Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

rum challenge handler #457

Open
langswei opened this issue Nov 15, 2023 · 3 comments
Open

rum challenge handler #457

langswei opened this issue Nov 15, 2023 · 3 comments
Labels
question Further information is requested

Comments

@langswei
Copy link

Overview

We introduced a RUM challenge as an alternative to TXT record for domain verification. The idea was to make it easy or feasible for authors, although we haven't yet documented the steps so some of what I'm writing is speculative.

Details

This code expects a challenge URL to end in _rum-challenge however the underscore _ character is not part of the URL even if the document has that char in the name. Therefore it seems that we are not meeting the goal of making it easy for authors to manage.

if (!request.url.pathname.endsWith('/_rum-challenge')) {

Proposed Actions

Let's discuss the goal here. Maybe the _ is allowed in files from github, so maybe project developers rather than authors should handle this task. Or maybe we should change the rum challenge URL to not expect to see the _ so authors can manage it.

@langswei langswei added the question Further information is requested label Nov 15, 2023
@davidnuescheler
Copy link

i don't think that anything that has to do with run-query should have impact on the pipeline... i also think that in the helix5 RUM model we really don't need that anymore as the association of RUM request with a project will become trivial.

@langswei
Copy link
Author

i don't think that anything that has to do with run-query should have impact on the pipeline

Then we should discuss a rollback of #442. cc: @trieloff

in the helix5 RUM model we really don't need that anymore as the association of RUM request with a project will become trivial.

Can you elaborate? By "RUM request", unclear to me if you are referring to the sampleRUM collection request or a later user run-query request. Will domain keys be obsolete?

@tripodsan
Copy link
Contributor

tripodsan commented Nov 20, 2023

I think we should discuss this again internally on how the domain key validation works.
@davidnuescheler: @trieloff and I discussed this and found it acceptable to add the domain key challenge to the pipeline. The alternative would be too expensive (new service for aws+cf, extra complicated logic in vcl, etc)

afaiu, this issue is only about using a different character than _ in the challenge path, as it is rejected by .hlx.page

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
Projects
None yet
Development

No branches or pull requests

3 participants