v0.13.2 : fix admin

config/middlewares.ts

@@ -1,57 +1,23 @@
 export default [
   "strapi::logger",
   "strapi::errors",
-  //'strapi::security',
-  {
-    name: "strapi::security",
-    config: {
-      contentSecurityPolicy: {
-        useDefaults: true,
-        directives: {
-          "connect-src": ["'self'", "https:", "http:"],
-          "img-src": [
-            "'self'",
-            "data:",
-            "blob:",
-            "market-assets.strapi.io",
-            "192.168.0.211:9000",
-            "container.harmonylab.ovh",
-          ],
-          "media-src": [
-            "'self'",
-            "data:",
-            "blob:",
-            "market-assets.strapi.io",
-            "192.168.0.211:9000",
-            "container.harmonylab.ovh",
-          ],
-          upgradeInsecureRequests: null,
-        },
-      },
-    },
-  },
-  {
-  name: "strapi::cors",
-  config: {
-    origin: ["https://back.harmonylab.ovh", "https://www.choralsync.com"],
-    methods: ["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD", "OPTIONS"],
-    headers: ["Content-Type", "Authorization", "Origin", "Accept"],
-    keepHeadersOnError: true,
-  },
-},
+  "strapi::security",
+  "strapi::cors",
   "strapi::poweredBy",
   "strapi::query",
   "strapi::body",
   {
-  name: 'strapi::session',
-  config: {
-    cookie: {
-      secure: true, // Force car tu es sur https://back.harmonylab.ovh
-      sameSite: 'lax',
+    name: "strapi::session",
+    config: {
+      // Nom unique pour être sûr que le navigateur ne garde pas un vieux cookie
+      key: "strapi_session_local_debug",
+      maxAge: 86400000,
       httpOnly: true,
+      // FORCE à false pour que ça marche en HTTP local
+      secure: false,
+      sameSite: "lax",
     },
   },
-},
   "strapi::favicon",
   "strapi::public",
 ];

config/server.ts

@@ -1,24 +1,33 @@
 import cronTasks from "./cron-tasks";
 
-export default ({ env }) => ({
-  host: env("HOST", "0.0.0.0"),
-  port: env.int("PORT", 1337),
-  proxy: true,
-  url: env('STRAPI_URL'),
-  app: {
-    keys: env.array("APP_KEYS"),
-  },
-  cron: {
-    enabled: true,
-    tasks: cronTasks,
-  },
-  admin: {
-    auth: {
-      events: {
-        onConnectionSuccess(e) {
-          console.log('Login success for:', e.user.email);
-        },
+export default ({ env }) => {
+  // DEBUG: On vérifie ce que Strapi reçoit vraiment
+  const appKeys = env.array("APP_KEYS");
+  console.log("------------------------------------------------");
+  console.log("Key Check:", appKeys.length > 0 ? "CHARGÉES ✅" : "VIDES ❌");
+  console.log("Key Type:", typeof appKeys[0]); // Doit afficher 'string'
+  console.log("Host:", env("HOST", "0.0.0.0"));
+  console.log("------------------------------------------------");
+  return {
+    host: env("HOST", "0.0.0.0"),
+    port: env.int("PORT", 1337),
+    url: env("STRAPI_URL", "http://localhost:1337"),
+    app: {
+      // ON FORCE UN TABLEAU EN DUR ICI :
+      keys: [
+        "UneSuperClefSecreteTresLongueEtAleatoire123",
+        "UneAutreClefDeSecours456",
+      ],
+    },
+    cron: {
+      enabled: true,
+      tasks: cronTasks,
+    },
+    proxy: false,
+    admin: {
+      auth: {
+        secret: env("ADMIN_JWT_SECRET"),
       },
     },
-  },
-});
+  };
+};