mirror of
https://github.com/andwati/zitadel.git
synced 2026-10-18 05:52:51 +00:00
c8abf6de74
# Which Problems Are Solved The login container can only serve HTTP. In deployments where a reverse proxy is not used, operators need the login container to terminate TLS itself. Closes #11473 # How the Problems Are Solved The container now supports optional HTTPS via three environment variables that match the pattern already used by the backend server: `ZITADEL_TLS_ENABLED`, `ZITADEL_TLS_CERTPATH`, and `ZITADEL_TLS_KEYPATH`. When `ZITADEL_TLS_ENABLED` is not set or set to `false`, behavior is identical to before. When set to `true`, the server reads the provided certificate and key files and serves HTTPS using the lower-level `getRequestHandlers` API from Next.js. The Docker healthcheck was updated to probe the correct scheme automatically based on the same environment variable. # Additional Changes Added a dockerized integration test that verifies both HTTP and HTTPS modes using testcontainers. # Additional Context The TLS path uses `getRequestHandlers` from `next/dist/server/lib/start-server` instead of `startServer` because the latter rejects self-signed certificates in production mode. This is the same internal API that `startServer` itself calls. --------- Co-authored-by: Copilot <[email protected]>
228 lines
6.9 KiB
JSON
228 lines
6.9 KiB
JSON
{
|
|
"$schema": "../../node_modules/nx/schemas/project-schema.json",
|
|
"targets": {
|
|
"prod": {
|
|
"description": "Runs the Next.js Login application in production mode from the standalone build",
|
|
"continuous": true,
|
|
"dependsOn": [
|
|
"build"
|
|
],
|
|
"defaultConfiguration": "default",
|
|
"configurations": {
|
|
"default": {},
|
|
"test-login-integration": {}
|
|
}
|
|
},
|
|
"dev": {
|
|
"description": "Runs the Next.js Login application in development mode with hot-reloading",
|
|
"continuous": true,
|
|
"dependsOn": [
|
|
"^build"
|
|
]
|
|
},
|
|
"build": {
|
|
"description": "Builds the Next.js Login application in standalone mode for production",
|
|
"cache": true,
|
|
"dependsOn": [
|
|
"^build"
|
|
],
|
|
"inputs": [
|
|
"default",
|
|
"{workspaceRoot}/pnpm-lock.yaml",
|
|
"!{projectRoot}/.env.*",
|
|
"!{projectRoot}/.local.env",
|
|
"!{projectRoot}/integration/**/*",
|
|
"!{projectRoot}/acceptance/**/*",
|
|
"!{projectRoot}/dockerized/**/*",
|
|
"!{projectRoot}/cypress.config.ts"
|
|
],
|
|
"outputs": [
|
|
"{projectRoot}/.next/standalone"
|
|
]
|
|
},
|
|
"pack": {
|
|
"description": "Builds a local Docker image for the ZITADEL Login UI (zitadel/zitadel-login:local). Requires Docker daemon.",
|
|
"dependsOn": [
|
|
"build"
|
|
],
|
|
"command": "docker build -f apps/login/Dockerfile -t zitadel/zitadel-login:local apps/login",
|
|
"cache": false,
|
|
"inputs": [
|
|
"default",
|
|
"{workspaceRoot}/pnpm-lock.yaml",
|
|
"{projectRoot}/Dockerfile",
|
|
"!{projectRoot}/.env.*",
|
|
"!{projectRoot}/integration/**/*",
|
|
"!{projectRoot}/acceptance/**/*"
|
|
]
|
|
},
|
|
"build-vercel": {
|
|
"description": "Builds the Next.js Login application for Vercel deployment",
|
|
"cache": true,
|
|
"dependsOn": [
|
|
"^build"
|
|
],
|
|
"inputs": [
|
|
"default",
|
|
"{workspaceRoot}/pnpm-lock.yaml",
|
|
"!{projectRoot}/.env.*",
|
|
"!{projectRoot}/.local.env",
|
|
"!{projectRoot}/integration/**/*",
|
|
"!{projectRoot}/acceptance/**/*",
|
|
"!{projectRoot}/dockerized/**/*",
|
|
"!{projectRoot}/cypress.config.ts"
|
|
],
|
|
"outputs": [
|
|
"{projectRoot}/.next",
|
|
"!{projectRoot}/.next/cache",
|
|
"!{projectRoot}/.next/standalone"
|
|
]
|
|
},
|
|
"lint": {
|
|
"description": "Runs all linters",
|
|
"dependsOn": [
|
|
"lint-check-*"
|
|
]
|
|
},
|
|
"lint-check-prettier": {
|
|
"description": "Checks code formatting with Prettier",
|
|
"cache": true,
|
|
"inputs": [
|
|
"default"
|
|
]
|
|
},
|
|
"lint-check-next": {
|
|
"description": "Runs Next.js specific lint checks",
|
|
"cache": true,
|
|
"inputs": [
|
|
"default"
|
|
]
|
