nvm I figured it out; it uses esbuild so you can also just `npx esbuild --bundle --minify src/index.

nvm I figured it out; it uses esbuild so you can also just

npx esbuild --bundle --minify src/index.js > worker.js

npx esbuild --bundle --minify src/index.js > worker.js

npx esbuild --bundle --minify src/index.js > worker.js

npx esbuild --bundle --minify src/index.js > worker.js

FFabulousCupcake nvm I figured it out; it uses esbuild so you can also just `npx esbuild --bundle...

kian•4/20/24, 10:41 AM

there’s also —dry-run and —outdir args to wrangler deploy

FabulousCupcakeOP•4/20/24, 10:41 AM

oh! yeah I needed the dry-run; the outdir still prompted me to deploy

FabulousCupcakeOP•4/20/24, 10:41 AM

thank you

Lambo•4/20/24, 11:30 AM

Is there a known issue around the cloudflare/wrangler-action@v3cloudflare/wrangler-action@v3 sometimes failing to deploy due to binding to D1 failing (error 10021)? I can simply re-run my Action and it then succeeds, so it seems to be a bug. I can raise an issue if required

Victor•4/20/24, 12:00 PM

Hi all, is it possible to access env variables set in wrangler.tomlwrangler.toml outside of the index.ts fech()index.ts fech() method

VVictor Hi all, is it possible to access env variables set in `wrangler.toml` outside of...

Hello, I’m Allie!•4/20/24, 12:02 PM

Not within the global scope. Anything that needs access to the environment has to be called within the context of an incoming event

HHello, I’m Allie!Not within the global scope. Anything that needs access to the environment has t...

Victor•4/20/24, 12:03 PM

Hm okay, thanks. I'll have to restructure some code then

Yakuzo•4/21/24, 10:46 AM

Hi, do you know if there is a way to create this kind of communication scheme between workers on cloudflare or not? ( By this I mean automatically )

ZZach Jensz looking to build an ecommerce site on cloudflare's edge, does anyone have a repo...

rob•4/21/24, 11:25 AM

Backend code can write workers using routes and adding a stuff to db

dave•4/21/24, 12:21 PM

For a Durable Object doing a subrequest, is the timeout still 100 seconds?

khichipichi•4/21/24, 1:19 PM

hi all i want to pay my bill is not possibol

khichipichi•4/21/24, 1:20 PM

how i can pay manually

dave•4/21/24, 3:49 PM

hmm, where should I be putting upload_source_maps = trueupload_source_maps = true?

Isak•4/21/24, 4:42 PM

How does billing work for a websocket client that connects to a durable object on workers? Is cpu time only counted when handling messages from the server?

Chief•4/21/24, 4:56 PM

I saw a few comments about a nodejs polyfill that doesn’t require the libraries we import to use the “node:”prefix, how can we enable this?

I’m imagine most libraries don’t call it like that I’m just wondering how to work around that

Ddave hmm, where should I be putting `upload_source_maps = true`?

Chief•4/21/24, 4:56 PM

Wrangler

CChief Wrangler

dave•4/21/24, 4:56 PM

yeah, I am putting it in my wrangler.toml, but my backtraces don't seem to have symbols still.

Ddave yeah, I am putting it in my wrangler.toml, but my backtraces don't seem to have ...

Chief•4/21/24, 4:57 PM

Where are you looking at your traces?

CChief Where are you looking at your traces?

dave•4/21/24, 4:58 PM

wrangler tail. Example:

  (error) Error
    at getEmailFromOpenID (index.js:20155:11)
    at async handleOAuthCallback (index.js:19653:39)
    at async index.js:10060:5
    at async index.js:10060:5
    at async index.js:17999:3
    at async index.js:17938:3
    at async index.js:17878:3
    at async index.js:15229:5
    at async index.js:10781:62

  (error) Error
    at getEmailFromOpenID (index.js:20155:11)
    at async handleOAuthCallback (index.js:19653:39)
    at async index.js:10060:5
    at async index.js:10060:5
    at async index.js:17999:3
    at async index.js:17938:3
    at async index.js:17878:3
    at async index.js:15229:5
    at async index.js:10781:62

Ddave wrangler tail. Example: ``` (error) Error at getEmailFromOpenID (index.js...

