Feature: Document CSP directives
Nobody has claimed this yet.
Assessment
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Newbie friendliness
- 35/100
- Issue type
- Documentation
- Clarity
- Mostly clear
- Activity status
- Stale
- Domain
- authentication, documentation, security
Research direction
Start with the issue's MDN Content Security Policy reference and verify the listed connect-src, img-src, and font-src origins against how Authing web applications load resources. Update the documentation with the complete origins and directives needed for Authing to function, including any necessary caveats; done means the allow-list is complete and usable.
Written by the indexing model from the issue text.
Description
Description
Many web applications employ a Content Security Policy to restrict which domains or resources can be loaded. It would be nice to document what domains need to be allow-listed in order to allow Authing to work.
For example, necessary CSP directives will need to include at least the following:
connect-src: [youraccount].authing.cn core.authing.cn files.authing.coimg-src: authing-files.oss-cn-zhangjiakou.aliyuncs.comfont-src: at.alicdn.com
I'm not sure if the above list is complete.
Proposed solution
Documenting the full list of origins that need to be added to a web application's Content Security Policy to allow Authing to function.
- Dominant language
- JavaScript
- Stars
- 34
- Forks
- 102
- PR merge metrics
- No merged PRs in 30d
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from Authing/docs
-
《选择合适的权限模型》内容多了一个顿号 Open
Difficulty 1/5 Under an hour Newbie friendliness 78/100
-
Difficulty 4/5 3-5 days Newbie friendliness 45/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 35/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 35/100
-
找不到 UserPool Secret Open
Difficulty 1/5 Under an hour Newbie friendliness 35/100
Similar issues
-
bug customer-eng Durable Agents Inngest status: needs triage
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
-
optimization optimization:agents-md-curator
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
githubnext/gh-aw-cao#13475 ·
-
[BUG]: "Clear All" in Settings doesn't clear the saved analysis, old data comes back after reload Openbug
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
AOSSIE-Org/OrgExplorer#253 · 1 comment ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
oxc-project/oxc#26944 ·
-
ai-observability bug team/ai-observability
Difficulty 2/5 1-3 hours Newbie friendliness 78/100