Repository navigation
Conversation
Co-authored-by: Derek Cofausper <256792747+decofe@users.noreply.github.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The public docs demos still use the anonymous Moderato RPC pool even when CI has an RPC key. Add a same-origin
/api/demo-rpchandler that uses the server-onlyTEMPO_RPC_API_KEY, and select it withVITE_RPC_PROXY=true.The proxy accepts only supported demo methods, batches of up to five calls, 128 KiB request bodies, and 2 MiB responses. It rejects cross-site browser requests, prevents redirects, preserves gateway throttling, and sanitizes failures or responses that expose the key. The upstream is fixed to Moderato. The endpoint is public and shares its gateway client's quota.
Enable the same transport in the CI E2E build so live tests exercise the production handler through the preview server. Remove the CI-only forwarding fixture and update mocked browser tests to intercept the proxy too. Without a secret, fork CI can still use the anonymous upstream. Public deployments keep their existing transports until the proxy flag is enabled.
Activation:
TEMPO_RPC_API_KEYin repository Actions secrets.TEMPO_RPC_API_KEYandVITE_RPC_PROXY=truein the docs Vercel project for the intended deployment environments, then redeploy. Only the flag is browser-visible.Validation: all 1,215 unit tests pass, including 23 proxy and transport checks. Type and style checks pass. A running local server returns the expected chain ID through the proxy with a test credential checked by a mocked upstream. The full production build is still running locally. The rendered-page smoke check timed out during initial navigation; an existing loopback-IP account test could not connect to the localhost-bound dev server. Browser E2E validation is incomplete. No production key or deployment settings were changed.
Prompted by: @Zygimantass