From ce02f6f6ea5820fd14d2904ee9ecf7e6c977bf1d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Roberto=20Pe=C3=B1a?= Date: Tue, 31 Mar 2020 12:43:26 -0500 Subject: [PATCH 1/2] [add] Ruta para acceder de **forma insegura** al dashboard de Sidekiq Es necesario agregar credenciales de acceso a este dashboard --- config.ru | 14 ++++++++++++-- 1 file changed, 12 insertions(+), 2 deletions(-) diff --git a/config.ru b/config.ru index 17849f0..8155622 100644 --- a/config.ru +++ b/config.ru @@ -1,3 +1,13 @@ -# config.ru require "./app" -run App \ No newline at end of file +require "sidekiq" +require 'sidekiq/web' + +Sidekiq.configure_client do |config| + config.redis = { url: "redis://#{ENV['REDIS_HOST']}:#{ENV['REDIS_PORT']}" } +end + +# config.ru +run Rack::URLMap.new( + "/sidekiq-notsecure" => Sidekiq::Web, + "/" => App +) \ No newline at end of file From 747ce2a1684b37bd128ffa90b1277142bf9d6ca6 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Roberto=20Pe=C3=B1a?= Date: Wed, 1 Apr 2020 02:03:17 -0500 Subject: [PATCH 2/2] =?UTF-8?q?[add]=20Autenticaci=C3=B3n=20b=C3=A1sica=20?= =?UTF-8?q?para=20el=20dashboard=20de=20Sidekiq?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .env | 4 +++- config.ru | 11 +++++++++-- 2 files changed, 12 insertions(+), 3 deletions(-) diff --git a/.env b/.env index c35568e..51fb3f0 100644 --- a/.env +++ b/.env @@ -8,4 +8,6 @@ REDIS_PASSWORD= TWILIO_ACCOUNT_SID=a TWILIO_ACCOUNT_TOKEN=b TWILIO_PHONE_NUMBER=c -SCRAPPER_SERVICE=https://sms-scrapper.rover.quenecesito.org/sms \ No newline at end of file +SCRAPPER_SERVICE=https://sms-scrapper.rover.quenecesito.org/sms +SIDEKIQ_USERNAME=admin +SIDEKIQ_PASSWORD=admin \ No newline at end of file diff --git a/config.ru b/config.ru index 8155622..905e542 100644 --- a/config.ru +++ b/config.ru @@ -1,3 +1,4 @@ +require "active_support/security_utils" require "./app" require "sidekiq" require 'sidekiq/web' @@ -6,8 +7,14 @@ Sidekiq.configure_client do |config| config.redis = { url: "redis://#{ENV['REDIS_HOST']}:#{ENV['REDIS_PORT']}" } end +use Rack::Env +Sidekiq::Web.use Rack::Auth::Basic, "Admin" do |username, password| + ActiveSupport::SecurityUtils.secure_compare(::Digest::SHA256.hexdigest(username), ::Digest::SHA256.hexdigest("#{ENV['SIDEKIQ_USERNAME']}")) & + ActiveSupport::SecurityUtils.secure_compare(::Digest::SHA256.hexdigest(password), ::Digest::SHA256.hexdigest("#{ENV['SIDEKIQ_PASSWORD']}")) +end + # config.ru run Rack::URLMap.new( - "/sidekiq-notsecure" => Sidekiq::Web, + "/sidekiq" => Sidekiq::Web, "/" => App -) \ No newline at end of file +) \ No newline at end of file