Hello , does anyone have a repo or a tutorial they can share on how to implement social login secure

Hello , does anyone have a repo or a tutorial they can share on how to implement social login securely with cloudflare workers, or is it possible at all or do i have to have a server. thanks

Ssyph Hello , does anyone have a repo or a tutorial they can share on how to implement...

fry69•10/25/24, 2:15 PM

Seems possible with e.g. GitHub -> https://github.com/gr2m/cloudflare-worker-github-oauth-login

ac•10/25/24, 3:02 PM

I'm having an issue again with worker builds just getting stuck at "Queued" forever (first discussed workers-and-pages-discussions). Only pushed changes for the single worker, it immediately changed to "Queued" (no other workers in the account were triggered, which is correct). Just stuck on "Queued" forever....

ac•10/25/24, 3:05 PM

Nevermind I guess, it fixed itself after about 10 minutes..

Not really clear what it was waiting on since no builds were running in my account. Is there a global build queue?

Aac Nevermind I guess, it fixed itself after about 10 minutes.. 🤔 Not really clear ...

fry69•10/25/24, 3:08 PM

I assume there is a global distribution step inside the build process which can things slow down if the acknowledgements do not come back in time, but 10 minutes sounds excessive. Then again I have no real clue.

fry69•10/25/24, 3:10 PM

Also if those build processes happen in the CI or via pull from Cloudflare from GitHub 10 min (as an outlier) still seems fine. I know mandatory check pipelines which are measured in hours.

Raiyan•10/25/24, 3:16 PM

is there any way to increase worker size limit without upgrading to paid plan? I've a very small application, might get at most 100 req/day, most probably used by only me, but I couldn't compact it to 1MB limit, and getting paid plan just for the size limit doesn't seem feasible

RRaiyan is there any way to increase worker size limit without upgrading to paid plan? I...

fry69•10/25/24, 3:18 PM

Use multiple worker in a chain?

Ssyph Hello , does anyone have a repo or a tutorial they can share on how to implement...

Raiyan•10/25/24, 3:19 PM

you can use lucia, and if you need a bit more control, you can use arctic, created by the same person as lucia, arctic is a package that makes it easy to generate oauth state and callback links with many providers

fry69•10/25/24, 3:20 PM

Also if you need so few requests and only by you, how about a simple dedicated VPS box?

Ffry69 Use multiple worker in a chain?

Raiyan•10/25/24, 3:20 PM

that would be unmaintainable, of course I can split the functionality to different workers and use rpc, but that would be overcomplication, and my worker size isn't even very big, it is 1.2MB, at the end of the project, it may become 2MB at most, but not more than that

Ffry69 Also if you need so few requests and only by you, how about a simple dedicated V...

Raiyan•10/25/24, 3:21 PM

$4 bucks against free, getting $5 paid plan would be better for having access to much more things

RRaiyan is there any way to increase worker size limit without upgrading to paid plan? I...

Chaika•10/25/24, 3:22 PM

well the root answer to your question is no, although I would make sure you're looking at the gzipped size and not the raw size, might be possible to strip something from your worker as well, 1.2mb is kind of large for a worker

fry69•10/25/24, 3:22 PM

Those $4 give you a small datacenter these days (compared to a few decades back), that is a lot of concentrated (albeit also centralized) compute and space.

CChaika well the root answer to your question is no, although I would make sure you're l...

Raiyan•10/25/24, 3:25 PM

it is 248KB if I calculate gzip

RRaiyan it is 248KB if I calculate gzip

Chaika•10/25/24, 3:26 PM

the gzipped size is what matters. If you do wrangler deploy it tells you the size. Did it still fail to deploy or something?

Raiyan•10/25/24, 3:26 PM

I haven't deployed it, I added a big ass library and it added around 500KB to the bundle

Chaika•10/25/24, 3:27 PM

you can just dump it to a folder like

wrangler deploy --outdir bundled/ --dry-run

wrangler deploy --outdir bundled/ --dry-run

, and should tell you the raw and gzipped

Raiyan•10/25/24, 3:31 PM

I used this command to get the exact size which was 1.2MB, then used esbuild as wrangler uses esbuild to bundle to get the meta file and from there, I saw the library adds around 500KB, but using gzip utility, I got 248KB to be the file size

Raiyan•10/25/24, 3:32 PM

there is now static hosting in workers, how that works?

Raiyan•10/25/24, 3:32 PM

is it bundled with the worker itself?

RRaiyan I used this command to get the exact size which was 1.2MB, then used esbuild as ...

Chaika•10/25/24, 3:32 PM

Not sure I would trust the gzip utility, could be different compression levels and such, I would go with the dry run or actual deployment

RRaiyan is it bundled with the worker itself?