Chief•4/21/24, 5:04 PM

and you're watching for exceptions right? Not just console logging the stack trace.

https://developers.cloudflare.com/workers/observability/source-maps/

Cloudflare Docs

Source maps and stack traces · Cloudflare Workers docs

Adding source maps and generating stack traces for Workers.

CChief and you're watching for exceptions right? Not just console logging the stack tra...

dave•4/21/24, 5:04 PM

oops, you are totally right

dave•4/21/24, 5:04 PM

that makes sense, thank you!

gonsalo•4/21/24, 7:03 PM

can i deploy a nodejs app on cf worker?

Ggonsalo can i deploy a nodejs app on cf worker?

Acе•4/21/24, 7:41 PM

Yes, but not every node library is supported

AAcе Yes, but not every node library is supported

gonsalo•4/21/24, 7:44 PM

is there any list that shows the available ones?

Ggonsalo is there any list that shows the available ones?

Acе•4/21/24, 7:45 PM

Yep it’s here: https://developers.cloudflare.com/workers/runtime-apis/nodejs/

Cloudflare Docs

Node.js compatibility · Cloudflare Workers docs

Implemented Node.js runtime APIs and enablement instructions for your Worker project.

gonsalo•4/21/24, 7:46 PM

liam | helius.dev•4/21/24, 7:48 PM

Is there any way to inline a wrangler env or can you only use json or toml?

Chaika•4/21/24, 11:50 PM

only normal if you're doing a lot in the global scope/initial request, for small scripts like a hello world script the cold start is unnoticable (it takes advantage of the TLS time to elimate cold starts in a lot of cases)

Chaika•4/21/24, 11:52 PM

https://blog.cloudflare.com/eliminating-cold-starts-with-cloudflare-workers
I would also question how exactly you are measuring cold starts

Ryan Djurovich•4/22/24, 6:34 AM

New encryption/decryption library designed for use with Cloudflare Workers / Pages:

simple-secure-webcrypto
https://www.npmjs.com/package/simple-secure-webcrypto

IMO it was more difficult than it should be to find a simple way to encrypt and decrypt data on Cloudflare Workers/Pages. I thought I'd package up my solution to doing this and share it in the hope it will help others.

It's as simple as:

const encryptedData = await encrypt(secret, data);
    const decryptedData = await decrypt(secret, encryptedData);

const encryptedData = await encrypt(secret, data);
    const decryptedData = await decrypt(secret, encryptedData);

where I expected you'd just store the secret as an encrypted environment variable in Workers/Pages.

Under the hood it uses Web Crypto APIs / SubtleCrypto so it has zero package dependencies, and it's using the AES-GCM algorithm for encryption and SHA-256 for HMAC of the IV.

I'd love to get some review and feedback from anyone willing!

npm

simple-secure-webcrypto

Simple and secure encrypt/decrypt functions using Web Crypto API and no dependencies. Latest version: 1.0.2, last published: 7 minutes ago. Start using simple-secure-webcrypto in your project by running npm i simple-secure-webcryptonpm i simple-secure-webcrypto. There are no other projects in the npm registry using simple-secure-webcrypto.

Original message was deleted

Ryan Djurovich•4/22/24, 6:56 AM

great question Leo! GCM checks ciphertext, but when the IV cannot be trusted (e.g. user input such as a Cookie) it must be verified AFAIK?

Original message was deleted

Ryan Djurovich•4/22/24, 7:00 AM

That is what I understood originally was one of the key benefits of GCM. However, as I was working on this I found some docs to suggest you still need to verify the integrity of the IV if you cannot trust the source of it during decrypt. Are you able to point me at any documentation I can use as a reference for this?

For example, MDN explicitly mentions ciphertext is verified but no mention of IV: https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/encrypt#aes-gcm

MDN Web Docs

SubtleCrypto: encrypt() method - Web APIs | MDN

The encrypt() method of the SubtleCrypto interface encrypts data.

