nginx gere completement cors, routes partiellement valides (Post /QCM ,get /QCM valides)

microservices/correction_qcm/src/express/Server.ts

@@ -30,12 +30,12 @@ export class Server {
         this.backend.use(morganMiddleware); //Log API accesses
         this.backend.use(helmet()); //Help to secure express, https://helmetjs.github.io/
         this.backend.use(bodyParser.json());
-        this.backend.use(cors({
+        /*this.backend.use(cors({
             origin: '*' ,
             methods: ['GET', 'POST', 'PUT', 'DELETE', 'OPTIONS'],
             allowedHeaders: ['Authorization', 'Content-Type']
           })); //Allow CORS requests
-
+*/
 
         // Routes
         this.backend.use('/', response_routes);

microservices/cors.conf

-
 # Autoriser toutes les origines
-add_header 'Access-Control-Allow-Origin' '*';
-add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS, PUT, DELETE';
-add_header 'Access-Control-Allow-Headers' 'Authorization, Content-Type';
-add_header 'Access-Control-Max-Age' 1728000;
+add_header 'Access-Control-Allow-Origin' '*' always;
+add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS, PUT, DELETE' always;
+add_header 'Access-Control-Allow-Headers' 'Authorization, Content-Type' always;
+add_header 'Access-Control-Max-Age' 1728000 always;
 
-# Gérer uniquement les requêtes OPTIONS avec 204
+# Gérer les pré-requêtes OPTIONS correctement
 if ($request_method = 'OPTIONS') {
+    add_header 'Access-Control-Allow-Origin' '*' always;
+    add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS, PUT, DELETE' always;
+    add_header 'Access-Control-Allow-Headers' 'Authorization, Content-Type' always;
+    add_header 'Access-Control-Max-Age' 1728000 always;
     add_header 'Content-Length' 0;
     add_header 'Content-Type' 'text/plain charset=UTF-8';
     return 204;

microservices/creation_qcm/src/express/Server.ts

@@ -29,12 +29,12 @@ export class Server {
         this.backend.use(morganMiddleware); //Log API accesses
         this.backend.use(helmet()); //Help to secure express, https://helmetjs.github.io/
         this.backend.use(bodyParser.json());
-        this.backend.use(cors({
+        /*this.backend.use(cors({
             origin: '*' ,
             methods: ['GET', 'POST', 'PUT', 'DELETE', 'OPTIONS'],
             allowedHeaders: ['Authorization', 'Content-Type']
           })); //Allow CORS requests
-
+*/
 
         // Routes
         this.backend.use('/', qcm_routes);

microservices/navigation_qcm/pom.xml

-<?xml version="1.0" encoding="UTF-8"?>
-<project xmlns="http://maven.apache.org/POM/4.0.0"
-         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
-         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
-    <modelVersion>4.0.0</modelVersion>
-
-    <groupId>com.example</groupId>
-    <artifactId>navigation_qcm</artifactId>
-    <version>1.0-SNAPSHOT</version>
-    <packaging>jar</packaging>
-
-    <name>Navigation_qcm Microservice</name>
-
-    <dependencies>
-        <!-- Ajoute ici les dépendances spécifiques à ton microservice -->
-        <dependency>
-            <groupId>org.springframework.boot</groupId>
-            <artifactId>spring-boot-starter-web</artifactId>
-            <version>2.5.4</version>
-        </dependency>
-    </dependencies>
-
-    <build>
-        <plugins>
-            <plugin>
-                <groupId>org.apache.maven.plugins</groupId>
-                <artifactId>maven-compiler-plugin</artifactId>
-                <version>3.8.1</version>
-                <configuration>
-                    <source>1.8</source>
-                    <target>1.8</target>
-                </configuration>
-            </plugin>
-        </plugins>
-    </build>
-</project>

microservices/navigation_qcm/sonar-project.properties

-sonar.projectKey=navigation_qcm
-sonar.projectName=Navigation QCM Microservice
-sonar.projectVersion=1.0-SNAPSHOT
-sonar.sources=src
-sonar.tests=test
-sonar.language=ts
-sonar.typescript.tsconfigPath=tsconfig.json
-sonar.sourceEncoding=UTF-8
-sonar.exclusions=node_modules/**,target/**,prisma/migrations/**
-sonar.test.inclusions=**/*.test.ts
-sonar.typescript.lcov.reportPaths=coverage/lcov.info
\ No newline at end of file

