✨ feature(infrastructure): allow cors to cdn

Author: Andrea Aramini, INI-MBM-BNC (EXT)

.env. development

@@ -0,0 +1 @@
+NEXT_PUBLIC_API_BASE_URL = "http://localhost:8080"

.env.production

@@ -3,18 +3,10 @@ WORKDIR /app
 COPY package.json package-lock.json ./
 RUN npm install --ignore-scripts
 
-FROM node:21.7.3-alpine AS builder
-WORKDIR /app
-COPY --from=deps /app/node_modules ./node_modules
-COPY . .
-RUN npm run build
 
 FROM node:21.7.3-alpine AS production
 WORKDIR /app
-ENV NODE_ENV production
 COPY --from=deps /app/node_modules ./node_modules
-COPY --from=builder /app/.next ./.next
-COPY --from=builder /app/public ./public
-COPY --from=builder /app/package.json ./package.json
+COPY . .
 EXPOSE 3000
-ENTRYPOINT [ "npm", "run", "start"]
+ENTRYPOINT [ "npm", "run", "local"]

Dockerfile

@@ -1,7 +1,9 @@
 import axios from 'axios';
 
 const instance = axios.create({
-  baseURL: `${process.env.NEXT_PUBLIC_API_BASE_URL}/api/v1`,
+  baseURL: process.env.NEXT_PUBLIC_API_BASE_URL
+    ? `${process.env.NEXT_PUBLIC_API_BASE_URL}/api/v1`
+    : '/api/v1',
   timeout: 10000,
   headers: { 'Content-Type': 'application/json' },
 });

src/app/lib/client.js

@@ -43,9 +43,9 @@ function createGateway(
       endpointType: apigateway.EndpointType.EDGE,
       securityPolicy: apigateway.SecurityPolicy.TLS_1_2,
     },
-    //check if it is possible to add it later
+    // not able to find any clean way to get cdn url, there is a circular dependency from gateway to cdn and viceversa
     defaultCorsPreflightOptions: {
-      allowOrigins: [`https://${domainName}`],
+      allowOrigins: [`https://${domainName}`, 'd1xsf9hqyfb7um.cloudfront.net'],
       allowMethods: apigateway.Cors.ALL_METHODS,
       allowHeaders: apigateway.Cors.DEFAULT_HEADERS,
       maxAge: cdk.Duration.days(1),
@@ -118,6 +118,7 @@ export function Site({ stack }) {
       cloudfront.addBehavior('/api/v1/*', new origins.RestApiOrigin(gateway), {
         allowedMethods: cf.AllowedMethods.ALLOW_ALL,
         viewerProtocolPolicy: cf.ViewerProtocolPolicy.REDIRECT_TO_HTTPS,
+        cachedMethods: cf.CachedMethods.CACHE_GET_HEAD_OPTIONS,
         cachePolicy: new cf.CachePolicy(stack, 'CachePolicy', {
           cachePolicyName: 'ApiBackend',
           maxTtl: cdk.Duration.seconds(0),