feat: support cloudflare access when access remote storage

nuxt-hub · Oct 26, 2024 · 6956225 · 6956225
1 parent 50cee14
commit 6956225
Show file tree

Hide file tree

Showing 3 changed files with 30 additions and 1 deletion.
diff --git a/src/features.ts b/src/features.ts
@@ -19,6 +19,10 @@ export interface HubConfig {
   userToken?: string
   env?: string
   version?: string
+  cloudflareAccess?: {
+    clientId: string
+    clientSecret: string
+  }
 
   ai?: boolean
   analytics?: boolean
@@ -310,7 +314,11 @@ export async function setupRemote(_nuxt: Nuxt, hub: HubConfig) {
   const remoteManifest = hub.remoteManifest = await $fetch<HubConfig['remoteManifest']>('/api/_hub/manifest', {
     baseURL: hub.projectUrl as string,
     headers: {
-      authorization: `Bearer ${hub.projectSecretKey || hub.userToken}`
+      authorization: `Bearer ${hub.projectSecretKey || hub.userToken}`,
+      ...(hub.cloudflareAccess?.clientId && hub.cloudflareAccess?.clientSecret && {
+        'CF-Access-Client-Id': hub.cloudflareAccess?.clientId,
+        'CF-Access-Client-Secret': hub.cloudflareAccess?.clientSecret
+      })
     }
   })
     .catch(async (err) => {

diff --git a/src/module.ts b/src/module.ts
@@ -69,6 +69,11 @@ export default defineNuxtModule<ModuleOptions>({
         hyperdrive: {},
         // @ts-expect-error nitro.cloudflare.wrangler is not yet typed
         compatibilityFlags: nuxt.options.nitro.cloudflare?.wrangler?.compatibility_flags
+      },
+      // Cloudflare Access
+      cloudflareAccess: {
+        clientId: process.env.NUXT_HUB_CLOUDFLARE_ACCESS_CLIENT_ID || null,
+        clientSecret: process.env.NUXT_HUB_CLOUDFLARE_ACCESS_CLIENT_SECRET || null
       }
     })
     runtimeConfig.hub = hub

diff --git a/src/types/module.ts b/src/types/module.ts
@@ -155,4 +155,20 @@ export interface ModuleOptions {
       [key: string]: string
     }
   }
+  /**
+   * Cloudflare Access authentication for remote storage.
+   * @see https://hub.nuxt.com/recipes/cloudflare-access
+   */
+  cloudflareAccess?: {
+    /**
+     * The client ID for Cloudflare Access.
+     * @default process.env.NUXT_HUB_CLOUDFLARE_ACCESS_CLIENT_ID
+     */
+    clientId?: string
+    /**
+     * The client secret for Cloudflare Access.
+     * @default process.env.NUXT_HUB_CLOUDFLARE_ACCESS_CLIENT_SECRET
+     */
+    clientSecret?: string
+  }
 }