You may need to issue an Advanced Cert from a different CA or upload a Custom Cert, both are paid fe

EErisa You may need to issue an Advanced Cert from a different CA or upload a Custom Ce...

A

Ahmed Qadeer•3/2/24, 7:18 PM

okay i can do that but is it possible that it was working from some years and suddenly gets updated and stops working on them

E

ErisaOP•3/2/24, 7:19 PM

It was probably using digicert before, which was deprecated

E

ErisaOP•3/2/24, 7:20 PM

https://developers.cloudflare.com/ssl/reference/migration-guides/digicert-update/

Cloudflare Docs

DigiCert update · Cloudflare SSL/TLS docs

In the latter half of 2023, Cloudflare will begin deprecating DigiCert as a Certificate Authority available for a variety of certificates:

A

Ahmed Qadeer•3/2/24, 7:24 PM

okay great thanks let me check it

A

Ahmed Qadeer•3/2/24, 7:40 PM

i have changed the advanced certificate from lets encrypt to google

A

Ahmed Qadeer•3/2/24, 7:40 PM

lets see if it works

E

ErisaOP•3/2/24, 9:55 PM

Just the 1,200/5min global rate limit https://developers.cloudflare.com/fundamentals/api/reference/limits/

E

ErisaOP•3/2/24, 9:56 PM

Enterprise customers can also contact Cloudflare Support to raise the limit to a higher value.

on that doc

E

ErisaOP•3/2/24, 9:57 PM

You can specify more than one URL in each request but if youre hitting the global ratelimit with that maxed out then yeah there's not really anything you can do

E

ErisaOP•3/2/24, 10:17 PM

¯\_(ツ)_/¯

C

Chaos_02•3/3/24, 1:06 AM

Hey, is this the correct discord to help me debug some web-service that won't work anymore with proxy on the DNS record enabled?

C

chientrm.com•3/3/24, 2:40 AM

when I

fetch

fetch

inside my SvelteKit to another endpoint of the same app on Pages, why does CF add

pviate=Set-Cookie

pviate=Set-Cookie

to my api response headers tho

C

chientrm.com•3/3/24, 2:40 AM

W

Walshy•3/3/24, 2:43 AM

That's not Cf

WWalshy That's not Cf

C

chientrm.com•3/3/24, 2:44 AM

I fetch the same api endpoint from browser, the response is without

private=Set-Cookie

private=Set-Cookie

, also I don't have part in SvelteKit app that setCookie anywhere

W

Walshy•3/3/24, 2:44 AM

Doesn't mean it's CF :p

W

Walshy•3/3/24, 2:45 AM

From a quick look from Google, it's Svelte

Trying to find the actual code though

W

Walshy•3/3/24, 2:48 AM

Ok so

SvelteKit's CF adapter imports and uses

worktop

worktop

https://github.com/sveltejs/kit/blob/main/packages/adapter-cloudflare/src/worker.js#L68
```
worktop
```
```
worktop
```
adds this here: https://github.com/lukeed/worktop/blob/master/src/cache.ts#L23

W

Walshy•3/3/24, 2:48 AM

Either way, CF wouldn't cache if there's a Set-Cookie here, so it seems to be doing the same effect just differently.

WWalshy Either way, CF wouldn't cache if there's a Set-Cookie here, so it seems to be do...

C

chientrm.com•3/3/24, 2:49 AM

the

cf-cache-status

cf-cache-status

was

HIT

HIT

but I think the

private=Set-Cookie

private=Set-Cookie

cost me another request to

Pages

Pages

C

chientrm.com•3/3/24, 2:50 AM

according to the code

if (isGET && isCacheable(res)) {
  if (res.headers.has('Set-Cookie')) {
    res = new Response(res.body, res);
    res.headers.append('Cache-Control', 'private=Set-Cookie');
  }
}

if (isGET && isCacheable(res)) {
  if (res.headers.has('Set-Cookie')) {
    res = new Response(res.body, res);
    res.headers.append('Cache-Control', 'private=Set-Cookie');
  }
}

if (isGET && isCacheable(res)) {
  if (res.headers.has('Set-Cookie')) {
    res = new Response(res.body, res);
    res.headers.append('Cache-Control', 'private=Set-Cookie');
  }
}

if (isGET && isCacheable(res)) {
  if (res.headers.has('Set-Cookie')) {
    res = new Response(res.body, res);
    res.headers.append('Cache-Control', 'private=Set-Cookie');
  }
}

It only add

private=Set-Cookie

private=Set-Cookie

when there is a

Set-Cookie

Set-Cookie

header

W

Walshy•3/3/24, 2:51 AM

Yup, you sure you ain't getting one back?

W

Walshy•3/3/24, 2:51 AM

I can't see it being removed but I'm guessing it is being?

WWalshy Yup, you sure you ain't getting one back?

C

chientrm.com•3/3/24, 2:53 AM

uhm, I can't tell, there was a request to my

/api

/api

endpoint, I added some

console.log()

console.log()

in there.
The first request there was some

logs

logs

but after that there is none

So that there was a request to that

/api

/api

but I can't tell if it was cached response or not

WWalshy Yup, you sure you ain't getting one back?

C

chientrm.com•3/3/24, 2:54 AM

I'm sure there was no

cookies.set

cookies.set

anywhere else from my authentication endpoint

W

Walshy•3/3/24, 2:54 AM

If you curl the endpoint yourself, get any cookies?

