Skip to content

Commit 78bb863

Browse files
tristanlee85tristanlee85
committed
Add request signing and Next js app base
1 parent a56ddaa commit 78bb863

28 files changed

+13244
-5896
lines changed

‎examples/v7-edge-functions/.eslintrc.json

+3
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
{
2+
"extends": "next/core-web-vitals"
3+
}

‎examples/v7-edge-functions/.gitignore

+40
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,45 @@
1+
# See https://help.github.com/articles/ignoring-files/ for more about ignoring files.
2+
3+
# dependencies
4+
/node_modules
5+
/.pnp
6+
.pnp.js
7+
.yarn/install-state.gz
8+
9+
# testing
10+
/coverage
11+
12+
# next.js
13+
/.next/
14+
/out/
15+
16+
# production
17+
/build
18+
19+
# misc
20+
.DS_Store
21+
*.pem
22+
23+
# debug
24+
npm-debug.log*
25+
yarn-debug.log*
26+
yarn-error.log*
27+
28+
# local env files
29+
.env*.local
30+
31+
# vercel
32+
.vercel
33+
34+
# typescript
35+
*.tsbuildinfo
36+
next-env.d.ts
37+
138
# Temporary Edgio files
239
.edgio
340

441
# Node.js modules
542
node_modules
43+
44+
# Edgio generated build directory
45+
.edgio

‎examples/v7-edge-functions/edgio.config.js

+57-25
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,66 @@
11
// This file was automatically added by edgio init.
22
// You should commit this file to source control.
33
// Learn more about this file at https://docs.edg.io/guides/edgio_config
4-
require('dotenv').config();
5-
64
module.exports = {
5+
connector: '@edgio/next',
6+
7+
// The name of the site in Edgio to which this app should be deployed.
8+
// name: 'my-site-name',
9+
10+
// The name of the organization in Edgio to which this app should be deployed.
11+
// organization: 'my-organization-name',
12+
713
// Overrides the default path to the routes file. The path should be relative to the root of your app.
814
// routes: 'routes.js',
915

16+
// When set to true or omitted entirely, Edgio includes the deployment number in the cache key,
17+
// effectively purging the cache each time you deploy.
18+
// purgeCacheOnDeploy: false,
19+
20+
next: {
21+
// Output sourcemaps so that stack traces have original source filenames and line numbers when tailing
22+
// the logs in the Edgio developer console.
23+
// This config options replaces the edgioSourceMaps option in next.config.js.
24+
// @default true
25+
// generateSourceMaps: true
26+
//
27+
// Disables the Edgio image optimizer and allows to use the Next's built in image optimizer.
28+
// This config options replaces the disableImageOptimizer option in edgio.config.js root.
29+
// @default false
30+
// disableImageOptimizer: false
31+
//
32+
// Disables the Edgio development tools widget on the site.
33+
// This config options replaces the disableEdgioDevTools option in next.config.js.
34+
// @default false
35+
// disableDevtools: false
36+
//
37+
// Disables the build of the service worker.
38+
// @default false
39+
// disableServiceWorker: false
40+
//
41+
// Forces the @edgio/next connector to use the server build.
42+
// This config option replaces the NEXT_FORCE_SERVER_BUILD env variable.
43+
// @default false
44+
// forceServerBuild: false
45+
//
46+
// Optimizes the server build by bundling all server assets and decreasing the overall startup time.
47+
// This option has no effect on apps with serverless build.
48+
// This option is set to false for Next 13.x apps.
49+
// @default true
50+
// optimizeServerBuild: true
51+
//
52+
// Set this option to false to remove the default rule that proxies all requests to Next.js in serverless.
53+
// This is useful if you want to proxy all unmatched pages to different origin.
54+
// @default true
55+
// proxyToServerlessByDefault: true
56+
//
57+
// Set this option to true to honor Next's internal redirects that either add or remove a trailing slash
58+
// depending on the value of the `trailingSlash` config. When set to false, these internal redirects are not honored,
59+
// so sites that fallback to serving from an origin do not add or remove the trailing slash for origin URLs.
60+
// @default true
61+
// enforceTrailingSlash: true
62+
},
63+
1064
origins: [
1165
{
1266
// The name of the backend origin
@@ -66,28 +120,6 @@ module.exports = {
66120
},
67121
],
68122

69-
// Uncomment the following to specify environment specific configs
70-
// environments: {
71-
// production: {
72-
// hostnames: [{ hostname: 'www.mysite.com' }],
73-
// },
74-
// staging: {
75-
// hostnames: [{ hostname: 'staging.mysite.com' }],
76-
// origins: [
77-
// {
78-
// name: 'origin',
79-
// hosts: [{ location: 'staging-origin.mysite.com' }],
80-
// override_host_header: 'staging-origin.mysite.com',
81-
// tls_verify: {
82-
// use_sni: true,
83-
// sni_hint_and_strict_san_check: 'staging-origin.mysite.com',
84-
// },
85-
// shields: { us_east: 'DCD' },
86-
// },
87-
// ],
88-
// },
89-
// },
90-
91123
// Options for hosting serverless functions on Edgio
92124
// serverless: {
93125
// // Set to true to include all packages listed in the dependencies property of package.json when deploying to Edgio.
@@ -103,7 +135,7 @@ module.exports = {
103135
// Defaults to 200, which is the maximum allowed value.
104136
// prerenderConcurrency: 200,
105137

106-
// A list of glob patterns identifying which source files should be uploaded when running edgio deploy --includeSources.
138+
// A list of glob patterns identifying which prerenderConcurrency source files should be uploaded when running edgio deploy --includeSources.
107139
// This option is primarily used to share source code with Edgio support personnel for the purpose of debugging. If omitted,
108140
// edgio deploy --includeSources will result in all files which are not gitignored being uploaded to Edgio.
109141
//

‎examples/v7-edge-functions/functions/general/client-ip.js

+16
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
import '../../utils/polyfills/URL';
2+
3+
export async function handleHttpRequest(request, context) {
4+
// Retrieve the client's IP address from the context object
5+
const clientIP = context.client.dst_addr;
6+
7+
const newRequest = new Request(request.url, request);
8+
9+
// Add the true-client-ip header to the incoming request
10+
newRequest.headers.set('true-client-ip', clientIP);
11+
12+
// Continue with the modified request
13+
return fetch(newRequest, {
14+
edgio: { origin: 'echo' },
15+
});
16+
}

‎examples/v7-edge-functions/functions/general/redirect-country.js

+18
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
export async function handleHttpRequest(request, context) {
2+
const country = 'DE'; // Choose a country code
3+
const newUrl = `${request.url}/${country}`; // Change the redirect URL to your choice
4+
5+
if (context.geo.country === country) {
6+
return new Response(null, {
7+
status: 302,
8+
statusText: 'Found',
9+
headers: {
10+
Location: newUrl,
11+
},
12+
});
13+
}
14+
15+
return fetch(request.url, {
16+
edgio: { origin: 'echo' },
17+
});
18+
}

‎examples/v7-edge-functions/functions/general/sample-html-page.js

+10
Original file line numberDiff line numberDiff line change
@@ -83,6 +83,10 @@ export async function handleHttpRequest(request, context) {
8383
overflow-wrap: break-word;
8484
white-space: pre-wrap;
8585
}
86+
87+
p pre {
88+
display: inline;
89+
}
8690
</style>
8791
</head>
8892
<body>
@@ -187,6 +191,12 @@ export async function handleHttpRequest(request, context) {
187191
</ul>
188192
</section>
189193
194+
<section>
195+
<h2>Request Signing</h2>
196+
<p>Request signing and verification using <strong>crypto-js</strong>. Generated URLs are valid for 60 seconds.</p>
197+
<p><a href="/example/signed-request/sign/foo/bar">Generate Signed URL</a></p>
198+
</section>
199+
190200
191201
</div>
192202
<div style="margin-top: 30px; text-align: center;">

‎examples/v7-edge-functions/functions/general/security-response-headers.js

+25
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
export async function handleHttpRequest(request, context) {
2+
// Fetch the response from the 'echo' origin
3+
const response = await fetch(new Request(request.url, request), {
4+
edgio: {
5+
origin: 'echo',
6+
},
7+
});
8+
9+
// Set HTTP security headers
10+
response.headers.set(
11+
'strict-transport-security',
12+
'max-age=63072000; includeSubdomains; preload'
13+
);
14+
response.headers.set(
15+
'content-security-policy',
16+
"default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'; frame-ancestors 'none'"
17+
);
18+
response.headers.set('x-content-type-options', 'nosniff');
19+
response.headers.set('x-frame-options', 'DENY');
20+
response.headers.set('x-xss-protection', '1; mode=block');
21+
response.headers.set('referrer-policy', 'same-origin');
22+
23+
// Return the response to the client
24+
return response;
25+
}

