Given that the first tutorial doesn’t pin to the major version, I guess it’s broken since it’ll inst

Given that the first tutorial doesn’t pin to the major version, I guess it’s broken since it’ll install v4. cc @rickyrobinett

Kkian Given that the first tutorial doesn’t pin to the major version, I guess it’s bro...

rickyrobinett•1/3/24, 8:17 PM

Hmm... yes, good catch. Let me work on a PR to update / fix.

daniel•1/3/24, 9:01 PM

is it possible to use local node modules in a worker (with wrangler)? i'm setting up a monorepo and i need some types from a local package in my worker

Kkian 1st one is OpenAI SDK v3, 2nd is v4

dave•1/3/24, 10:24 PM

Ahhh, thanks! Totally missed that.

Hazem•1/4/24, 12:53 AM

Is it to use cloudflare's workers for security research purposes such as brute forcing web hosts, fingerprinting, crawling, etc ?

Hazem•1/4/24, 12:53 AM

all legally ofcourse (bug bounty etc)

Unsmart•1/4/24, 12:53 AM

This has all you need: https://www.cloudflare.com/terms/

Cloudflare

Self-Serve Subscription Agreement | Cloudflare

This page is for those who are interested in our Self-Serve Subscription Agreement.

UUnsmart This has all you need: https://www.cloudflare.com/terms/

Hazem•1/4/24, 12:57 AM

thanks for this! i don't see anything in the Restrictions part that denies this, would love to get confirmation tho as i may have misread it

dave•1/4/24, 2:08 AM

I'm getting really weird console.debug results today.

dave•1/4/24, 2:11 AM

  di_output.analyzeResult?.paragraphs?.forEach((paragraph) => {
    if(paragraph.content.includes("found the basis for the appointment")) {
      console.debug("0_________")
      console.debug(paragraph.content)
      console.debug(paragraph.content)
      console.debug(paragraph.content)
      console.debug("1_________")
      console.debug("hello?")
    }
  })
  console.debug("3_________")
  console.debug("_________")
  console.debug("_________")
  console.debug("_________")

  di_output.analyzeResult?.paragraphs?.forEach((paragraph) => {
    if(paragraph.content.includes("found the basis for the appointment")) {
      console.debug("0_________")
      console.debug(paragraph.content)
      console.debug(paragraph.content)
      console.debug(paragraph.content)
      console.debug("1_________")
      console.debug("hello?")
    }
  })
  console.debug("3_________")
  console.debug("_________")
  console.debug("_________")
  console.debug("_________")

So this is my code... and this is my log:

0_________
"If there is any risk that, pending the hearing of the petition, records may be lost or destroyed, that [object Object]
"If there is any risk that, pending the hearing of the petition, records may be lost or destroyed, that [object Object]
3_________
_________
_________
_________

0_________
"If there is any risk that, pending the hearing of the petition, records may be lost or destroyed, that [object Object]
"If there is any risk that, pending the hearing of the petition, records may be lost or destroyed, that [object Object]
3_________
_________
_________
_________

dave•1/4/24, 2:11 AM

what on earth is going on?

Cyb3r-Jak3•1/4/24, 2:15 AM

There is a bug open related to log messages with

at

at

in them. I know there is a fix PR up but don't remember the number

Unsmart•1/4/24, 2:16 AM

https://github.com/cloudflare/workers-sdk/pull/4683

GitHub

fix: ensure logs containing `at ` not truncated to `at [object Obje...

Fixes #4668.
What this PR solves / how to test:
Previously, logs containing at were always treated as stack trace call sites requiring source mapping. This change updates the call site detection t...

UUnsmart https://github.com/cloudflare/workers-sdk/pull/4683

dave•1/4/24, 2:19 AM

@Cyb3r-Jok3 thank you! Thought I was going crazy.

Is there a temp workaround?

