fix: added cors, fixed ci/cd process

Author: andrii-harbour

.github/workflows/deploy-proxy.yml

@@ -8,11 +8,11 @@ on:
         required: false
 
 env:
-  PROJECT_ID: ${{ secrets.GCP_PROJECT_ID }}
-  REGION: ${{ secrets.GCP_REGION }}
-  SERVICE_NAME: ${{ secrets.GCP_SERVICE_NAME }}
+  PROJECT_ID: ${{ vars.GCP_PROJECT_ID }}
+  REGION: ${{ vars.GCP_REGION }}
+  SERVICE_NAME: ${{ vars.GCP_SERVICE_NAME }}
   SUPERDOC_SERVICES_API_KEY: ${{ secrets.SUPERDOC_SERVICES_API_KEY }}
-  SUPERDOC_SERVICES_BASE_URL: ${{ secrets.SUPERDOC_SERVICES_BASE_URL }}
+  SUPERDOC_SERVICES_BASE_URL: ${{ vars.SUPERDOC_SERVICES_BASE_URL }}
 
 jobs:
   deploy:
@@ -61,9 +61,11 @@ jobs:
           gcloud run deploy "${SERVICE_NAME}" \
             --image "${IMAGE}" \
             --region "${REGION}" \
-            --platform managed \
+            --memory=1Gi \
+            --cpu=1 \
             --allow-unauthenticated \
-            --set-env-vars SUPERDOC_SERVICES_API_KEY="${SUPERDOC_SERVICES_API_KEY}",SUPERDOC_SERVICES_BASE_URL="${SUPERDOC_SERVICES_BASE_URL}"
+            --set-env-vars SUPERDOC_SERVICES_BASE_URL="${SUPERDOC_SERVICES_BASE_URL}" \
+            --set-secrets="SUPERDOC_SERVICES_API_KEY=esign-demo-sd-services-api-key:latest"
         env:
           IMAGE: ${{ env.IMAGE }}
           REGION: ${{ env.REGION }}

demo/server/server.js

@@ -7,11 +7,17 @@ dotenv.config();
 const app = express();
 const PORT = process.env.PORT || 3001;
 const SUPERDOC_SERVICES_API_KEY = process.env.SUPERDOC_SERVICES_API_KEY;
-const SUPERDOC_SERVICES_BASE_URL = process.env.SUPERDOC_SERVICES_BASE_URL || 'https://api.superdoc.dev';
+const SUPERDOC_SERVICES_BASE_URL =
+  process.env.SUPERDOC_SERVICES_BASE_URL || 'https://api.superdoc.dev';
 const CONSENT_FIELD_IDS = new Set(['consent_agreement', 'terms', 'email', '406948812']);
 const SIGNATURE_FIELD_ID = '789012';
 
-app.use(cors());
+// TODO: tighten origin allowlist when the frontend URL is known.
+app.use(
+  cors({
+    origin: 'https://esign.superdoc.dev',
+  }),
+);
 app.use(express.json({ limit: '50mb' }));
 
 app.get('/health', (req, res) => {

demo/vite.config.ts

@@ -16,7 +16,7 @@ export default defineConfig(({ mode }) => ({
   server: {
     proxy: {
       '/v1': {
-        target: 'http://localhost:3003',
+        target: 'https://esign-demo-proxy-server-191591660773.us-central1.run.app',
         changeOrigin: true,
         secure: false,
       },