Cloudflare Developers•2y ago

majority have node depndencies not supported by workers trying to make a custom idp making me wanna

majority have node depndencies not supported by workers trying to make a custom idp making me wanna shoot myself

PopoOP•3/5/24, 12:47 PM

cheapskate boss forcing me to use workers cus its free

PopoOP•3/5/24, 12:47 PM

this prolly gonna cost cents in other serverless stuff

PPopo majority have node depndencies not supported by workers trying to make a custom ...

Mitya•3/5/24, 12:50 PM

In my (admittedly limited) experience, the only problems using Node with Workers (and serverless platforms in general) is with modules that rely on

fs

fs

. Filesystem doesn't really make sense as a concept when using Workers. I haven't had any other issues using node modules.

PopoOP•3/5/24, 12:50 PM

all the liblaries for saml stuff uses fs

Mitya•3/5/24, 12:58 PM

Yeah admittedly you're gonna have a tough time if you rely on

fs

fs

. I get round this by using third-party auth via Auth0 (mainly JWT, but think they do SAML too.) May not be an option for you, of course.

Foreignity•3/5/24, 1:09 PM

Hello CF community! I would like to implement auth system with Workers, I tried to look in many place, but can't seem to find a good and easy solution. I don't need anything fancy, just signing up/in users, save their data (email, full name, company, phone number) and hash their password. Has anyone managed to do it via Workers, or is there any resource on how to achieve this?

FForeignity Hello CF community! I would like to implement auth system with Workers, I tried ...

Mitya•3/5/24, 1:52 PM

We use the free tier of Auth0 - JWT-based auth.

FForeignity Hello CF community! I would like to implement auth system with Workers, I tried ...

Devon•3/5/24, 2:01 PM

I'm building something like this for a few personal projects. I am in the process of improving the docs and adding docs around setting up outbound email for forgot password flows, etc... but it works for all the things you mentioned above. Note that the password hashing is using salted SHA-256 instead of something like bcrypt as you don't really want long CPU burns on Workers. If this is a concern you can use bcrypt or an external hashing service or whatever. - https://github.com/devondragon/workers-users

GitHub

GitHub - devondragon/workers-users: Cloudflare Workers based User M...

Cloudflare Workers based User Management and Session State Framework - devondragon/workers-users

MMitya We use the free tier of Auth0 - JWT-based auth.

Foreignity•3/5/24, 2:50 PM

Integrated with workers?

Foreignity•3/5/24, 2:51 PM

Thanks @Devon , I will surely check this out.

FForeignity Integrated with workers?

Devon•3/5/24, 3:07 PM

Yes the user management is a Worker + D1. The repo has a Pages example front end, and the session-state Worker. but you don't need to use either of those to leverage the main functionality really...

RRenova Anyone managed to run nestjs in a worker ?

crossbeau•3/5/24, 5:21 PM

did you ever get an answer, or make progress on this ?

SageSphinx63920•3/5/24, 7:31 PM

Currently having problems with getting the email content using an email worker. My question is now: Is this even possible with the EmailMessage object provided from the worker?

SSageSphinx63920 Currently having problems with getting the email content using an email worker. ...

Chaika•3/5/24, 7:44 PM

You mean reading the content? You need an email parser, ex: https://docs.emailengine.app/how-to-parse-emails-with-cloudflare-email-workers/

EmailEngine Blog

How to parse emails with Cloudflare Email Workers?

Parse incoming emails with Cloudflare Email Workers using the postal-mime module.

SageSphinx63920•3/5/24, 7:45 PM

Thats does explain a lot

Isaac McFadyen•3/5/24, 10:04 PM

No. A WebSocket actually starts with a GET request so if you blocked GET requests you'd be blocking the initial WebSocket handshake and nothing could connect.

Isaac McFadyen•3/5/24, 10:04 PM

https://developer.mozilla.org/en-US/docs/Web/API/WebSockets_API/Writing_WebSocket_servers#the_websocket_handshake

Isaac McFadyen•3/5/24, 10:22 PM

That's the only way, really. If you want to accept a websocket with a Worker then you also need to accept HTTP.

Chaika•3/5/24, 10:22 PM

You could make a Custom WAF Rule which checks for the Upgrade header and blocks otherwise

Isaac McFadyen•3/5/24, 10:22 PM

Ah yes, actually that could work.

Chaika•3/5/24, 10:22 PM

the usual put Worker on Custom Domain / disable workers.dev / Custom rules

Isaac McFadyen•3/5/24, 10:23 PM

Keep in mind bots could send the Upgrade header themselves to trick it. Most bots wouldn't, but anyone targeting specifically your site could do that.

Isaac McFadyen•3/5/24, 10:24 PM

I.e. if someone is specifically targeting you with a DDoS.