ricardo/BCards
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: cabeçalhos cloudflare
All checks were successful
BCards Deployment Pipeline / Run Tests (push) Successful in 3s
Details
BCards Deployment Pipeline / PR Validation (push) Has been skipped
Details
BCards Deployment Pipeline / Build and Push Image (push) Successful in 15m44s
Details
BCards Deployment Pipeline / Deploy to Production (ARM - OCI) (push) Successful in 2m1s
Details
BCards Deployment Pipeline / Deploy to Test (x86 - Local) (push) Has been skipped
Details
BCards Deployment Pipeline / Cleanup Old Resources (push) Has been skipped
Details
BCards Deployment Pipeline / Deployment Summary (push) Successful in 0s
Details

Browse Source
This commit is contained in:
Ricardo Carneiro 2025-09-19 08:25:02 -03:00
parent 28777d8437
commit b70fd7c23a
1 changed files with 50 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

51
src/BCards.Web/Program.cs
View File

@ -539,11 +539,25 @@ if (!app.Environment.IsDevelopment())
app.Use(async (context, next) =>
{
// Security headers
context.Response.Headers.Append("X-Content-Type-Options", "nosniff");
context.Response.Headers.Append("X-Frame-Options", "DENY");
context.Response.Headers.Append("Referrer-Policy", "no-referrer");
context.Response.Headers.Append("Permissions-Policy", "camera=(), microphone=(), geolocation=()");
// Load balancer e debugging headers
context.Response.Headers.Append("X-Server-ID", Environment.MachineName);
context.Response.Headers.Append("X-Instance-ID", $"{Environment.MachineName}-{Environment.ProcessId}");
// Cloudflare information headers (quando disponível)
var cfCountry = context.Request.Headers["CF-IPCountry"].FirstOrDefault();
var cfRay = context.Request.Headers["CF-RAY"].FirstOrDefault();
if (!string.IsNullOrEmpty(cfCountry))
context.Response.Headers.Append("X-Country", cfCountry);
if (!string.IsNullOrEmpty(cfRay))
context.Response.Headers.Append("X-CF-Ray", cfRay);
context.Response.OnStarting(() =>
{
context.Response.Headers.Remove("Server");
@ -571,27 +585,32 @@ app.UseStaticFiles(new StaticFileOptions
var extension = Path.GetExtension(fileName).ToLowerInvariant();
TimeSpan maxAge;
string cacheControl;
if (extension == ".css" || extension == ".js")
{
maxAge = TimeSpan.FromDays(30);
cacheControl = $"public, max-age={maxAge.TotalSeconds}, immutable";
}
else if (extension == ".woff" || extension == ".woff2" || extension == ".ttf" ||
extension == ".eot" || extension == ".svg" || extension == ".otf")
{
maxAge = TimeSpan.FromDays(365);
cacheControl = $"public, max-age={maxAge.TotalSeconds}, immutable";
}
else if (extension == ".png" || extension == ".jpg" || extension == ".jpeg" ||
extension == ".gif" || extension == ".ico" || extension == ".webp")
{
maxAge = TimeSpan.FromDays(180);
cacheControl = $"public, max-age={maxAge.TotalSeconds}";
}
else
{
maxAge = TimeSpan.FromDays(1);
cacheControl = $"public, max-age={maxAge.TotalSeconds}";
}
ctx.Context.Response.Headers.CacheControl = $"public,max-age={maxAge.TotalSeconds}";
ctx.Context.Response.Headers.CacheControl = cacheControl;
ctx.Context.Response.Headers.Append("Vary", "Accept-Encoding");
}
});
@ -601,6 +620,36 @@ app.UseRequestLocalization();
app.UseAuthentication();
app.UseAuthorization();
// Cache middleware para páginas dinâmicas
app.Use(async (context, next) =>
{
// Páginas user dinâmicas - sem cache
if (context.Request.Path.StartsWithSegments("/page/") ||
context.Request.Path.StartsWithSegments("/Admin") ||
context.Request.Path.StartsWithSegments("/Auth") ||
context.Request.Path.StartsWithSegments("/Payment"))
{
context.Response.Headers.Append("Cache-Control", "private, no-store, must-revalidate");
context.Response.Headers.Append("Pragma", "no-cache");
context.Response.Headers.Append("Expires", "0");
}
// API endpoints - sem cache
else if (context.Request.Path.StartsWithSegments("/api/") ||
context.Request.Path.StartsWithSegments("/click/") ||
context.Request.Path.StartsWithSegments("/health"))
{
context.Response.Headers.Append("Cache-Control", "no-cache, no-store, must-revalidate");
context.Response.Headers.Append("Pragma", "no-cache");
}
// Páginas públicas - cache moderado
else if (context.Request.Path.StartsWithSegments("/Home") || context.Request.Path.Value == "/")
{
context.Response.Headers.Append("Cache-Control", "public, max-age=300"); // 5 min
}
await next();
});
app.UseMiddleware<SmartCacheMiddleware>();
app.UseMiddleware<AuthCacheMiddleware>();
app.UseMiddleware<PlanLimitationMiddleware>();