mai
/
posimai-atlas
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix(atlas): skip http:// health checks from https context (mixed content warning) 

Vercel-hosted Atlas (HTTPS) was attempting HEAD requests to http:// internal
endpoints (Gitea, Syncthing), causing browsers to show insecure connection
warning. Now skips those requests silently; status stays at last known value.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
posimai 2026-03-31 10:07:41 +09:00
parent dc602f7ea7
commit 0b9902b495
1 changed files with 20 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
index.html
View File

@ -2009,7 +2009,10 @@ async function runHealthCheckAll() {
}
} else {
const result = await checkUrlHealth(node.url);
next = result === 'offline' ? 'inactive' : 'active';
// 'skipped' = HTTP endpoint from HTTPS context — leave status unchanged
if (result !== 'skipped') {
next = result === 'offline' ? 'inactive' : 'active';
}
nodeHealthCache.delete(node.id);
}
@ -2036,6 +2039,9 @@ async function runHealthCheckAll() {
}
async function checkUrlHealth(url) {
// HTTPS ページから HTTP エンドポイントへのリクエストは混合コンテンツとしてブロックされる
// → ブラウザが「保護されていない通信」警告を出すため、スキップして 'skipped' を返す
if (location.protocol === 'https:' && url.startsWith('http:')) return 'skipped';
try {
const ctrl = new AbortController();
const timer = setTimeout(() => ctrl.abort(), 7000);
@ -2518,14 +2524,19 @@ async function checkNodeHealth(nodeId, url) {
}
} else {
// /api/health なし → 従来の HEAD リクエスト
try {
const ctrl = new AbortController();
const timer = setTimeout(() => ctrl.abort(), 6000);
const res = await fetch(url, { method: 'HEAD', mode: 'no-cors', signal: ctrl.signal });
clearTimeout(timer);
result = res.type === 'opaque' ? 'limited' : (res.ok ? 'online' : 'offline');
} catch (e) {
result = 'offline';
// HTTP endpoint from HTTPS context はブロックされるのでスキップ
if (location.protocol === 'https:' && url && url.startsWith('http:')) {
result = 'limited';
} else {
try {
const ctrl = new AbortController();
const timer = setTimeout(() => ctrl.abort(), 6000);
const res = await fetch(url, { method: 'HEAD', mode: 'no-cors', signal: ctrl.signal });
clearTimeout(timer);
result = res.type === 'opaque' ? 'limited' : (res.ok ? 'online' : 'offline');
} catch (e) {
result = 'offline';
}
}
}