Skip to content

Add Angular and React examples - #70

Open
svenzik wants to merge 15 commits into
mainfrom
WE2-968-examples
Open

Add Angular and React examples#70
svenzik wants to merge 15 commits into
mainfrom
WE2-968-examples

Conversation

@svenzik

@svenzik svenzik commented Feb 14, 2026 •
edited by mrts
Loading

Copy link
Copy Markdown
Contributor

WE2-968

  • Add Angular example
  • Add React example
  • build(deps): migrate from Angular 19 to 20
  • build(deps): migrate from Angular 20 to 21
  • build: Angular example version bump to 2.1.0-beta.0

Supersedes #58
Closes #58

github-advanced-security[bot]
github-advanced-security AI found potential problems Feb 14, 2026
View reviewed changes
Comment thread examples/web-eid-angular-example/public/mockServiceWorker.js
event.waitUntil(self.clients.claim())
})

self.addEventListener('message', async function (event) {

Check warning

Code scanning / CodeQL

Missing origin verification in `postMessage` handler Medium

Postmessage handler has no origin check.

Copilot Autofix

AI 13 days ago

Add an early allowlist check for event.origin in the message event listener before any command processing.
Best minimal fix (without changing existing functionality): compare event.origin against self.location.origin and return early when it does not match. This preserves current behavior for same-origin clients and rejects unexpected cross-origin message events.

Change required in:

  • examples/web-eid-angular-example/public/mockServiceWorker.js
    • Inside the self.addEventListener('message', async function (event) { ... }) block, immediately after entering the handler (before using event.source.id), add:
      • Guard for missing/invalid event.origin
      • Equality check to self.location.origin
      • Early return on mismatch

No new imports or dependencies are needed.

Suggested changeset 1
examples/web-eid-angular-example/public/mockServiceWorker.js

Autofix patch

Autofix patch
Run the following command in your local git repository to apply this patch
cat << 'EOF' | git apply
diff --git a/examples/web-eid-angular-example/public/mockServiceWorker.js b/examples/web-eid-angular-example/public/mockServiceWorker.js
--- a/examples/web-eid-angular-example/public/mockServiceWorker.js
+++ b/examples/web-eid-angular-example/public/mockServiceWorker.js
@@ -24,6 +24,10 @@
 })
 
 self.addEventListener('message', async function (event) {
+  if (!event.origin || event.origin !== self.location.origin) {
+    return
+  }
+
   const clientId = event.source.id
 
   if (!clientId || !self.clients) {
EOF
@@ -24,6 +24,10 @@
})

self.addEventListener('message', async function (event) {
if (!event.origin || event.origin !== self.location.origin) {
return
}

const clientId = event.source.id

if (!clientId || !self.clients) {
Copilot is powered by AI and may make mistakes. Always verify output.
Comment thread examples/web-eid-react-example/public/mockServiceWorker.js
event.waitUntil(self.clients.claim())
})

self.addEventListener('message', async function (event) {

Check warning

Code scanning / CodeQL

Missing origin verification in `postMessage` handler Medium

Postmessage handler has no origin check.

Copilot Autofix

AI 13 days ago

Add an explicit origin verification at the start of the "message" event handler, before using event.source/event.data.
Best fix here: compare event.origin against the service worker’s own origin (self.location.origin) and return early if it does not match.

Edit in:

  • examples/web-eid-react-example/public/mockServiceWorker.js
  • Region around line 26 (self.addEventListener('message', async function (event) { ... })

No new imports or dependencies are required.