Chaika•10/25/24, 3:32 PM

completely separate

CChaika Not sure I would trust the gzip utility, could be different compression levels a...

Raiyan•10/25/24, 3:33 PM

oh I just saw it also shows the gzip size in dry run, didn't notice that, it is 248KB

Chaika•10/25/24, 3:34 PM

then no need to worry about size after all

Raiyan•10/25/24, 3:34 PM

thanks for the help, I started wondering where can I deploy it then

DiamondDragon•10/25/24, 4:17 PM

Reading more into RPCs

https://github.com/cloudflare/workers-sdk/issues/1182

am I correct assuming if one has a worker calling out to another 2 workers using RPC, then in dev you have to have

wrangler dev

wrangler dev

running on all 3 workers or rely on the other 2 workers being in production in order to work locally with the original worker that calls out to the others?

GitHub

RFC: Multi-worker development · Issue #1182 · cloudflare/workers-sdk

We announced service bindings in November last year, and the APIs in production went GA last month. You can now "bind" workers and make calls between them. So, for example, let's say ...

Ffry69 You `_acme` CNAME (from your sass domain/platform) needs to point to Cloudflare ...

Constantin•10/25/24, 5:21 PM

that's right, but i was curious if i can change the cloudflare.com part in the dcv TXT _acme record, with my sass domain

Constantin•10/25/24, 5:21 PM

so when tenants add the _acme record, to appear more proffesionall showing my domain instead cloudflare

CConstantin that's right, but i was curious if i can change the cloudflare.com part in the d...

fry69•10/25/24, 5:21 PM

No. That is needed so that Cloudflare can request certificates on your behalf.

CConstantin so when tenants add the _acme record, to appear more proffesionall showing my do...

fry69•10/25/24, 5:22 PM

That is the goal.The CNAME is only needed for the above reason (ACME challenge) and will not show up for your clients.

fry69•10/25/24, 5:24 PM

Also this has little to do with workers

Constantin•10/25/24, 5:24 PM

hmm

Constantin•10/25/24, 5:25 PM

looks like the _acme should pe placed by each tenant in their dns

CConstantin looks like the _acme should pe placed by each tenant in their dns

fry69•10/25/24, 5:25 PM

Correct, you need that CNAME for each domain.

Constantin•10/25/24, 5:26 PM

right, so i was curious if i can buy sume cloudflare service to change the ...dcv.cloudflare.com with ...dcv.greatoutdoors-dns.live

Constantin•10/25/24, 5:27 PM

so i can provide to my tenants

CConstantin right, so i was curious if i can buy sume cloudflare service to change the ...dc...

fry69•10/25/24, 5:27 PM

No. This will not work for above reason. Cloudflare needs control over this CNAME so it can answer ACME challenges or Cloudflare cannot setup TLS certificates for the domains, which are needed for the proxy front end.

Constantin•10/25/24, 5:31 PM

well, for now i managed to make them work without placing the _acme TXT record. but i think the domain will not workanymore after the certificate will expire

Constantin•10/25/24, 5:32 PM

so is needed for CF to reissue (automatically) a new certificate.

CConstantin so is needed for CF to reissue (automatically) a new certificate.

fry69•10/25/24, 5:32 PM

Correct.

fry69•10/25/24, 5:32 PM

Every three months.

Constantin•10/25/24, 5:33 PM

can this process be tested somehow, without having to wait 3months?

Constantin•10/25/24, 5:34 PM

or i should just trust that'll work

Constantin•10/25/24, 5:34 PM

if the _txt record is there

CConstantin well, for now i managed to make them work without placing the _acme TXT record. ...

Chaika•10/25/24, 5:34 PM

You can just use http validation

Chaika•10/25/24, 5:34 PM

then no records needed at all other then the one normal cname for http

Constantin•10/25/24, 5:35 PM

this one, of adding records, looks more professional, imho

Chaika•10/25/24, 5:35 PM

doing more work looks more professional?

Chaika•10/25/24, 5:36 PM

not sure I understand that but txts are a bit less possible to break

CConstantin right, so i was curious if i can buy sume cloudflare service to change the ...dc...

Chaika•10/25/24, 5:36 PM

I don't see any reason why you couldn't simply chain cnames, ex, you'd make <hostname>.dcv.yoursite.com unproxied cname to actual dcv.cloudflare.com. It wouldn't be very scalable though, you'd need a record on your end for each customer

Hello , does anyone have a repo or a tutorial they can share on how to implement social login secure

Similar Threads

Similar Threads

Similar Threads