8e25dd88e8
Shopify storefronts embed the chat widget cross-origin; Firefox blocks unless the response allows framing. Set Content-Security-Policy with frame-ancestors * for /storefront-chat/widget routes. Made-with: Cursor
80 lines
2.0 KiB
TypeScript
80 lines
2.0 KiB
TypeScript
import type { NextConfig } from "next";
|
|
|
|
/** Lets Shopify / custom domains embed the public widget in an iframe (Firefox blocks without this). */
|
|
const STOREFRONT_WIDGET_CSP = "frame-ancestors *";
|
|
|
|
const nextConfig: NextConfig = {
|
|
/* config options here */
|
|
async headers() {
|
|
return [
|
|
{
|
|
source: "/storefront-chat/widget",
|
|
headers: [
|
|
{ key: "Content-Security-Policy", value: STOREFRONT_WIDGET_CSP },
|
|
],
|
|
},
|
|
{
|
|
source: "/storefront-chat/widget/:path*",
|
|
headers: [
|
|
{ key: "Content-Security-Policy", value: STOREFRONT_WIDGET_CSP },
|
|
],
|
|
},
|
|
];
|
|
},
|
|
// Keep Prisma + pg as Node externals so Turbopack does not bundle the
|
|
// generated client (fixes "Cannot read properties of undefined (reading 'graph')"
|
|
// during `next build` in some Docker/Linux environments).
|
|
serverExternalPackages: [
|
|
"@prisma/client",
|
|
"prisma",
|
|
"@prisma/adapter-pg",
|
|
"@prisma/driver-adapter-utils",
|
|
"pg",
|
|
],
|
|
images: {
|
|
remotePatterns: [
|
|
{
|
|
protocol: "https",
|
|
hostname: "*.shopify.com",
|
|
},
|
|
{
|
|
protocol: "https",
|
|
hostname: "cdn.shopify.com",
|
|
},
|
|
{
|
|
protocol: "https",
|
|
hostname: "*.myshopify.com",
|
|
},
|
|
{
|
|
protocol: "https",
|
|
hostname: "*.ngrok.com",
|
|
},
|
|
{
|
|
protocol: "https",
|
|
hostname: "*.ngrok.io",
|
|
},
|
|
{
|
|
protocol: "https",
|
|
hostname: "*.ngrok-free.dev",
|
|
},
|
|
{
|
|
protocol: "https",
|
|
hostname: "junohub-product-images.s3.us-east-1.amazonaws.com",
|
|
},
|
|
],
|
|
},
|
|
// Allow ngrok origin for development (fixes cross-origin warnings)
|
|
allowedDevOrigins: [
|
|
"https://precontributive-tribally-dione.ngrok-free.dev",
|
|
"https://*.ngrok-free.dev",
|
|
"https://*.ngrok-free.app",
|
|
"https://brave-destined-gelding.ngrok-free.app",
|
|
"brave-destined-gelding.ngrok-free.app",
|
|
"*.ngrok-free.app",
|
|
"https://*.ngrok.io",
|
|
],
|
|
reactCompiler: true,
|
|
};
|
|
|
|
export default nextConfig;
|