Skip to content

Feat: Allow web interface to serve content behind an optional URL path prefix #1124

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
ngearhart wants to merge 2 commits into
base: main
Choose a base branch
from
Open

Feat: Allow web interface to serve content behind an optional URL path prefix #1124

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
80c560f
Feature: Allow web interface to serve content behind an optional URL …
ngearhart Jan 27, 2026
5a7a8c2
Chore: Resolve linting in StaticResources.scala
ngearhart Jan 27, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 12 additions & 10 deletions admin/src/main/scala/com/neu/api/Api.scala
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -93,15 +93,17 @@ trait Api extends Directives with CoreActors with Core {
private val workloadApi = new WorkloadApi(workloadService)

val routes: Route = handleExceptions(exceptionHandler) {
authenticationApi.route ~
dashboardApi.route ~
clusterApi.route ~
deviceApi.route ~
groupApi.route ~
notificationApi.route ~
policyApi.route ~
riskApi.route ~
sigstoreApi.route ~
workloadApi.route
rawPathPrefix(sys.env.get("PATH_PREFIX").map(r => Slash ~ r).getOrElse("")) {
authenticationApi.route ~
dashboardApi.route ~
clusterApi.route ~
deviceApi.route ~
groupApi.route ~
notificationApi.route ~
policyApi.route ~
riskApi.route ~
sigstoreApi.route ~
workloadApi.route
}
}
}
15 changes: 10 additions & 5 deletions admin/src/main/scala/com/neu/core/Core.scala
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -37,9 +37,10 @@ trait BootedCore
CisNISTManager
System.setProperty("net.sf.ehcache.enableShutdownHook", "true")

private val useSSL: String = sys.env.getOrElse("MANAGER_SSL", "on")
private val httpMaxHeaderLength: String = sys.env.getOrElse("HTTP_MAX_HEADER_LENGTH", "32k")
private val config: Config =
private val useSSL: String = sys.env.getOrElse("MANAGER_SSL", "on")
private val httpMaxHeaderLength: String = sys.env.getOrElse("HTTP_MAX_HEADER_LENGTH", "32k")
private val managerPathPrefix: Option[String] = sys.env.get("PATH_PREFIX")
private val config: Config =
load
.getConfig(if (useSSL == "off") "noneSsl" else "ssl")
.withFallback(defaultReference(getClass.getClassLoader))
Expand Down Expand Up @@ -69,7 +70,9 @@ trait BootedCore

private val bindingFuture: Future[Http.ServerBinding] = useSSL match {
case "off" =>
logger.info("Starting server in HTTP mode (MANAGER_SSL=off).")
logger.info(
s"Starting server in HTTP mode (MANAGER_SSL=off${managerPathPrefix.map(prefix => s",PATH_PREFIX=$prefix").getOrElse("")})"
)
NoOperationSSLContext.init()
Http()
.newServerAt("0.0.0.0", httpPort.toInt)
Expand All @@ -78,7 +81,9 @@ trait BootedCore
case _ =>
https match {
case Some(httpsCtx) =>
logger.info("Starting server in HTTPS mode (MANAGER_SSL=on).")
logger.info(
s"Starting server in HTTPS mode (MANAGER_SSL=on${managerPathPrefix.map(prefix => s",PATH_PREFIX=$prefix").getOrElse("")})"
)
Http()
.newServerAt("0.0.0.0", httpPort.toInt)
.enableHttps(httpsCtx)
Expand Down
109 changes: 65 additions & 44 deletions admin/src/main/scala/com/neu/web/StaticResources.scala
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,17 @@ trait StaticResources extends Directives with LazyLogging {
private val isUsingSSL: Boolean = sys.env.getOrElse("MANAGER_SSL", "on") == "on"
private val isDev: Boolean = sys.env.getOrElse("IS_DEV", "false") == "true"

private val _managerPathPrefixWithPrependedSlash: String = {
val rawPathOption: Option[String] = sys.env.get("PATH_PREFIX")

rawPathOption match {
case Some(value) => "/" + value.trim
case None => ""
}
}

private val managerPathPrefixWithPrependedSlash: String = _managerPathPrefixWithPrependedSlash

