Mirror
/
zulip
mirror of https://github.com/zulip/zulip.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
zulip/tools/ci/success-http-headers.templa...

14 lines
387 B
Plaintext
Raw Normal View History

ci: Verify production servers using /api/v1/server_settings. The previous commit changed our response for the root domain on a self-hosted Zulip server containing no realms to be a 404. This made the HTTP headers verification done here less robust than would be ideal, in that one could imagine a bug that makes every URL 404 passing that test. So we instead change the check to verify the /server_settings API, which doesn't have that problem.
2022-04-28 20:12:17 +02:00
HTTP/2 200
install: Replace wget with curl. curl uses Happy Eyeballs to avoid long timeouts on systems with broken IPv6. Signed-off-by: Anders Kaseorg <anders@zulip.com>
2021-06-25 01:28:27 +02:00
server: {nginx_version_string}
ci: Verify production servers using /api/v1/server_settings. The previous commit changed our response for the root domain on a self-hosted Zulip server containing no realms to be a 404. This made the HTTP headers verification done here less robust than would be ideal, in that one could imagine a bug that makes every URL 404 passing that test. So we instead change the check to verify the /server_settings API, which doesn't have that problem.
2022-04-28 20:12:17 +02:00
content-type: application/json
install: Replace wget with curl. curl uses Happy Eyeballs to avoid long timeouts on systems with broken IPv6. Signed-off-by: Anders Kaseorg <anders@zulip.com>
2021-06-25 01:28:27 +02:00
vary: Accept-Encoding
home: For web public realms, skip login for spectators. To provide a smoother experience of accessing a web public stream, we don't ask user to login unless user directly requests a `/login` URL. Fixes #21690.
2022-04-19 11:47:26 +02:00
vary: Accept-Language, Cookie
install: Replace wget with curl. curl uses Happy Eyeballs to avoid long timeouts on systems with broken IPv6. Signed-off-by: Anders Kaseorg <anders@zulip.com>
2021-06-25 01:28:27 +02:00
content-language: en
strict-transport-security: max-age=15768000
x-frame-options: DENY
ci: Verify production servers using /api/v1/server_settings. The previous commit changed our response for the root domain on a self-hosted Zulip server containing no realms to be a 404. This made the HTTP headers verification done here less robust than would be ideal, in that one could imagine a bug that makes every URL 404 passing that test. So we instead change the check to verify the /server_settings API, which doesn't have that problem.
2022-04-28 20:12:17 +02:00
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-headers: Authorization
access-control-allow-methods: GET, POST, DELETE, PUT, PATCH, HEAD
travis: Verify the server doesn't 500 in production test.
2016-05-08 03:19:48 +02:00