Suggested changeset 1
examples/web-eid-react-example/public/mockServiceWorker.js

Autofix patch

Autofix patch
Run the following command in your local git repository to apply this patch
cat << 'EOF' | git apply
diff --git a/examples/web-eid-react-example/public/mockServiceWorker.js b/examples/web-eid-react-example/public/mockServiceWorker.js
--- a/examples/web-eid-react-example/public/mockServiceWorker.js
+++ b/examples/web-eid-react-example/public/mockServiceWorker.js
@@ -24,6 +24,10 @@
 })
 
 self.addEventListener('message', async function (event) {
+  if (event.origin !== self.location.origin) {
+    return
+  }
+
   const clientId = event.source.id
 
   if (!clientId || !self.clients) {
EOF
@@ -24,6 +24,10 @@
})

self.addEventListener('message', async function (event) {
if (event.origin !== self.location.origin) {
return
}

const clientId = event.source.id

if (!clientId || !self.clients) {
Copilot is powered by AI and may make mistakes. Always verify output.
@svenzik svenzik changed the title WE2 968 examples WE2-968: Add Angular and React examples Feb 14, 2026
@mrts mrts changed the title WE2-968: Add Angular and React examples Add Angular and React examples Feb 19, 2026
@mrts mrts mentioned this pull request Feb 19, 2026
Closed
@svenzik
svenzik force-pushed the WE2-968-examples branch 2 times, most recently from c55532a to 9f20112 Compare April 1, 2026 09:43
taneltm and others added 13 commits September 27, 2026 23:36
@taneltm @svenzik
Add Angular example
da7169b 
WE2-968

Signed-off-by: Tanel Metsar <taneltm@users.noreply.github.com>
@taneltm @svenzik
Add React example
9ddc765 
WE2-968

Signed-off-by: Tanel Metsar <taneltm@users.noreply.github.com>
@svenzik
build(deps): migrate from Angular 19 to 20
90a1fce 
WE2-1179

Signed-off-by: Sven Mitt <svenzik@users.noreply.github.com>
@svenzik
build(deps): migrate from Angular 20 to 21
386cac2 
WE2-1179

Signed-off-by: Sven Mitt <svenzik@users.noreply.github.com>
@svenzik
build: Angular example version bump to 2.1.0-beta.0
3275c33 
WE2-1179

Signed-off-by: Sven Mitt <svenzik@users.noreply.github.com>
@svenzik @taneltm
fix: add new webpack example with source-map-loader
32c3720 
WE2-1179

Signed-off-by: Sven Mitt <svenzik@users.noreply.github.com>
Co-authored-by: TanelTM <taneltm@users.noreply.github.com>
@svenzik
build: use @web-eid/web-eid-library version 2.1.0-beta.1
42659b1 
WE2-1179

Signed-off-by: Sven Mitt <svenzik@users.noreply.github.com>
@svenzik
fix: add error handling to examples
f628d00 
WE2-1179

Signed-off-by: Sven Mitt <svenzik@users.noreply.github.com>
@svenzik
fix: add error handling to examples
4a44a67 
WE2-1179

Signed-off-by: Sven Mitt <svenzik@users.noreply.github.com>
@svenzik
build: update versions and fix vulnerabilities
41fa2b9 
WE2-968

Signed-off-by: Sven Mitt <svenzik@users.noreply.github.com>
@svenzik
print web-eid component versions to page
2f585c6 
WE2-968

Signed-off-by: Sven Mitt <svenzik@users.noreply.github.com>
@svenzik
CSRF-token support in header
105dde0 
WE2-1240

Signed-off-by: Sven Mitt <svenzik@users.noreply.github.com>
@svenzik
Parameter to use separate backend API
117c70a 
WE2-1240

Signed-off-by: Sven Mitt <svenzik@users.noreply.github.com>
@svenzik
svenzik force-pushed the WE2-968-examples branch 3 times, most recently from 45409fa to ea6d72c Compare September 28, 2026 08:26
@svenzik
Add licence information to the beginning of source files
4615648 
WE2-1240

Signed-off-by: Sven Mitt <svenzik@users.noreply.github.com>
@svenzik
When backend api is provided, use WEBEID-XSRF-TOKEN as cookie key to …
174c275 
…exclude collisions

WE2-1240

Signed-off-by: Sven Mitt <svenzik@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@svenzik @github-advanced-security @taneltm