// # Rewrite redirect-implementation base on "spray/spray-routing/src/main/scala/spray/routing/RequestContext.scala, added strict transport security header"
private def redirectMe(uri: Uri, redirectionType: StatusCodes.Redirection) =
complete {
Expand All @@ -42,60 +53,70 @@ trait StaticResources extends Directives with LazyLogging {
}

val staticResources: Route = get {
path("") {
redirectMe(
UrlEscapers
.urlFragmentEscaper()
.escape("/index.html?v=" + Md5.hash(managerVersion).take(shortPath)),
StatusCodes.MovedPermanently
)
} ~
path("index.html") {
parameters(Symbol("v").?) { v =>
val hash = Md5.hash(managerVersion).take(shortPath)
if (v.isEmpty) {
redirectMe(
UrlEscapers.urlFragmentEscaper().escape("/index.html?v=" + hash),
StatusCodes.MovedPermanently
)
} else {
if (v.get.equals(hash)) {
getFromResource("/index.html")
} else {
logger.info("Previous version hash: {}", v.get)
logger.info("Current version hash: {}", hash)
rawPathPrefix(sys.env.get("PATH_PREFIX").map(r => Slash ~ r).getOrElse("")) {
path("") {
redirectMe(
UrlEscapers
.urlFragmentEscaper()
.escape(
managerPathPrefixWithPrependedSlash + "/index.html?v=" + Md5
.hash(managerVersion)
.take(shortPath)
),
StatusCodes.MovedPermanently
)
} ~
path("index.html") {
parameters(Symbol("v").?) { v =>
val hash = Md5.hash(managerVersion).take(shortPath)
if (v.isEmpty) {
redirectMe(
UrlEscapers.urlFragmentEscaper().escape("/index.html?v=" + hash),
UrlEscapers
.urlFragmentEscaper()
.escape(managerPathPrefixWithPrependedSlash + "/index.html?v=" + hash),
StatusCodes.MovedPermanently
)
} else {
if (v.get.equals(hash)) {
getFromResource("/index.html")
} else {
logger.info("Previous version hash: {}", v.get)
logger.info("Current version hash: {}", hash)
redirectMe(
UrlEscapers
.urlFragmentEscaper()
.escape(managerPathPrefixWithPrependedSlash + "/index.html?v=" + hash),
StatusCodes.MovedPermanently
)
}
}
}
}
} ~
path("favicon.ico") {
Utils.respondWithWebServerHeaders(isStaticResource = true) {
complete(StatusCodes.NotFound)
}
} ~
path(Remaining) { path =>
if (isDev) {
} ~
path("favicon.ico") {
Utils.respondWithWebServerHeaders(isStaticResource = true) {
getFromResource(UrlEscapers.urlFragmentEscaper().escape(s"root/$path"))
complete(StatusCodes.NotFound)
}
} else {
if (path.endsWith(".js")) {
} ~
path(Remaining) { path =>
if (isDev) {
Utils.respondWithWebServerHeaders(isStaticResource = true) {
respondWithHeader(RawHeader("Content-Type", "application/javascript")) {
encodeResponse {
getFromResource(
UrlEscapers.urlFragmentEscaper().escape(s"root/$path.gz")
)
}
}
getFromResource(UrlEscapers.urlFragmentEscaper().escape(s"root/$path"))
}
} else {
Utils.respondWithWebServerHeaders(isStaticResource = true) {
getFromResource(UrlEscapers.urlFragmentEscaper().escape(s"root/$path"))
if (path.endsWith(".js")) {
Utils.respondWithWebServerHeaders(isStaticResource = true) {
respondWithHeader(RawHeader("Content-Type", "application/javascript")) {
encodeResponse {
getFromResource(
UrlEscapers.urlFragmentEscaper().escape(s"root/$path.gz")
)
}
}
}
} else {
Utils.respondWithWebServerHeaders(isStaticResource = true) {
getFromResource(UrlEscapers.urlFragmentEscaper().escape(s"root/$path"))
}
}
}
}
Expand Down
1 change: 0 additions & 1 deletion admin/webapp/websrc/index.html
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,6 @@
<head>
<meta charset="utf-8" />
<title>NeuVector</title>
<base href="/" />
<meta
content="width=device-width, initial-scale=1, maximum-scale=1"
name="viewport" />
Expand Down