shoc-frontend-new/.env.production at d1cca884ebd419482be2cb03f97d51eaa26cf3d1 - adam/shoc-frontend-new - Sea Haven Git

adam/shoc-frontend-new

mirror of https://github.com/Sea-Haven-Industries/shoc-frontend-new.git synced 2026-10-07 16:19:01 +00:00

Alexandre Brandizzi 8bd89a1f9d feat(infra): proxy /api through CloudFront to the backend

The SPA is served over HTTPS by CloudFront but the backend
(console.seahavenind.com) is HTTP-only, so direct API calls would be blocked
as mixed content. Add a CloudFront /api/* behavior that proxies to the backend
over HTTP (browser <-> CloudFront is HTTPS; CloudFront <-> origin is HTTP) and
set VITE_API_URL=/api (same-origin).

Because distribution-level customErrorResponses are global and would rewrite
real /api 403/404s into the SPA shell, replace them with a viewer-request
CloudFront Function scoped to the S3 (default) behavior that rewrites
extensionless paths to /index.html. /api/* carries no function association.

Backend host is configurable via `-c apiOriginDomain=<host>` (default
console.seahavenind.com).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-02 14:17:27 -03:00

4 lines

246 B

Text

Raw Blame History

 # Production API base (same-origin). CloudFront proxies /api/* to the backend,
 # so the HTTPS SPA reaches the HTTP-only API without mixed-content blocking.
 # The backend host is set on the CloudFront /api behavior in infra/cdk.
 VITE_API_URL=/api