Unsmart•1/4/24, 2:19 AM

do a replaceAll on console.log for "at" and replace with "@" or something

dave•1/4/24, 2:19 AM

lol

dave•1/4/24, 2:20 AM

hmm, downgrade to

3.19.0

3.19.0

is my only safe option right?

dave•1/4/24, 2:29 AM

I had a panic moment thinking I had incorrectly stored JSON in >100,000 files.

nuno•1/4/24, 11:34 AM

Heyo guys!
I'm developing/testing a worker project using the

wrangler dev --remote

wrangler dev --remote

command, but it seems like my DOs aren't updating on the network, that's is intentional? Am I doing something wrong?

Hope someone could help me figure it this out. Thanks in advance.

richtera•1/4/24, 3:18 PM

Api tokens are still not associated with specific pages or workers projects. This is a rather large security problem when using gha or other build systems, because it allows any developer to deploy on any wrangler project with or without a branch tag.

Ranjan Mangla•1/4/24, 5:25 PM

I want to do some file operations using ffmpeg as soon as a file (it should only trigger when the uploaded file is mp4), is uploaded to my storage bucket, and then want to upload the resulting files to another R2 storage bucket using workers

I have gone through the doc, but can't figure out how to do it. can someody please help

Ranjan Mangla•1/4/24, 5:25 PM

I am migrating a script from aws lambda to cloudflare, it was effortless in aws, but cannot figure it out here

kianOP•1/4/24, 5:31 PM

Workers are just JS and can’t spawn child processes, ffmpeg isn’t going to work

Kkian Workers are just JS and can’t spawn child processes, ffmpeg isn’t going to work

Ranjan Mangla•1/4/24, 5:48 PM

can't we use ffmpeg wasm node module?

kianOP•1/4/24, 5:49 PM

It's designed for use in a browser, and I'm not aware of anyone who has got it working on Workers, but you might be able to.

lukas•1/4/24, 6:24 PM

I'm trying to make a fetch request from my worker handler using fetch api to ebay, and the auth headers im passing are not being used?

kianOP•1/4/24, 6:37 PM

What's the code snippet and what makes you think they're not being used?

Kkian What's the code snippet and what makes you think they're not being used?

lukas•1/4/24, 6:55 PM

    const response = await fetch(`https://api.sandbox.ebay.com/buy/browse/v1/item_summary/search?q=iphone`, {
      headers: {
        "Authorization": `Basic ${this.creds}`,
        "Content-type": "application/json",
      }
    })

    const response = await fetch(`https://api.sandbox.ebay.com/buy/browse/v1/item_summary/search?q=iphone`, {
      headers: {
        "Authorization": `Basic ${this.creds}`,
        "Content-type": "application/json",
      }
    })

I have the same setup in postman and it works, but with workers it doesnt

lukas•1/4/24, 6:55 PM

and the issue is that the access token is missing, i.e authorization header

Sean Kerr•1/4/24, 6:57 PM

Make sure this isn't applying to your situation: https://stackoverflow.com/questions/71441897/cloudflare-worker-redirect-stripping-auth-headers

Stack Overflow

Cloudflare Worker redirect stripping auth headers

I set up a Cloudflare worker to redirect to our API gateway since we don't have control of the DNS and can't just set up a CNAME. The redirect works and it passes along the body and all the headers

lukas•1/4/24, 7:00 PM

well its not a redirect

Sean Kerr•1/4/24, 7:01 PM

You've tested the fetch request to verify the status coming back inside the worker isn't for any reason being redirected by ebay?

lukas•1/4/24, 7:01 PM

nope the response headers are exactly the same as the postmans too

Sean Kerr•1/4/24, 7:02 PM

What happens if you change the URL to a server you run somewhere, to see if you receive the header? Trying to eliminate workers being the cause here, or at least identify if it's

fetch()

fetch()

doing it, or something else.

