search

aussiearef / MicroservicesWithAWS_FrontEnd

5 stars 16 forks source link

Master Event Driven Microservices with Python and AWS class is broken #1

Open KjellKod opened 10 months ago

KjellKod commented 10 months ago

it seems that there are some issues with the class and this code that the "Master Event Driven Microservices with Python and AWS" is using

  1. the code doesn't look similar at all to what is demonstrated in the class - either it has evolved without class videos being updated or the class is referring to a newer version of this code that is not available here

  2. The amazon-cognito-auth.js file is deprecated and will not run, throwing errors of cross-scripting security vulnerabilities.

Refused to execute inline script because it violates the following Content Security Policy directive: "script-src https://d3oia8etllorh5.cloudfront.net https://[redacted
]-hotel.auth.us-east-1.amazoncognito.com". Either the 'unsafe-inline' keyword, a hash ('sha256-[redacted}='), or a nonce ('nonce-...') is required to enable inline execution.

while this could be a way forward it seems there are cascading issues that I've not yet resolved. the code/class should be updated if the purpose of the class is for participants to replicate these hands-on steps

KjellKod commented 10 months ago

Update fore the benefit of other class participants:

At least for index.html, the following workaround can be used for modern browsers (Safari v Chrome v) to bypass the error.

<meta http-equiv="Content-Security-Policy" content="script-src 'self' https://ajax.googleapis.com https://cdnjs.cloudflare.com 'unsafe-inline'">

You might have to do similar fixes for other files. Also, there seems to be another repo that we instead should be using for the class "Master Event Driven Microservices with Python and AWS": https://github.com/aussiearef/HotelBooking