Middleware sequence: how to use it with helmet extension?

[Tamas Geschitz]

Hi

I would like to add HelmetJS to my app. I found this extension:

https://github.com/sourcefuse/loopback4-helmet#readme

However, this uses the old Action sequence. I don't see how can I make this work with the Middleware sequence, since it requires dependency injection, which I can't use in middleware.

There are other extensions like this one (using the old syntax). Could somebody explain to me how to migrate such extensions to the middleware syntax?

Thanks in advance

Regards

Tamas

[Raymond Feng]

You can simply add the following to your Application class’s constrcutor:

this.expressMiddleware(helmet(options));

Thanks,

Raymond

--
You received this message because you are subscribed to the Google Groups "LoopbackJS" group.
To unsubscribe from this group and stop receiving emails from it, send an email to loopbackjs+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/loopbackjs/2963543f-5daf-4ede-8ea8-b228292ff1e9n%40googlegroups.com.

[Tamas Geschitz]

Hi Raymond!

Thanks for getting back to me.

This works only with the default settings, like this

this.expressMiddleware(helmet);

as soon as your define any options like helmet(options) or you try to use individual middleware like helmet.dnsPrefetchControl(options), you get 500 error:

      failed with status code 500. TypeError: Cannot read property 'setHeader' of undefined

or

    failed with status code 500. TypeError: Cannot read property 'removeHeader' of undefined

This is coming form one of the helmet middleware.

Is there any way to fix this? I need to configure helmet, can't just rely on the default options. 

[Raymond Feng]

See https://github.com/strongloop/loopback-next/blob/master/packages/express/src/middleware-registry.ts#L59. You can pass the options as the 2nd arg.

To view this discussion on the web visit https://groups.google.com/d/msgid/loopbackjs/db71565f-c279-47b7-833a-dc2578eda9ccn%40googlegroups.com.

[MP Modise]

You welcome to join Slack community for quicker response turn around 

https://join.slack.com/t/loopbackio/shared_invite/zt-8lbow73r-SKAKz61Vdao~_rGf91pcsw

On 02 Mar 2021, at 17:12, Raymond Feng <enjo...@gmail.com> wrote:

See https://github.com/strongloop/loopback-next/blob/master/packages/express/src/middleware-registry.ts#L59. You can pass the options as the 2nd arg.

To view this discussion on the web visit https://groups.google.com/d/msgid/loopbackjs/E44D9767-3B12-460E-A86E-A711C011B330%40gmail.com.

[Tamas Geschitz]

Thanks Raymond! It works fine now. 

There is even a slack group? Perfect, I didn't know.

[Sidé SARR]

Thank you !

To view this discussion on the web visit https://groups.google.com/d/msgid/loopbackjs/3bb16bda-30e4-444b-8602-4c720cb58860n%40googlegroups.com.

---

Ce mail est à l’attention exclusive des destinataires désignés. Il peut contenir des informations confidentielles. 

Si vous le recevez par erreur, merci de le détruire et d’en informer sans délais l’expéditeur. 

Le contenu de ce mail ne pourrait engager la responsabilité de l’Université Alioune DIOP de Bambey que s’il a été émis par une personne dûment habilitée, agissant dans le cadre strict des fonctions auxquelles elle est employée et à des fins non étrangères à ses attributions. 

Toute diffusion, copie, publication partielle ou totale, ou toute autre utilisation est interdite, sauf autorisation.