lucasrcsantana/story-generator
1
0
Fork 0
mirror of https://github.com/lucasrcsantana/story-generator.git synced 2025-12-17 05:47:52 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

feat: atualiza configurações de CORS e CSP

Browse Source
This commit is contained in:
Lucas Santana 2025-01-11 13:46:22 -03:00
parent 00cd9edb1c
commit a7612879bf
2 changed files with 69 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
netlify.toml
View File

@ -21,7 +21,33 @@
X-XSS-Protection = "1; mode=block" X-XSS-Protection = "1; mode=block"
X-Content-Type-Options = "nosniff" X-Content-Type-Options = "nosniff"
Referrer-Policy = "strict-origin-when-cross-origin" Referrer-Policy = "strict-origin-when-cross-origin"
Content-Security-Policy = "default-src 'self'; img-src 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';" Content-Security-Policy = """
default-src 'self';
connect-src 'self' https://bsjlbnyslxzsdwxvkaap.supabase.co wss://bsjlbnyslxzsdwxvkaap.supabase.co;
img-src 'self' data: https: blob:;
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://bsjlbnyslxzsdwxvkaap.supabase.co;
style-src 'self' 'unsafe-inline';
frame-src 'self' https://bsjlbnyslxzsdwxvkaap.supabase.co;
font-src 'self' data:;
media-src 'self' https://bsjlbnyslxzsdwxvkaap.supabase.co;
worker-src 'self' blob:;
"""
Access-Control-Allow-Origin = "https://historiasmagicas.netlify.app"
Access-Control-Allow-Methods = "GET, POST, PUT, DELETE, OPTIONS"
Access-Control-Allow-Headers = """
Authorization,
Content-Type,
Accept,
Origin,
User-Agent,
DNT,
Cache-Control,
X-Mx-ReqToken,
Keep-Alive,
X-Requested-With,
If-Modified-Since
"""
Access-Control-Max-Age = "3600"
[dev] [dev]
command = "npm run dev" command = "npm run dev"

48
supabase/config.toml
View File

@ -5,7 +5,11 @@ name = "Histórias Mágicas"
[auth] [auth]
enabled = true enabled = true
site_url = "https://historiasmagicas.netlify.app" site_url = "https://historiasmagicas.netlify.app"
additional_redirect_urls = ["https://historiasmagicas.netlify.app", "https://*.historiasmagicas.netlify.app"] additional_redirect_urls = [
"https://historiasmagicas.netlify.app/*",
"http://localhost:5173/*",
"http://localhost:3000/*"
]
jwt_expiry = 3600 jwt_expiry = 3600
enable_refresh_token_rotation = true enable_refresh_token_rotation = true
refresh_token_reuse_interval = 10 refresh_token_reuse_interval = 10
@ -18,7 +22,7 @@ verify_enabled = true
enable_signup = true enable_signup = true
double_confirm_changes = true double_confirm_changes = true
enable_confirmations = true enable_confirmations = true
secure_password_change = false secure_password_change = true
max_frequency = "1m0s" max_frequency = "1m0s"
otp_length = 6 otp_length = 6
otp_expiry = 86400 otp_expiry = 86400
@ -38,9 +42,25 @@ enabled = true
file_size_limit = "50MB" file_size_limit = "50MB"
[storage.cors] [storage.cors]
allowed_origins = ["*"] allowed_origins = [
"https://historiasmagicas.netlify.app",
"http://localhost:5173",
"http://localhost:3000"
]
allowed_methods = ["GET", "POST", "PUT", "DELETE", "OPTIONS"] allowed_methods = ["GET", "POST", "PUT", "DELETE", "OPTIONS"]
allowed_headers = ["*"] allowed_headers = [
"Authorization",
"Content-Type",
"Accept",
"Origin",
"User-Agent",
"DNT",
"Cache-Control",
"X-Mx-ReqToken",
"Keep-Alive",
"X-Requested-With",
"If-Modified-Since"
]
exposed_headers = ["Content-Range", "Range"] exposed_headers = ["Content-Range", "Range"]
max_age = 3600 max_age = 3600
@ -53,9 +73,25 @@ max_rows = 1000
[api.cors] [api.cors]
enabled = true enabled = true
allowed_origins = ["*"] allowed_origins = [
"https://historiasmagicas.netlify.app",
"http://localhost:5173",
"http://localhost:3000"
]
allowed_methods = ["GET", "POST", "PUT", "DELETE", "OPTIONS"] allowed_methods = ["GET", "POST", "PUT", "DELETE", "OPTIONS"]
allowed_headers = ["*"] allowed_headers = [
"Authorization",
"Content-Type",
"Accept",
"Origin",
"User-Agent",
"DNT",
"Cache-Control",
"X-Mx-ReqToken",
"Keep-Alive",
"X-Requested-With",
"If-Modified-Since"
]
exposed_headers = ["Content-Range", "Range"] exposed_headers = ["Content-Range", "Range"]
max_age = 3600 max_age = 3600