has anyone got experience using heroku?
i deployed...
# servern
Nikky
10/21/2019, 5:25 AMhas anyone got experience using heroku?
i deployed my app there yesterday, everything worked.. now i am opening it again and my broswer
fetch Copy code
Access to fetch at '<https://pentagame.herokuapp.com/api/status>' from origin '<http://pentagame.herokuapp.com>' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource. If an opaque response serves your needs, set the request's mode to 'no-cors' to fetch the resource with CORS disabled.m
Marc Knaup
10/21/2019, 5:30 AMuse https
https://pentagame.herokuapp.com
n
Nikky
10/21/2019, 5:50 AMwell i do
Nikky
10/21/2019, 5:50 AMi am not sure how i do not use https
m
Marc Knaup
10/21/2019, 5:51 AMYour error message states that you were on
http://pentagame.herokuapp.com
instead of
https://pentagame.herokuapp.com
🙂
n
Nikky
10/21/2019, 5:51 AMthe error happens when i go to multiplayer and the app sends a request to /api/status
Nikky
10/21/2019, 5:51 AMthen i guess thats some redirect issue
m
Marc Knaup
10/21/2019, 5:51 AMmaybe
Marc Knaup
10/21/2019, 5:52 AMIt’s a good idea to make sure that your server always denies unencrypted connections
That’s more secure and makes it obviousw when such an incorrect redirect happens accidentally.
Marc Knaup
10/21/2019, 5:54 AMSee https://github.com/fluidsonic/fluid-server/blob/master/sources/utility/EncryptionEnforcementFeature.kt for how to enforce HTTPS.
See lines 90 and 91 on how to use it (both features must be used):
https://github.com/fluidsonic/fluid-server/blob/6bddfc075ca15e3f7707a07926418f6ff4cee1f0/sources/Baku.kt#L90
n
Nikky
10/21/2019, 6:01 AMwell at least a HttpRedirect Feature does not work
m
Marc Knaup
10/21/2019, 6:01 AMIt also depends on the
XForwardedHeaderSupportMarc Knaup
10/21/2019, 6:02 AMDue to Heroku’s SSL termination Ktor only sees a normal non-HTTPS connection. Using the
XForwardedHeaderSupportn
Nikky
10/21/2019, 6:16 AMdo the features have to be installed in order ?
Nikky
10/21/2019, 6:23 AMyes it has to be.. this works now, i stole your HttpsEnforcer for now
đź‘Ť 1
m
Marc Knaup
10/21/2019, 6:24 AMdo the features have to be installed in order ?yes