nuxt-modules / security

🛡 Automatically configure your app to follow OWASP security patterns and principles by using HTTP Headers and Middleware
https://nuxt-security.vercel.app/
MIT License
829 stars 60 forks source link

Integration with Nuxt DevTools #295

Open Baroshem opened 1 year ago

Baroshem commented 1 year ago

The idea would be to have a similiar log added to running your application in fev if it has NuxtSecurity enabled as it is in NuxtTailwind.

The one in tailwind outputs an url where the tailwindviewer is so that it id simple for users running the app in dev with the module to access the viewer.

I have been thinking about something similar for NuxtSecurity.

My ideas:

  1. Full NuxtSecurity Config
  2. Enabled headers and middleware's (names) per route ang global

Let me know what you think about it :)

Baroshem commented 1 year ago

I would especially love to get the feedback from @vejja @dargmuesli @pi0 @danielroe @huang-julien

dargmuesli commented 1 year ago

Wouldn't that be something for a devtools tab? 🤩

huang-julien commented 1 year ago

I was thinking the same ! @dargmuesli

Baroshem commented 1 year ago

image

Baroshem commented 1 year ago

Do you have any ideas how this could work?

huang-julien commented 1 year ago

I had already used devtools/kit once. Basically you're just providing an iframe which will get a lot of devtools helpers injected. So it's really flexible

Baroshem commented 12 months ago

But I wonder what would be the use case for it. In terms for headers, users can see the values in the browser network tab. While for the middlewares it might be difficult to show some meaningful data because everything can be seen in the nuxt.config.

I am just not sure what value it could bring to the user.

pi0 commented 12 months ago

Devtools tab would a be a nice idea i would say. Adding more complexity to CLI output might be nice but it also makes peole care less about information when it matters (like warns)