Conversation
This comment was marked as outdated.
This comment was marked as outdated.
This comment was marked as outdated.
This comment was marked as outdated.
|
Build failed. ✔️ pre-commit SUCCESS in 1m 50s |
Venefilyn
left a comment
There was a problem hiding this comment.
Looks like a good start! I think going with /v1 etc. instead of /api/v1 is fine. Would API documentation go to /v1/docs or /docs?
| # Swagger and ReDoc don't work without these | ||
| "style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; " | ||
| "script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; " |
There was a problem hiding this comment.
Something we should track in a separate issue. If auth ever becomes something Packit implements this might then be a security threat - especially with JS scripts
Currently it goes under |
Ah okay. Yeah I'd say put it under the specific api version due to using versioning |
|
Build failed. ✔️ pre-commit SUCCESS in 1m 53s |
Introduce FastAPI running with Uvicorn (+Gunicorn in prod/stg), keep old Flask endpoints under /api hardcoded as WSGI. New endpoints will come under /v1, Swagger is at /docs and Redoc under /redoc.
We no longer run httpd.
majamassarini
left a comment
There was a problem hiding this comment.
I think we should land this on stg soon, because now our stg service instance is down.
Thanks!
|
recheck |
|
Build succeeded. ✔️ pre-commit SUCCESS in 1m 56s |
|
I fixed the staging in #2750 so I would wait with merging this until Monday afternoon (prod deployment), so that this can be observed a bit more in staging. |
|
Unfortunately, with the recent capacity reduction of our team, we needed to deprioritise few of the epics so that we are able to deliver the high-prio ones (see board). I won't merge this until we have the necessary capacity to continue with the epic, as changing the framework may introduce additional work. |
Merge after #2749 (needed for tests to pass)
Fixes #2715
To discuss:
TODO:
security_and_https_middlewaremoreRELEASE NOTES BEGIN
N/A
RELEASE NOTES END