Skip to content

feat: Sign every proxied request with an HMAC proof - #1413

Merged
parthshahp merged 1 commit into
parthshah/ltrac-1795-stencil-cli-require-x-stencil-preview-secret-on-tunnelfrom
parthshah/ltrac-1794-stencil-cli-sign-every-proxied-request-with-an-hmac-proof
Oct 19, 2026
Merged

parthshahp merged 1 commit into
parthshah/ltrac-1795-stencil-cli-require-x-stencil-preview-secret-on-tunnelfrom
parthshah/ltrac-1794-stencil-cli-sign-every-proxied-request-with-an-hmac-proof

Conversation

@parthshahp

@parthshahp parthshahp commented Oct 8, 2026 •

Copy link
Copy Markdown
Contributor

What?

Add a preview proxy that signs every proxied request with an HMAC proof. This HMAC proof proves to the worker that the request came from the same client that created the session via POST request.

Tickets / Documentation

cc @bigcommerce/storefront-team

@parthshahp
parthshahp force-pushed the parthshah/ltrac-1794-stencil-cli-sign-every-proxied-request-with-an-hmac-proof branch from a65ab33 to bf93ec3 Compare October 8, 2026 15:10
@parthshahp
parthshahp added this pull request to stack #1414 October 8, 2026 15:12
@parthshahp
parthshahp removed this pull request from stack #1414 October 8, 2026 15:17
@parthshahp
parthshahp added this pull request to stack #1417 October 8, 2026 15:17
@parthshahp
parthshahp marked this pull request as ready for review October 8, 2026 17:56
Comment thread lib/preview-proxy.js
@parthshahp
parthshahp force-pushed the parthshah/ltrac-1794-stencil-cli-sign-every-proxied-request-with-an-hmac-proof branch from bf93ec3 to cc3327a Compare October 12, 2026 15:47
@parthshahp
parthshahp force-pushed the parthshah/ltrac-1794-stencil-cli-sign-every-proxied-request-with-an-hmac-proof branch from cc3327a to 002c22f Compare October 19, 2026 19:06
@parthshahp
parthshahp merged commit c145d00 into master Oct 19, 2026
4 checks passed
@github-actions

Copy link
Copy Markdown
Contributor

🎉 This PR is included in version 10.1.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants