feat: make Verify API opt-in & secure attestation with CSRF tokens (#42)

WalletConnect · Jul 13, 2023 · 022f45a · 022f45a
1 parent 4087c5f
commit 022f45a
Show file tree

Hide file tree

Showing 19 changed files with 694 additions and 161 deletions.
diff --git a/.env.example b/.env.example
@@ -16,7 +16,7 @@ PROJECT_REGISTRY_AUTH_TOKEN="See 1Password: cloudflare-workers/prod/internal-api
 PROJECT_REGISTRY_CACHE_URL=redis://localhost:6379/1
 TEST_PROJECT_ID="Create one on https://wc-cloud-staging.vercel.app"
 
+SECRET="See 1Password: prod-bouncer-secret"
+
 # Terraform
 GRAFANA_AUTH=
-
-DOMAIN_WHITELIST=walletconnect.com,vercel.app,localhost
diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
@@ -11,6 +11,7 @@ concurrency:
 
 env:
   TF_VAR_project_registry_auth_token: ${{ secrets.PROJECT_REGISTRY_AUTH_TOKEN }}
+  TF_VAR_secret: ${{ secrets.SECRET }}
 
 jobs:
   get-version:

diff --git a/.github/workflows/ci_terraform.yml b/.github/workflows/ci_terraform.yml
@@ -19,6 +19,7 @@ concurrency:
 
 env:
   TF_VAR_project_registry_auth_token: ${{ secrets.PROJECT_REGISTRY_AUTH_TOKEN }}
+  TF_VAR_secret: ${{ secrets.SECRET }}
 
 jobs:
   fmt:

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
@@ -17,6 +17,7 @@ concurrency:
 
 env:
   TF_VAR_project_registry_auth_token: ${{ secrets.PROJECT_REGISTRY_AUTH_TOKEN }}
+  TF_VAR_secret: ${{ secrets.SECRET }}
 
 jobs:
   build-container: