Keeweb config password#

Note those required headers for pre-flight requests - currently you're only passing two of them. Any others are ignored.įor regular (non-OPTIONS) requests, the following are the only meaningful CORS response headers: Access-Control-Allow Origin (required), Access-Control-Allow Credentials (optional) and Access-Control-Expose-Headers (optional). Without getting into the details of your nginx setup, it's not going to work anyway, because the CORS header's you're returning are incorrect.įor preflight (OPTIONS) requests, the following are the only meaningful CORS response headers: Access-Control-Allow Origin, (required), Access-Control-Allow Credentials (optional), Access-Control-Allow-Methods, (required), Access-Control-Allow-Headers, (required) and Access-Control-Max-Age, (optional). Extra domains can be added to the map for $cors_site_origin, but would need a bit of tweaking to support domains with different allowed options/headers.

The # in the values to match aren't special, they simply serve as separators to allow tests with multiple input variables. # conditionally set headers on actual requests, without 'if', because directive ignored when values are empty strings ('map' default)Īdd_header Access-Control-Allow-Origin $cors_site_acao

# probably overkill, gleaned from others' examplesĪdd_header Access-Control-Allow-Headers 'Accept, Accept-Language, Authorization, Cache-Control, Content-Language, Content-Type, Cookie, DNT, If-Modified-Since, Keep-Alive, Origin, User-Agent, X-Mx-ReqToken, X-Requested-With' Īdd_header Access-Control-Max-Age 1728000 # return early with access headers for valid pre-flightĪdd_header Access-Control-Allow-Origin $cors_site_origin Īdd_header Access-Control-Allow-Credentials $cors_site_acac Īdd_header Access-Control-Allow-Methods 'GET, HEAD, POST, OPTIONS'

# return early without access headers for invalid pre-flight, because origin matched domain I created the file /etc/nginx/snippets/nf which must be included inside the http blocks: # only using 'if' safely with a 'return' as explained in Return uuid.A more compliant solution is a bit more involved but does de-duplicate the regex for domain matching, and can be placed into snippets. app.use(cookieParser()) // collides with sessionĪpp.use(express.static(path.join(_dirname, 'public')))

Keeweb config password#

Var viewPath = path.join(process.cwd(), 'views') Īpp.set( 'views', viewPath) //path.join(_dirname, '/views')) hbs.registerPartials(_dirname + '/views/partials') // uncomment after placing your favicon in /public //app.use(favicon(path.join(_dirname, 'public', 'favicon.ico'))) Īpp.use(bodyParser.json()) Īpp.use(express.static(path.join(_dirname, 'public'))) KeeWeb is a free and open-source password manager compatible with KeePass, available as a web version and desktop apps. It doesn't require any server or additional. environment var environment = new require( './apps/environment')() This webapp is a browser and desktop password manager compatible with KeePass databases. Var session = require( 'express-session') Var bodyParser = require( 'body-parser') Var cookieParser = require( 'cookie-parser')