Is there a way to nuke API keys and other credentials for Pages and generate new ones? I'm investig

Is there a way to nuke API keys and other credentials for Pages and generate new ones?

I'm investigating possibility that one of our Pages API keys + account id had been leaked. Trying to determine if the only option is deleting site and redeploying.

Aamorfati Is there a way to nuke API keys and other credentials for Pages and generate new...

Hello, I’m Allie!•7/10/22, 10:31 AM

You mean your regular CF Account API Credentials, or…?

amorfatiOP•7/10/22, 10:39 AM

No specifically keys from the API section under a page. Like account id and API token

Aamorfati No specifically keys from the API section under a page. Like account id and API ...

Hello, I’m Allie!•7/10/22, 10:41 AM

These here? https://dash.cloudflare.com/profile/api-tokens

amorfatiOP•7/10/22, 10:45 AM

one is account id that shows up under the bottom of this screenshot

amorfatiOP•7/10/22, 10:45 AM

under Zone ID

Walshy•7/10/22, 10:58 AM

You can't change your account ID but that isn't sensitive

Walshy•7/10/22, 10:58 AM

It just identifies your account

Walshy•7/10/22, 10:59 AM

With an API token or API key you could still grab an account ID

Walshy•7/10/22, 10:59 AM

So if you've leaked one of those best thing to do is roll it (and also not leak again :p )

WWalshy So if you've leaked one of those best thing to do is roll it (and also not leak ...

DaniFoldi•7/10/22, 12:10 PM

and also not leak again

said

WWalshy So if you've leaked one of those best thing to do is roll it (and also not leak ...

amorfatiOP•7/10/22, 12:39 PM

npm i -g leakless strategy

WWalshy So if you've leaked one of those best thing to do is roll it (and also not leak ...

Hello, I’m Allie!•7/10/22, 2:17 PM

So what you’re saying is…

Hello, I’m Allie!•7/10/22, 2:17 PM

Don’t pull a you?

Walshy•7/10/22, 2:19 PM

SSenshi nope, it's on github, that's the problem. I could not find how to pass auth toke...

Cyb3r-Jak3•7/10/22, 2:30 PM

If you are checking out a repo you can pass an oauth token to autehnitcate. ie

git clone https://oauth:<your PAT Token>@github.com/...

git clone https://oauth:<your PAT Token>@github.com/...

Walshy•7/10/22, 7:04 PM

that requires ssr

Walshy•7/10/22, 7:04 PM

as soon as we have that yes

Walshy•7/10/22, 7:05 PM

next team are still working on their switchable runtime

Walshy•7/10/22, 7:05 PM

once it's in a stable state we're good to go (in theory - in reality there's still a bit more work to be done but yeah)

sirplumpits•7/10/22, 8:27 PM

Is cloudflare pages suffering from some performance degradation?

Ssirplumpits Is cloudflare pages suffering from some performance degradation?

James•7/10/22, 8:31 PM

where exactly? There was some general issues in LHR earlier today: https://www.cloudflarestatus.com/incidents/qg70r72v0qll

Network Performance Issues in LHR

JJames where exactly? There was some general issues in LHR earlier today: https://www.c...

sirplumpits•7/10/22, 9:45 PM

its gotten a lot better now, pages were really slow before and some images failed to load
it might be a problem on my end

Rex•7/10/22, 10:15 PM

does anybody know how SvelteKit Endpoints are being billed? they don't show up at workers or page functions... am i missing something?

RRex does anybody know how SvelteKit Endpoints are being billed? they don't show up a...

Isaac McFadyen•7/10/22, 10:18 PM

They are Pages Functions.

Isaac McFadyen•7/10/22, 10:19 PM

SvelteKit builds to Functions (a single monolithic Function).

Isaac McFadyen•7/10/22, 10:19 PM

Functions aren't being billed yet, but every request, even static assets, counts towards your 100k Functions quota.

Rex•7/10/22, 10:20 PM

Ouh

Rex•7/10/22, 10:20 PM

Rex•7/10/22, 10:20 PM

im confused cause normally the functions show up here

kian•7/10/22, 10:22 PM

If it was with wrangler's Direct Upload then the UI is currently bugged (Functions/Redirects/Headers don't appear despite being there)

kian•7/10/22, 10:22 PM

I don't actually know if

_worker.js

_worker.js

that Svelte generates appears there either to be fair

Rex•7/10/22, 10:22 PM

Ouh okay that makes sense... i was worried i get banned for abusing a bug or something

Kkian I don't actually know if `_worker.js` that Svelte generates appears there either...

Isaac McFadyen•7/10/22, 10:23 PM

Yeah, it doesn't.

DDeleted User Hi guys, I uploaded my site to cloudflare pages, but now I want to edit the inde...

Eai•7/11/22, 6:08 AM

If you upload a folder from your browser and publish your site, just edit your local index.html and upload the updated folder from the "Create a new deployment" button.

Eai•7/11/22, 6:21 AM

When I looked at the site I uploaded to pages, I noticed that

access-control-allow-origin: *

access-control-allow-origin: *

was added.
I don't want this, so I tried adding the

_headers

_headers

file to remove this header.
I plan to use CI in the future, but for now I'm manually uploading the directory. I uploaded a directory containing the _headers file and it seems to be deleted.
What should I do?

DDeleted User Hi guys, I uploaded my site to cloudflare pages, but now I want to edit the inde...

Walshy•7/11/22, 6:50 AM

You should still have the file locally. Edit that and then re-upload the site

EEai When I looked at the site I uploaded to pages, I noticed that `access-control-al...

Walshy•7/11/22, 6:51 AM

I don't think the dashboard supports _headers right now. If you use wrangler you are good

WWalshy I don't think the dashboard supports _headers right now. If you use wrangler you...

Eai•7/11/22, 7:11 AM

I tried publishing using wrangler, but _headers seems to be ignored.
I can't find _headers by looking at the uploaded files in the dashboard.

EEai I tried publishing using wrangler, but _headers seems to be ignored. I can't fin...

Eai•7/11/22, 7:35 AM

https://github.com/cloudflare/wrangler2/issues/1215
This seems to be the intended behavior. And the same goes for not appearing in the headers tab of the dashboard.
But my site still gets

access-control-allow-origin: *

access-control-allow-origin: *

and maybe I need to report this ...

Original message was deleted

Eai•7/11/22, 8:24 AM

The root directory of the deployed folder.
When deployed with wrangler pages publish .\dist\client\wrangler pages publish .\dist\client\, it was in .\dist\client\_headers.\dist\client\_headers

Eai•7/11/22, 8:25 AM

Yes, I installed this today. It;s 2.0.162.0.16

Eai•7/11/22, 8:29 AM

It fails because node_modules are not there. I will move the client instead and try

kian•7/11/22, 8:32 AM

Greg fixed it in 2.0.15 iirc

kian•7/11/22, 8:32 AM

https://github.com/cloudflare/wrangler2/pull/1323

GitHub

Fix Pages directory resolution by GregBrimble · Pull Request #1323 ...

fix: Correctly resolve directories for 'wrangler pages publish'
Previously, attempting to publish a nested directory or the current directory would result in parsing mangled paths which bro...

Is there a way to nuke API keys and other credentials for Pages and generate new ones? I'm investig

Similar Threads

Similar Threads

Similar Threads