mirror of
https://github.com/plausible/analytics.git
synced 2024-12-29 04:22:34 +03:00
24a8aa2821
* Reapply "Sentry context in live views (#3672)" This reverts commit 5449fead160064b8a0081c458cc5dcd34399eb0b. * Make sure `:selection_made` is handled in `GoalSettings.Form` That was a bit unepexcted.. normally `handle_info` is injected by the LiveView use macro and it discards any message gracefully. After switching to `use PlausibleWeb, :live_view` we're also using `PlausibleWeb.Live.Flash` that happens to inject its own receive clause for closing the flash. Which then renders the original, overridable, `handle_info` catch-all obsolete. * Update LV SentryContext only on connected sockets (first mount already has the right context coming from Sentry plug) * Make sure Live.ChoosePlan passes `current_user_id` session key
107 lines
2.8 KiB
Elixir
107 lines
2.8 KiB
Elixir
defmodule PlausibleWeb.Endpoint do
|
|
use Plausible
|
|
use Sentry.PlugCapture
|
|
use Phoenix.Endpoint, otp_app: :plausible
|
|
|
|
@session_options [
|
|
# key to be patched
|
|
key: "",
|
|
store: :cookie,
|
|
signing_salt: "I45i0SKHEku2f3tJh6y4v8gztrb/eG5KGCOe/o/AwFb7VHeuvDOn7AAq6KsdmOFM",
|
|
# 5 years, this is super long but the SlidingSessionTimeout will log people out if they don't return for 2 weeks
|
|
max_age: 60 * 60 * 24 * 365 * 5,
|
|
extra: "SameSite=Lax"
|
|
# domain added dynamically via RuntimeSessionAdapter, see below
|
|
]
|
|
|
|
socket("/live", Phoenix.LiveView.Socket,
|
|
websocket: [
|
|
check_origin: true,
|
|
connect_info: [
|
|
:peer_data,
|
|
:uri,
|
|
:user_agent,
|
|
session: {__MODULE__, :runtime_session_opts, []}
|
|
]
|
|
]
|
|
)
|
|
|
|
# Serve at "/" the static files from "priv/static" directory.
|
|
#
|
|
# You should set gzip to true if you are running phx.digest
|
|
# when deploying your static files in production.
|
|
plug(PlausibleWeb.Tracker)
|
|
plug(PlausibleWeb.Favicon)
|
|
|
|
plug(Plug.Static,
|
|
at: "/",
|
|
from: :plausible,
|
|
gzip: false,
|
|
only: ~w(css js images favicon.ico robots.txt)
|
|
)
|
|
|
|
on_full_build do
|
|
plug(Plug.Static,
|
|
at: "/kaffy",
|
|
from: :kaffy,
|
|
gzip: false,
|
|
only: ~w(assets)
|
|
)
|
|
end
|
|
|
|
# Code reloading can be explicitly enabled under the
|
|
# :code_reloader configuration of your endpoint.
|
|
if code_reloading? do
|
|
socket("/phoenix/live_reload/socket", Phoenix.LiveReloader.Socket)
|
|
plug(Phoenix.LiveReloader)
|
|
plug(Phoenix.CodeReloader)
|
|
end
|
|
|
|
plug(Plug.RequestId)
|
|
plug(PromEx.Plug, prom_ex_module: Plausible.PromEx)
|
|
plug(Plug.Telemetry, event_prefix: [:phoenix, :endpoint])
|
|
|
|
plug(Plug.Parsers,
|
|
parsers: [:urlencoded, :multipart, :json],
|
|
pass: ["*/*"],
|
|
json_decoder: Phoenix.json_library()
|
|
)
|
|
|
|
plug(Sentry.PlugContext)
|
|
|
|
plug(Plug.MethodOverride)
|
|
plug(Plug.Head)
|
|
|
|
plug(:runtime_session)
|
|
|
|
plug(CORSPlug)
|
|
plug(PlausibleWeb.Router)
|
|
|
|
def secure_cookie?, do: config!(:secure_cookie)
|
|
|
|
def websocket_url() do
|
|
config!(:websocket_url)
|
|
end
|
|
|
|
def runtime_session(conn, _opts) do
|
|
Plug.run(conn, [{Plug.Session, runtime_session_opts()}])
|
|
end
|
|
|
|
def runtime_session_opts() do
|
|
# `host()` provided by Phoenix.Endpoint's compilation hooks
|
|
# is used to inject the domain - this way we can authenticate
|
|
# websocket requests within single root domain, in case websocket_url()
|
|
# returns a ws{s}:// scheme (in which case SameSite=Lax is not applicable).
|
|
@session_options
|
|
|> Keyword.put(:domain, host())
|
|
|> Keyword.put(:key, "_plausible_#{Application.fetch_env!(:plausible, :environment)}")
|
|
|> Keyword.put(:secure, secure_cookie?())
|
|
end
|
|
|
|
defp config!(key) do
|
|
:plausible
|
|
|> Application.fetch_env!(__MODULE__)
|
|
|> Keyword.fetch!(key)
|
|
end
|
|
end
|