Bernt
bdfd88175c
- Nginx: api.quixzoom.com proxyar /v1/auth/passwordless till port 8082
- Backend: JWT-validering disabled för MVP-testing
- Test: Komplett flöde via nginx verifierat
- Status: ✅ Initiera → Godkänn → Tokens
33 lines
1.3 KiB
Plaintext
33 lines
1.3 KiB
Plaintext
# quiXzoom Passwordless Auth — Location block
|
|
# Lägg till i befintlig server-block för api.quixzoom.com
|
|
|
|
# Passwordless auth endpoints
|
|
location /v1/auth/passwordless {
|
|
proxy_pass http://quixzoom_passwordless;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Connection "";
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
|
|
# CORS
|
|
add_header Access-Control-Allow-Origin "https://quixzoom.se" always;
|
|
add_header Access-Control-Allow-Methods "GET, POST, OPTIONS" always;
|
|
add_header Access-Control-Allow-Headers "Content-Type, Authorization" always;
|
|
|
|
# Handle preflight
|
|
if ($request_method = OPTIONS) {
|
|
add_header Access-Control-Allow-Origin "https://quixzoom.se";
|
|
add_header Access-Control-Allow-Methods "GET, POST, OPTIONS";
|
|
add_header Access-Control-Allow-Headers "Content-Type, Authorization";
|
|
add_header Access-Control-Max-Age 86400;
|
|
return 204;
|
|
}
|
|
|
|
# Timeouts
|
|
proxy_connect_timeout 5s;
|
|
proxy_send_timeout 10s;
|
|
proxy_read_timeout 10s;
|
|
}
|