseRedisConfig['tls'] = {
servername: process.env.REDIS_HOST, servername: process.env.REDIS_HOST,
} }
}), }
}),
return {
store: await redisStore(baseRedisConfig),
}
},
}), }),
], ],
providers: [CacheService], providers: [CacheService],