fix: fix wss connect by adding check_origin config

mbta · Aug 6, 2024 · 2593fa6 · 2593fa6
1 parent c007680
commit 2593fa6
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 2 deletions.
diff --git a/config/prod.exs b/config/prod.exs
@@ -13,6 +13,11 @@ import Config
 config :arrow,
   shape_storage_enabled?: true
 
+config :arrow, :websocket_check_origin, [
+  "https://*.mbta.com",
+  "https://*.mbtace.com"
+]
+
 config :arrow, ArrowWeb.Endpoint,
   http: [:inet6, port: 4000],
   url: [host: "example.com", port: 80],

diff --git a/lib/arrow_web/endpoint.ex b/lib/arrow_web/endpoint.ex
@@ -13,11 +13,14 @@ defmodule ArrowWeb.Endpoint do
   ]
 
   socket "/socket", ArrowWeb.UserSocket,
-    websocket: true,
+    websocket: [check_origin: Application.compile_env(:arrow, :websocket_check_origin, false)],
     longpoll: false
 
   socket "/live", Phoenix.LiveView.Socket,
-    websocket: [connect_info: [session: @session_options]],
+    websocket: [
+      connect_info: [session: @session_options],
+      check_origin: Application.compile_env(:arrow, :websocket_check_origin, false)
+    ],
     longpoll: [connect_info: [session: @session_options]]
 
   # Serve at "/" the static files from "priv/static" directory.