nihalashetty
ae67bff5a3
Self-hosted platform for building, testing, and shipping LangChain/LangGraph agents. Deep-agent sub-agents on the canvas, a live tracing/observability timeline, auto-provisioned built-in tools with import/export, per-environment tool variables, streamed evaluations, and per-user auth token forwarding.
43 lines
2.2 KiB
TypeScript
43 lines
2.2 KiB
TypeScript
import { NextResponse } from "next/server";
|
|
import type { NextRequest } from "next/server";
|
|
|
|
/* Security headers for every app route. The /embed widget is intentionally framable by the
|
|
project's configured allowed_origins (Phase 3b); every OTHER route - the authenticated operator
|
|
dashboard - is never framable, to stop clickjacking of one-click destructive actions (audit M7).
|
|
Static assets are excluded from the matcher. */
|
|
export const config = { matcher: ["/((?!_next/static|_next/image|favicon.ico).*)"] };
|
|
|
|
export async function middleware(req: NextRequest) {
|
|
const res = NextResponse.next();
|
|
res.headers.set("X-Content-Type-Options", "nosniff");
|
|
res.headers.set("Referrer-Policy", "strict-origin-when-cross-origin");
|
|
|
|
if (req.nextUrl.pathname === "/embed") {
|
|
// Widget: restrict which sites may embed it via `frame-ancestors`, derived from the project's
|
|
// configured allowed_origins. Default 'self' blocks external embedding until a project
|
|
// explicitly allow-lists an origin - a secure default.
|
|
const key = req.nextUrl.searchParams.get("key");
|
|
let origins: string[] = [];
|
|
if (key) {
|
|
try {
|
|
// Resolve the config from the backend via a BUILD-time-trusted base, never the request's
|
|
// own origin: req.nextUrl.origin reflects the (spoofable) Host header, so using it to build
|
|
// the fetch target is an SSRF vector. FORGE_API_URL is the same internal API address the
|
|
// Next rewrite proxies to (container-internal in compose, 127.0.0.1:8000 on host dev).
|
|
const apiBase = (process.env.FORGE_API_URL || "http://127.0.0.1:8000").replace(/\/$/, "");
|
|
const r = await fetch(`${apiBase}/v1/embed/${encodeURIComponent(key)}/config`, { cache: "no-store" });
|
|
if (r.ok) origins = (await r.json())?.allowed_origins || [];
|
|
} catch {
|
|
/* fall back to the secure default below */
|
|
}
|
|
}
|
|
const ancestors = ["'self'", ...origins].join(" ");
|
|
res.headers.set("Content-Security-Policy", `frame-ancestors ${ancestors}`);
|
|
} else {
|
|
// Operator dashboard + everything else: never framable (clickjacking defense, audit M7).
|
|
res.headers.set("Content-Security-Policy", "frame-ancestors 'none'");
|
|
res.headers.set("X-Frame-Options", "DENY");
|
|
}
|
|
return res;
|
|
}
|