|
},
|
|
"test": {
|
|
"description": "Runs all tests (unit and integration)",
|
|
"dependsOn": [
|
|
"test-unit",
|
|
"test-integration"
|
|
]
|
|
},
|
|
"test-unit": {
|
|
"description": "Runs unit tests using Vitest",
|
|
"dependsOn": [
|
|
"^build"
|
|
]
|
|
},
|
|
"test-ca": {
|
|
"description": "Runs custom CA certificate integration tests using testcontainers",
|
|
"dependsOn": [
|
|
"build"
|
|
],
|
|
"executor": "nx:run-commands",
|
|
"cache": true,
|
|
"inputs": [
|
|
"default",
|
|
"!{projectRoot}/integration/**/*",
|
|
"!{projectRoot}/acceptance/**/*",
|
|
"!{projectRoot}/dockerized/**/output/**/*"
|
|
],
|
|
"options": {
|
|
"cwd": "{projectRoot}",
|
|
"commands": [
|
|
"pnpm vitest --run --config vitest.config.ca.mts"
|
|
]
|
|
}
|
|
},
|
|
"test-ssl": {
|
|
"description": "Runs TLS integration tests using testcontainers",
|
|
"dependsOn": [
|
|
"build"
|
|
],
|
|
"executor": "nx:run-commands",
|
|
"cache": true,
|
|
"inputs": [
|
|
"default",
|
|
"!{projectRoot}/integration/**/*",
|
|
"!{projectRoot}/acceptance/**/*",
|
|
"!{projectRoot}/dockerized/**/output/**/*"
|
|
],
|
|
"options": {
|
|
"cwd": "{projectRoot}",
|
|
"commands": [
|
|
"pnpm vitest --run --config vitest.config.dockerized.mts dockerized/ssl"
|
|
]
|
|
}
|
|
},
|
|
"test-integration-run-login": {
|
|
"description": "Runs the Login application under test. It has its own target, separate from test-integration, because it's a continuous task.",
|
|
"dependsOn": [
|
|
"build"
|
|
],
|
|
"continuous": true,
|
|
"command": "nx run @zitadel/login:prod:test-login-integration --excludeTaskDependencies"
|
|
},
|
|
"test-integration": {
|
|
"description": "Runs integration tests using Cypress against a running Login and a mocked API",
|
|
"dependsOn": [
|
|
"test-integration-run-login",
|
|
"@zitadel/login-api-mock:build",
|
|
"@zitadel/login-api-mock:serve"
|
|
],
|
|
"executor": "nx:run-commands",
|
|
"options": {
|
|
"cwd": "{projectRoot}",
|
|
"parallel": false,
|
|
"commands": [
|
|
"pnpm cypress install",
|
|
"pnpm wait-on --verbose --interval 2000 --simultaneous 1 --timeout 30m \"tcp:${API_MOCK_STUBS_HOST}:22220\" \"http-get://localhost:3001/ui/v2/login/verify?userId=221394658884845598&code=abc\"",
|
|
"DISPLAY='' pnpm cypress run --headless",
|
|
"nx run @zitadel/login:test-integration-stop"
|
|
]
|
|
},
|
|
"inputs": [
|
|
"default",
|
|
"{workspaceRoot}/pnpm-lock.yaml",
|
|
"!{projectRoot}/acceptance/**/*",
|
|
{ "env": "LOGIN_BASE_URL" }
|
|
]
|
|
},
|
|
"test-integration-stop": {
|
|
"description": "Stops the gRPC mock container used for integration tests.",
|
|
"command": "nx run @zitadel/login-api-mock:down"
|
|
},
|
|
"test-acceptance": {
|
|
"description": "Runs the Playwright acceptance test suite in apps/login/acceptance/ against a running ZITADEL stack. Requires LOGIN_BASE_URL, ZITADEL_API_URL, and ZITADEL_ADMIN_TOKEN to be set (or apps/login/.env.test.local to exist). Run the setup script at acceptance/setup/setup.sh first to seed config.",
|
|
"executor": "nx:run-commands",
|
|
"options": {
|
|
"cwd": "{projectRoot}",
|
|
"command": "pnpm exec playwright test --config acceptance/playwright.config.ts"
|
|
},
|
|
"inputs": [
|
|
"{projectRoot}/acceptance/**",
|
|
"!{projectRoot}/acceptance/playwright-report/**",
|
|
"!{projectRoot}/acceptance/test-results/**",
|
|
"{workspaceRoot}/pnpm-lock.yaml"
|
|
]
|
|
},
|
|
"pack-archive": {
|
|
"description": "Packages the standalone Login application build into an archive",
|
|
"dependsOn": [
|
|
"build"
|
|
],
|
|
"executor": "nx:run-commands",
|
|
"options": {
|
|
"parallel": false,
|
|
"env": {
|
|
"STANDALONE_DIR": "{projectRoot}/.next/standalone",
|
|
"PACK_DIR": "{workspaceRoot}/.artifacts/pack"
|
|
},
|
|
"commands": [
|
|
"mkdir -p ${PACK_DIR}",
|
|
"tar -czf ${PACK_DIR}/zitadel-login.tar.gz -C ${STANDALONE_DIR} ."
|
|
]
|
|
},
|
|
"cache": true,
|
|
"outputs": [
|
|
"{workspaceRoot}/.artifacts/pack/zitadel-login.tar.gz"
|
|
]
|
|
}
|
|
}
|
|
} |