W

Walshy•3/3/24, 2:54 AM

I'm wondering if it's a good old __cf_bm

WWalshy If you curl the endpoint yourself, get any cookies?

C

chientrm.com•3/3/24, 2:57 AM

this is when I

curl

curl

directly from terminal

W

Walshy•3/3/24, 2:57 AM

No set-cookie?

WWalshy No set-cookie?

C

chientrm.com•3/3/24, 2:57 AM

absolutely not

W

Walshy•3/3/24, 2:58 AM

I'm gonna say @James broke something

M

MattIPv4•3/3/24, 2:58 AM

Sounds right

W

Walshy•3/3/24, 2:58 AM

But seriously, not sure :thonk:

WWalshy No set-cookie?

C

chientrm.com•3/3/24, 2:58 AM

https://pastebin.com/0zXfSVPD

M

MattIPv4•3/3/24, 2:59 AM

I didn't see this in the scroll back, but what does the response look like that is the issue?

MMattIPv4 I didn't see this in the scroll back, but what does the response look like that ...

C

chientrm.com•3/3/24, 3:01 AM

it auto add

Set-Cookie

Set-Cookie

to the end of my

cache-control

cache-control

response headers

C

chientrm.com•3/3/24, 3:01 AM

if (isGET && isCacheable(res)) {
  if (res.headers.has('Set-Cookie')) {
    res = new Response(res.body, res);
    res.headers.append('Cache-Control', 'private=Set-Cookie');
  }
}

if (isGET && isCacheable(res)) {
  if (res.headers.has('Set-Cookie')) {
    res = new Response(res.body, res);
    res.headers.append('Cache-Control', 'private=Set-Cookie');
  }
}

if (isGET && isCacheable(res)) {
  if (res.headers.has('Set-Cookie')) {
    res = new Response(res.body, res);
    res.headers.append('Cache-Control', 'private=Set-Cookie');
  }
}

if (isGET && isCacheable(res)) {
  if (res.headers.has('Set-Cookie')) {
    res = new Response(res.body, res);
    res.headers.append('Cache-Control', 'private=Set-Cookie');
  }
}

Although I don't

cookies.set

cookies.set

anywhere through my app

M

MattIPv4•3/3/24, 3:02 AM

Can you share the full response headers, when they're being problematic?

MMattIPv4 Can you share the full response headers, when they're being problematic?

C

chientrm.com•3/3/24, 3:05 AM

So there was

+server.ts

+server.ts

+server.ts

+server.ts GET acts as an api endpoint

C

chientrm.com•3/3/24, 3:05 AM

and another

+page.server.ts

+page.server.ts

+page.server.ts

+page.server.ts which

fetch

fetch

to that endpoint for data

C

chientrm.com•3/3/24, 3:05 AM

here's the response headers from that

fetch

fetch

C

chientrm.com•3/3/24, 3:05 AM

accept-ranges: bytes
age: 31883
cache-control: public, immutable, max-age=31536000, private=Set-Cookie
cf-cache-status: HIT
cf-ray: 85e665e1b0e66027-SIN
connection: keep-alive
content-length: 4933
content-type: application/json
date: Sun, 03 Mar 2024 03:04:14 GMT
last-modified: Sat, 02 Mar 2024 18:12:51 GMT
server: cloudflare
vary: Accept-Encoding

accept-ranges: bytes
age: 31883
cache-control: public, immutable, max-age=31536000, private=Set-Cookie
cf-cache-status: HIT
cf-ray: 85e665e1b0e66027-SIN
connection: keep-alive
content-length: 4933
content-type: application/json
date: Sun, 03 Mar 2024 03:04:14 GMT
last-modified: Sat, 02 Mar 2024 18:12:51 GMT
server: cloudflare
vary: Accept-Encoding

accept-ranges: bytes
age: 31883
cache-control: public, immutable, max-age=31536000, private=Set-Cookie
cf-cache-status: HIT
cf-ray: 85e665e1b0e66027-SIN
connection: keep-alive
content-length: 4933
content-type: application/json
date: Sun, 03 Mar 2024 03:04:14 GMT
last-modified: Sat, 02 Mar 2024 18:12:51 GMT
server: cloudflare
vary: Accept-Encoding

accept-ranges: bytes
age: 31883
cache-control: public, immutable, max-age=31536000, private=Set-Cookie
cf-cache-status: HIT
cf-ray: 85e665e1b0e66027-SIN
connection: keep-alive
content-length: 4933
content-type: application/json
date: Sun, 03 Mar 2024 03:04:14 GMT
last-modified: Sat, 02 Mar 2024 18:12:51 GMT
server: cloudflare
vary: Accept-Encoding

C

chientrm.com•3/3/24, 3:06 AM

in my

+server.ts

+server.ts

+server.ts

+server.ts response, I do

setHeaders({ 'cache-control': 'public, immutable, max-age=31536000' });

setHeaders({ 'cache-control': 'public, immutable, max-age=31536000' });

setHeaders({ 'cache-control': 'public, immutable, max-age=31536000' });

setHeaders({ 'cache-control': 'public, immutable, max-age=31536000' });

C

chientrm.com•3/3/24, 3:07 AM

it was

@sveltejs/adapter-cloudflare

@sveltejs/adapter-cloudflare

auto append

private=Set-Cookie

private=Set-Cookie

if there was another headers

Set-Cookie

Set-Cookie

You may need to issue an Advanced Cert from a different CA or upload a Custom Cert, both are paid fe

Similar Threads

Similar Threads

Similar Threads