Original message was deleted

Ryan Djurovich•4/22/24, 7:11 AM

you're right, just reading the official paper at https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38d.pdf it explicitly lists "the ciphertext, the AAD, the IV, or the tag"

Original message was deleted

Ryan Djurovich•4/22/24, 7:23 AM

can you elaborate?

Original message was deleted

Ryan Djurovich•4/22/24, 7:29 AM

JWE contains additional fields too which in the context of this use case wouldn't make sense to store

Original message was deleted

Ryan Djurovich•4/22/24, 7:35 AM

so i take it https://github.com/mdn/dom-examples/blob/main/web-crypto/encrypt-decrypt/aes-gcm.js is not padding correctly either?

GitHub

dom-examples/web-crypto/encrypt-decrypt/aes-gcm.js at main · mdn/do...

Code examples that accompany various MDN DOM and Web API documentation pages - mdn/dom-examples

Original message was deleted

Ryan Djurovich•4/22/24, 7:39 AM

don't think this is very fair to say, I'm using Web Crypto here, not rolling my own. I'm trying to improve the DX of implementing Web Crypto, because I haven't been able to find any straightforward packages which help close the gap from SubtleCrypto interface to a simple function call. Also appreciate your feedback, have started working on a v2 branch which takes out the HMAC: https://github.com/Nadrama-com/simple-secure-webcrypto/tree/v2

will publish it as a package once I get some additional feedback, would appreciate any further review and input

GitHub

GitHub - Nadrama-com/simple-secure-webcrypto at v2

Simple and secure encrypt/decrypt functions using Web Crypto API and no dependencies - GitHub - Nadrama-com/simple-secure-webcrypto at v2

onnimonni•4/22/24, 9:05 AM

Has anyone been able to succesfully query parquet files in R2 bucket through workers?

Jinx ジンクス•4/22/24, 2:19 PM

So I have searched already quite a bit but I'm not sure where or how I unsubscribe from these daily notifications that I reached 50% of my free tier capacity

... I know I'm above 50% and it is fine, it resets daily. But every single day I get 2 - 3 emails from Cloudflare: [Cloudflare]: 50% of daily usage limit for Cloudflare Workers KV operations reached.

Simply put, I'd like to unsubscribe or manage treshold for these notifications and I don't know where or how to do it.

Mitya•4/22/24, 4:36 PM

There are so many seemingly random errors that show up in Wrangler when developing locally that it makes development a bain at times. I raised two such issues last week but have heard nothing back. Any chance a CF dev could take a look at them? Many thanks.

VI•4/22/24, 5:51 PM

I need to pin my workers close to my DB, I'm using smart placement for this.

When enabled, I see a "unsupported backend service" even though I'm only calling Planetscale DB in my worker.

https://developers.cloudflare.com/workers/configuration/smart-placement/#unsupported-back-end-services

Cloudflare Docs

Smart Placement (beta) · Cloudflare Workers docs

Speed up your Worker application by automatically placing your workloads in an optimal location that minimizes latency.

Pato•4/22/24, 6:05 PM

Hey! If i have multiple cloduflare accounts, and need to be pushing changes with wrangler constantly. Is there a way to do that with out having to log in and out in the CLI?

PPato Hey! If i have multiple cloduflare accounts, and need to be pushing changes with...

Hello, I’m Allie!•4/22/24, 6:08 PM

Have a single account with access to all of the other accounts

Hello, I’m Allie!•4/22/24, 6:08 PM

It should then allow you to publish to them

Pato•4/22/24, 6:09 PM

I can't do that, each account is for a different job

PPato I can't do that, each account is for a different job

Hello, I’m Allie!•4/22/24, 6:10 PM

You could provide an API token as an env var? CLOUDFLARE_API_TOKENCLOUDFLARE_API_TOKEN I believe

nvm I figured it out; it uses esbuild so you can also just `npx esbuild --bundle --minify src/index.

Similar Threads