microservices/nginx.conf

@@ -24,66 +24,157 @@ http {
 
         location /reponseCorrect/ {
             proxy_pass http://service-correction-qcm:30992;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_pass_request_headers on;
+proxy_set_header Authorization $http_authorization;
+
             include cors.conf;
         }
 
         location /responses_QCM/ {
             proxy_pass http://service-correction-qcm:30992;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_pass_request_headers on;
+proxy_set_header Authorization $http_authorization;
+
             include cors.conf;
         }
 
         location /feedback {
             proxy_pass http://service-correction-qcm:30992;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_pass_request_headers on;
+proxy_set_header Authorization $http_authorization;
+
             include cors.conf;
         }
 
         location /QCM {
             proxy_pass http://service-creation-qcm:30992;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_pass_request_headers on;
+proxy_set_header Authorization $http_authorization;
+
             include cors.conf;
         }
 
         location /QCM/ {
             proxy_pass http://service-creation-qcm:30992;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_pass_request_headers on;
+proxy_set_header Authorization $http_authorization;
+
             include cors.conf;
         }
 
         location /numeric_question {
             proxy_pass http://service-creation-qcm:30992;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_pass_request_headers on;
+proxy_set_header Authorization $http_authorization;
+
             include cors.conf;
         }
 
         location /response {
             proxy_pass http://service-realise-qcm:30992;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_pass_request_headers on;
+proxy_set_header Authorization $http_authorization;
+
             include cors.conf;
         }
 
         location /terminer {
             proxy_pass http://service-realise-qcm:30992;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_pass_request_headers on;
+proxy_set_header Authorization $http_authorization;
+
             include cors.conf;
         }
 
         location /question {
             proxy_pass http://service-realise-qcm:30992;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_pass_request_headers on;
+proxy_set_header Authorization $http_authorization;
+
             include cors.conf;
         }
 
         location /realised_QCMs {
             proxy_pass http://service-search-qcm:30992;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_pass_request_headers on;
+proxy_set_header Authorization $http_authorization;
+
             include cors.conf;
         }
 
         location /created_QCMs {
             proxy_pass http://service-search-qcm:30992;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_pass_request_headers on;
+proxy_set_header Authorization $http_authorization;
+
             include cors.conf;
         }
 
         location /true_false_question {
             proxy_pass http://service-creation-qcm:30992;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_pass_request_headers on;
+proxy_set_header Authorization $http_authorization;
+
             include cors.conf;
         }
 
         location /join {
             proxy_pass http://service-realise-qcm:30992;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_pass_request_headers on;
+proxy_set_header Authorization $http_authorization;
+
             include cors.conf;
         }
 

microservices/realise_qcm/src/express/Server.ts

@@ -30,12 +30,12 @@ export class Server {
         this.backend.use(morganMiddleware); //Log API accesses
         this.backend.use(helmet()); //Help to secure express, https://helmetjs.github.io/
         this.backend.use(bodyParser.json());
-        this.backend.use(cors({
+        /*this.backend.use(cors({
             origin: '*' ,
             methods: ['GET', 'POST', 'PUT', 'DELETE', 'OPTIONS'],
             allowedHeaders: ['Authorization', 'Content-Type']
           })); //Allow CORS requests
-
+*/
 
         // Routes
         this.backend.use('/', questions_routes);

microservices/search_qcm/src/express/Server.ts

@@ -30,12 +30,12 @@ export class Server {
         this.backend.use(morganMiddleware); //Log API accesses
         this.backend.use(helmet()); //Help to secure express, https://helmetjs.github.io/
         this.backend.use(bodyParser.json());
-        this.backend.use(cors({
+        /*this.backend.use(cors({
             origin: '*' ,
             methods: ['GET', 'POST', 'PUT', 'DELETE', 'OPTIONS'],
             allowedHeaders: ['Authorization', 'Content-Type']
           })); //Allow CORS requests
-
+*/
         // Routes
         this.backend.use('/', questions_routes);
         this.backend.use(express.json());