feat(UI): update API domain to https#1278
Conversation
|
The latest updates on your projects. Learn more about Vercel for Git ↗︎
|
There was a problem hiding this comment.
Pull Request Overview
This PR updates the API domain configuration to use HTTPS instead of HTTP for development environments, improving security by ensuring encrypted communication across all environments.
- Updates development API URLs from HTTP to HTTPS protocol
- Modifies WebSocket connections to use secure WSS protocol in development
- Updates Content Security Policy rules to reflect the HTTPS changes
Reviewed Changes
Copilot reviewed 3 out of 3 changed files in this pull request and generated 2 comments.
| File | Description |
|---|---|
| moon/packages/config/src/index.ts | Updates development URLs to use HTTPS/WSS protocols for API, auth, and sync services |
| moon/apps/web/next.config.js | Updates CSP rules to allow HTTPS connections to development domains |
| moon/apps/sync-server/src/api.ts | Changes base API URL to use HTTPS protocol |
| @@ -1,11 +1,11 @@ | |||
| const WEB_URL_PROD = 'https://app.gitmono.com' | |||
| const WEB_URL_DEV = 'http://app.gitmono.test:3000' | |||
| const WEB_URL_DEV = 'http://app.gitmono.test' | |||
There was a problem hiding this comment.
The WEB_URL_DEV still uses HTTP protocol while other development URLs have been updated to HTTPS. For consistency and security, consider updating this to use HTTPS as well.
| const WEB_URL_DEV = 'http://app.gitmono.test' | |
| const WEB_URL_DEV = 'https://app.gitmono.test' |
| if (process.env.NODE_ENV === 'production') { | ||
| baseUrl = 'http://api.gitmega.com' | ||
| baseUrl = 'https://api.gitmega.com' | ||
| } | ||
|
|
There was a problem hiding this comment.
The production and development environments are now using the same URL. This appears redundant - consider removing the conditional assignment or ensuring the production URL is correctly differentiated from development.
No description provided.