Unsmart•1/4/24, 7:04 PM

I would check that this.creds actually exists... from whats provided that will be the issue.

lukas•1/4/24, 7:08 PM

this.creds

this.creds

does exist, i even manually entered it, but i dont have another server from a different origin to test it against hmm

lukas•1/4/24, 7:12 PM

ok nvm, for some reason the psotman had a saved oauth2 token that was needed and was hidden from the headers for me, must of set it before

lukas•1/4/24, 7:12 PM

woops

CChaika iirc we talked about this before and the answer is probably no because of this a...

dave•1/4/24, 7:20 PM

@HardlyHolidayin’ I finally opened a ticket to get a proper/official response.

Will update you both on when I get a reply.

https://support.cloudflare.com/hc/en-us/requests/3082460

Ddave @HardlyHolidayin’ I finally opened a ticket to get a proper/official response. �...

dave•1/4/24, 8:34 PM

@Chaika @HardlyHolidayin’ Confirmed, it is allowed to cache non-HTML/non-web content from B2 if you're using a Worker.

I asked for permission to share the exact quote, waiting for a reply before I share a screenshot.

Ddave @Chaika @HardlyHolidayin’ Confirmed, it _is_ allowed to cache non-HTML/non-web c...

Chaika•1/4/24, 8:35 PM

you sent that ticket from your startup Enterprise account though right? You can already do anything, cdn terms are only for pro/biz/free

CChaika you sent that ticket from your startup Enterprise account though right? You can ...

dave•1/4/24, 8:36 PM

correct. I also did ask a follow-up if this would apply if I was on a free or pro plan, will let ya know.

lukas•1/4/24, 10:02 PM

curious, what is a good way to store an access token? i was thinking using KV but that is not safe unless you hash the value

in-memory is only available for a period of time and that depends on where the worker is spawned in so it might not even have that in-memory state

whats something else i can do? btw this access token expires

Llukas curious, what is a good way to store an access token? i was thinking using KV bu...

Hello, I’m Allie!•1/4/24, 10:06 PM

KV should be fine, unless you need some kind of "Certified" secret store

HHello, I’m Allie!KV should be fine, unless you need some kind of "Certified" secret store

lukas•1/4/24, 10:09 PM

Ya thats the only option I feel is available + hashing the access token with a secret

Llukas Ya thats the only option I feel is available + hashing the access token with a s...

Hello, I’m Allie!•1/4/24, 10:09 PM

Depending on what Access Token you are trying to secure, that might be overkill too

HHello, I’m Allie!Depending on what Access Token you are trying to secure, that might be overkill ...

lukas•1/4/24, 10:10 PM

ebay access_token to an account so i need it secure

kianOP•1/4/24, 10:10 PM

Why isn't KV suitable?

lukas•1/4/24, 10:10 PM

well thats what i plan to use but i thought using the value as is might not be safe enough so im thinking of hasing it

kianOP•1/4/24, 10:10 PM

What makes it unsafe when not hashed though?

lukas•1/4/24, 10:11 PM

well i guess the question i would ask is, what makes KV secure

di_output.analyzeResult?.paragraphs?.forEach((paragraph) => { if(paragraph.content.includes("found the basis for the appointment")) { console.debug("0_________") console.debug(paragraph.content) console.debug(paragraph.content) console.debug(paragraph.content) console.debug("1_________") console.debug("hello?") } }) console.debug("3_________") console.debug("_________") console.debug("_________") console.debug("_________")

0_________ "If there is any risk that, pending the hearing of the petition, records may be lost or destroyed, that [object Object] "If there is any risk that, pending the hearing of the petition, records may be lost or destroyed, that [object Object] 3_________ _________ _________ _________

const response = await fetch(`https://api.sandbox.ebay.com/buy/browse/v1/item_summary/search?q=iphone`, { headers: { "Authorization": `Basic ${this.creds}`, "Content-type": "application/json", } })

Given that the first tutorial doesn’t pin to the major version, I guess it’s broken since it’ll inst

Similar Threads