‎examples/v7-edge-functions/functions/general/signed-request/sign.js

+54
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,54 @@
1+
import '../../../utils/polyfills/URL';
2+
import HmacSHA1 from 'crypto-js/hmac-sha1';
3+
import Base64 from 'crypto-js/enc-base64';
4+
5+
export async function handleHttpRequest(request, context) {
6+
// ** IMPORTANT **
7+
// Secret key should be defined as an environment variable in the Edgio console
8+
const secretKey = '$0m3th!ngS3cr3t'; // contet.environmentVars.REQ_SIGNING_SECRET_KEY;
9+
10+
return generateSignedUrl(new URL(request.url), secretKey);
11+
}
12+
13+
async function generateSignedUrl(url, key) {
14+
// Replace /sign/ with /verify/ in the URL since we are generating a signed URL for verification
15+
url.pathname = url.pathname.replace('/sign/', '/verify/');
16+
17+
// The link will expire in 5 minutes
18+
const expirationMs = 1000 * 60 * 5; // 5 minutes
19+
const expiry = Date.now() + expirationMs;
20+
const dataToAuthenticate = url.pathname + expiry;
21+
22+
const hash = HmacSHA1(dataToAuthenticate, secretKey);
23+
const base64Mac = Base64.stringify(hash);
24+
25+
url.searchParams.set('mac', base64Mac);
26+
url.searchParams.set('expiry', expiry.toString());
27+
28+
const validUrl = url.toString();
29+
const modifiedExpiryUrl = new URL(validUrl);
30+
modifiedExpiryUrl.searchParams.set('expiry', `${expiry + 5}`);
31+
const modifiedMacUrl = new URL(validUrl);
32+
modifiedMacUrl.searchParams.set('mac', `${base64Mac}x`);
33+
34+
console.log('Valid URL:\n', validUrl);
35+
console.log('Modified expiry URL:\n', modifiedExpiryUrl.toString());
36+
console.log('Modified MAC URL:\n', modifiedMacUrl.toString());
37+
38+
const htmlResponse = `
39+
<html>
40+
<body>
41+
<p>Click the following links for verification:</p>
42+
<ul>
43+
<li><a href="${validUrl}">Valid URL</a><pre>(${validUrl})</pre></li>
44+
<li><a href="${modifiedExpiryUrl}">Invalid with modified Expiry URL</a><pre>(${modifiedExpiryUrl})</pre></li>
45+
<li><a href="${modifiedMacUrl}">Invalid with modified Mac URL</a><pre>(${modifiedMacUrl})</pre></li>
46+
</ul>
47+
</body>
48+
</html>
49+
`;
50+
51+
return new Response(htmlResponse, {
52+
headers: { 'Content-Type': 'text/html' },
53+
});
54+
}

‎examples/v7-edge-functions/functions/general/signed-request/verify.js

+60
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,60 @@
1+
import '../../../utils/polyfills/URL';
2+
import { setEnvFromContext } from '../../../utils/polyfills/process.env';
3+
import createFetchForOrigin from '../../../utils/createFetchForOrigin';
4+
import HmacSHA256 from 'crypto-js/hmac-sha256';
5+
import Base64 from 'crypto-js/enc-base64';
6+
7+
const fetch = createFetchForOrigin('echo');
8+
9+
export async function handleHttpRequest(request, context) {
10+
// Set environment variables from the request context
11+
setEnvFromContext(context);
12+
13+
return verifyAndFetch(new Request(request.url, request));
14+
}
15+
16+
async function verifyAndFetch(request) {
17+
// ** IMPORTANT **
18+
// Secret key should be defined as an environment variable in the Edgio console
19+
const secretKey = '$0m3th!ngS3cr3t'; // process.env.REQ_SIGNING_SECRET_KEY;
20+
21+
const url = new URL(request.url);
22+
23+
if (!url.searchParams.has('mac') || !url.searchParams.has('expiry')) {
24+
return new Response('Missing query parameter', { status: 403 });
25+
}
26+
27+
const expiry = Number(url.searchParams.get('expiry'));
28+
const dataToAuthenticate = url.pathname + expiry;
29+
30+
const receivedMacBase64 = url.searchParams.get('mac');
31+
const receivedMac = Base64.parse(receivedMacBase64);
32+
33+
const hash = HmacSHA256(dataToAuthenticate, secretKey);
34+
const hashInBase64 = Base64.stringify(hash);
35+
36+
if (hashInBase64 !== receivedMacBase64) {
37+
return new Response(
38+
JSON.stringify(
39+
{
40+
message: 'Invalid MAC',
41+
hashInBase64,
42+
receivedMacBase64,
43+
},
44+
null,
45+
2
46+
),
47+
{ status: 403 }
48+
);
49+
}
50+
51+
if (Date.now() > expiry) {
52+
const body = `URL expired at ${new Date(expiry)}`;
53+
return new Response(body, { status: 403 });
54+
}
55+
56+
// Forward the remaining request path after **/verify/* to the origin
57+
url.pathname = url.pathname.split('/verify/')[1];
58+
59+
return fetch(url.toString());
60+
}

‎examples/v7-edge-functions/jsconfig.json

+8
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
{
2+
"compilerOptions": {
3+
"jsx": "react",
4+
"paths": {
5+
"@/*": ["./src/*"]
6+
}
7+
}
8+
}

‎examples/v7-edge-functions/next.config.js

+13
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
// This file was automatically added by edgio init.
2+
// You should commit this file to source control.
3+
const { withEdgio } = require('@edgio/next/config')
4+
5+
/** @type {import('next').NextConfig} */
6+
const nextConfig = {}
7+
8+
const _preEdgioExport = nextConfig;;
9+
10+
module.exports = (phase, config) =>
11+
withEdgio({
12+
..._preEdgioExport
13+
})

0 commit comments

Comments
 (0)