forked from OpenNeo/impress
Emi Matchu
4fff8d88f2
A little architecture trick here! DTI 2020 authorizes support staff requests by means of a secret token, instead of user account stuff. And our support tools still all call DTI 2020 APIs. So here, we bridge the gap: we copy DTI 2020's support secret to this app's environment variables (I needed to update `deploy/files/production.env` and run `bin/deploy:setup` for this!), then users with the new `support_secret` flag have it added to their HTML documents in the meta tags. Then, the JS reads the meta tag. I also fixed an issue in the `deploy/setup.yml` playbook, where I had temporarily commented some stuff out to skip steps one time, and forgot to uncomment them after oops lol! |
||
|---|---|---|
| .. | ||
| application_controller_renderer.rb | ||
| asset_hosts.rb | ||
| assets.rb | ||
| attack.rb | ||
| backtrace_silencers.rb | ||
| content_security_policy.rb | ||
| cookies_serializer.rb | ||
| devise.rb | ||
| filter_parameter_logging.rb | ||
| impress_2020.rb | ||
| inflections.rb | ||
| locale_meta.rb | ||
| mime_types.rb | ||
| permissions_policy.rb | ||
| rack_mini_profiler.rb | ||
| rspec_generator.rb | ||
| secret_token.rb | ||
| sentry.rb | ||
| session_store.rb | ||
| stripe.rb | ||
| wrap_parameters.rb | ||