Not within the global scope. Anything that needs access to the environment has to be called within t
Not within the global scope. Anything that needs access to the environment has to be called within the context of an incoming event
VHm okay, thanks. I'll have to restructure some code then
YHi, do you know if there is a way to create this kind of communication scheme between workers on cloudflare or not? ( By this I mean automatically )
RBackend code can write workers using routes and adding a stuff to db
DFor a Durable Object doing a subrequest, is the timeout still 100 seconds?
Khi all i want to pay my bill is not possibol
Khow i can pay manually
Dhmm, where should I be putting
upload_source_maps = true?
IHow does billing work for a websocket client that connects to a durable object on workers? Is cpu time only counted when handling messages from the server?
CI saw a few comments about a nodejs polyfill that doesn’t require the libraries we import to use the “node:”prefix, how can we enable this?
I’m imagine most libraries don’t call it like that I’m just wondering how to work around that
I’m imagine most libraries don’t call it like that I’m just wondering how to work around that
CWrangler
CWhere are you looking at your traces?
Dwrangler tail. Example:
Cand you're watching for exceptions right? Not just console logging the stack trace.
https://developers.cloudflare.com/workers/observability/source-maps/
https://developers.cloudflare.com/workers/observability/source-maps/
Cloudflare Docs
Adding source maps and generating stack traces for Workers.
Doops, you are totally right
Dthat makes sense, thank you!
Gcan i deploy a nodejs app on cf worker?
AYes, but not every node library is supported
Gis there any list that shows the available ones?
ACloudflare Docs
Implemented Node.js runtime APIs and enablement instructions for your Worker project.
Gty
LIs there any way to inline a wrangler env or can you only use json or toml?
Conly normal if you're doing a lot in the global scope/initial request, for small scripts like a hello world script the cold start is unnoticable (it takes advantage of the TLS time to elimate cold starts in a lot of cases)
Chttps://blog.cloudflare.com/eliminating-cold-starts-with-cloudflare-workers
I would also question how exactly you are measuring cold starts
I would also question how exactly you are measuring cold starts
RNew encryption/decryption library designed for use with Cloudflare Workers / Pages:
simple-secure-webcrypto
https://www.npmjs.com/package/simple-secure-webcrypto
IMO it was more difficult than it should be to find a simple way to encrypt and decrypt data on Cloudflare Workers/Pages. I thought I'd package up my solution to doing this and share it in the hope it will help others.
It's as simple as:
where I expected you'd just store the secret as an encrypted environment variable in Workers/Pages.
Under the hood it uses Web Crypto APIs / SubtleCrypto so it has zero package dependencies, and it's using the AES-GCM algorithm for encryption and SHA-256 for HMAC of the IV.
I'd love to get some review and feedback from anyone willing!
simple-secure-webcrypto
https://www.npmjs.com/package/simple-secure-webcrypto
IMO it was more difficult than it should be to find a simple way to encrypt and decrypt data on Cloudflare Workers/Pages. I thought I'd package up my solution to doing this and share it in the hope it will help others.
It's as simple as:
where I expected you'd just store the secret as an encrypted environment variable in Workers/Pages.
Under the hood it uses Web Crypto APIs / SubtleCrypto so it has zero package dependencies, and it's using the AES-GCM algorithm for encryption and SHA-256 for HMAC of the IV.
I'd love to get some review and feedback from anyone willing!
npm
Simple and secure encrypt/decrypt functions using Web Crypto API and no dependencies. Latest version: 1.0.2, last published: 7 minutes ago. Start using simple-secure-webcrypto in your project by running
npm i simple-secure-webcrypto. There are no other projects in the npm registry using simple-secure-webcrypto.Rgreat question Leo! GCM checks ciphertext, but when the IV cannot be trusted (e.g. user input such as a Cookie) it must be verified AFAIK?
RThat is what I understood originally was one of the key benefits of GCM. However, as I was working on this I found some docs to suggest you still need to verify the integrity of the IV if you cannot trust the source of it during decrypt. Are you able to point me at any documentation I can use as a reference for this?
For example, MDN explicitly mentions ciphertext is verified but no mention of IV: https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/encrypt#aes-gcm
For example, MDN explicitly mentions ciphertext is verified but no mention of IV: https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/encrypt#aes-gcm
MDN Web Docs
The encrypt() method of the SubtleCrypto interface encrypts data.
Ryou're right, just reading the official paper at https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38d.pdf it explicitly lists "the ciphertext, the AAD, the IV, or the tag"
Rcan you elaborate?
RJWE contains additional fields too which in the context of this use case wouldn't make sense to store
Rso i take it https://github.com/mdn/dom-examples/blob/main/web-crypto/encrypt-decrypt/aes-gcm.js is not padding correctly either?
GitHub
Code examples that accompany various MDN DOM and Web API documentation pages - mdn/dom-examples
Rdon't think this is very fair to say, I'm using Web Crypto here, not rolling my own. I'm trying to improve the DX of implementing Web Crypto, because I haven't been able to find any straightforward packages which help close the gap from SubtleCrypto interface to a simple function call. Also appreciate your feedback, have started working on a v2 branch which takes out the HMAC: https://github.com/Nadrama-com/simple-secure-webcrypto/tree/v2
- will publish it as a package once I get some additional feedback, would appreciate any further review and input
GitHub
Simple and secure encrypt/decrypt functions using Web Crypto API and no dependencies - GitHub - Nadrama-com/simple-secure-webcrypto at v2
OHas anyone been able to succesfully query parquet files in R2 bucket through workers?
JSo I have searched already quite a bit but I'm not sure where or how I unsubscribe from these daily notifications that I reached 50% of my free tier capacity 
... I know I'm above 50% and it is fine, it resets daily. But every single day I get 2 - 3 emails from Cloudflare: [Cloudflare]: 50% of daily usage limit for Cloudflare Workers KV operations reached.
Simply put, I'd like to unsubscribe or manage treshold for these notifications and I don't know where or how to do it.
... I know I'm above 50% and it is fine, it resets daily. But every single day I get 2 - 3 emails from Cloudflare: [Cloudflare]: 50% of daily usage limit for Cloudflare Workers KV operations reached.Simply put, I'd like to unsubscribe or manage treshold for these notifications and I don't know where or how to do it.
MThere are so many seemingly random errors that show up in Wrangler when developing locally that it makes development a bain at times. I raised two such issues last week but have heard nothing back. Any chance a CF dev could take a look at them? Many thanks.
VI need to pin my workers close to my DB, I'm using smart placement for this.
When enabled, I see a "unsupported backend service" even though I'm only calling Planetscale DB in my worker.
https://developers.cloudflare.com/workers/configuration/smart-placement/#unsupported-back-end-services
When enabled, I see a "unsupported backend service" even though I'm only calling Planetscale DB in my worker.
https://developers.cloudflare.com/workers/configuration/smart-placement/#unsupported-back-end-services
Cloudflare Docs
Speed up your Worker application by automatically placing your workloads in an optimal location that minimizes latency.
PHey! If i have multiple cloduflare accounts, and need to be pushing changes with wrangler constantly. Is there a way to do that with out having to log in and out in the CLI?
HHave a single account with access to all of the other accounts
HIt should then allow you to publish to them
PI can't do that, each account is for a different job
HYou could provide an API token as an env var?
CLOUDFLARE_API_TOKEN I believePan add that to the variables in the wrangler.toml?
HNo, I meant an Env Var in the console
HLike
Pohh okay, and instead of login in i just use the api token each time/
HYup
Pthats clever haha
