Flowdeck : CORS recherche autorise les origines agent (federation console, defaut 2) #39
Open
bruno
wants to merge 2 commits from
console-federation-recherche into main
pull from: console-federation-recherche
merge into: :main
:main
:barre-v0111-7-84-9
:barre-rouge-spark-7-84-8
:barre-logos-7-84-7
:fix-cors-search-doublons
:federation-recherche-console
:console-federation-recherche
:flowdeck-recherche-onglets
:flowdeck-texte-parasite
:align-recherche-console
:alertes-onglets-5-rebase-main
:alertes-onglets-5
:recherche-onglets-ux-68
:cors-recherche-alertes-68-69
:recherche-partout-68-rebase
:recherche-partout-68
:alertes-unifiees-69
:fusion-70-barre-console-spark
:barre-apps-v0.1.6-flowdeck
:feat/coffre-reference-obsigate
:feat/v6.5.0-synced-db
:feat/v6.0
:feat/v5.6.0-import
:feat/v5.5.0-embeds-media
:docs/roadmap-v5.4.0-completed
:feat/v5.4.0-v5.5.0
:feat/v4.5.0-sprints-my-tasks
:feat/v4.4.0-tasks-dependencies
:feat/v4.3.0-database-views
:feat/v4.2.0-templates-dashboards
:feat/v4.1.0-database-sources
:develop
:fix/no-workspace-sidebar
:feat/quality
:feat/onboarding
No Reviewers
Labels
Clear labels
bug
design
documentation
duplicate
enhancement
feature
kanban:agent-task
kanban:in_progress
kanban:qa
kanban:review
kanban:todo
kanban_Backlog
kanban_En_cours
kanban_Révision
kanban_Terminé
kanban_a_faire
performance
question
refactor
roadmap
security
wontfix
Bug à corriger
UI/UX
Documentation
Doublon
Amélioration
Nouvelle fonctionnalité
Colonne Backlog
Colonne En cours
Colonne Révision
Colonne Terminé
Colonne À faire
Optimisation
Question
Refactoring code
Feuille de route — programme Fusion
Sécurité
Ne sera pas corrigé
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: bruno/flowdeck#39
Reference in New Issue
Block a user
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Branche console-federation-recherche, base main. NE PAS MERGER sans go du coordinateur.
app/middleware/recherche_cors.py : ajout d'AGENT_ORIGINS = {https://agent.dracodev.net, https://agent-dev.dracodev.net} a l'allowlist de GET /api/search (regles inchangees, jamais '*', politique CORS globale inchangee). Sans cela, la page de recherche de la console ne peut pas lire les reponses Flowdeck cross-origin. Aucun changement de CSP Flowdeck necessaire (sa CSP connect-src couvre sa propre page ; la CSP qui compte pour les appels console est celle de la page console).
Tests : tests/test_recherche.py mis a jour (allowlist a 10 origines, nouveau test_origines_agent_console). Execute en sandbox (fonctions pures, sans serveur) : 7/7. Aucun bump de version, aucun merge.
View command line instructions
Checkout
From your project repository, check out a new branch and test the changes.