Canva API App Development
Budget: $30 – $250 USD
The goal is to successfully migrate authentication, however, some issues are still present:
1. The authentication base URL and the redirect URL are not on the same origin.
2. The redirect endpoint does not validate nonce in the query params
3. The redirect endpoint does not get the nonceWithExpire cookie in the request. This is caused by issue 1 and the cookie has been set on a different origin. After fixing the origin issue, you should also be validating the cookie in the redirect endpoint.
More details are shared in the documentation for authenticating users regarding the base URL and redirect URL.: https://www.canva.dev/docs/apps/authenticating-users/
For the missing validations in items 2 and 3, refer to this section in the dev doc: https://www.canva.dev/docs/apps/authenticating-users/#step-4-set-up-a-redirect-url
Some notes from previous developer:
The application consists of 2 parts:
https://auth.primostats.com/
https://canva-be.primostats.com/
Following the guide https://www.canva.dev/docs/apps/authentication-migration-guide/, you need to make sure that both applications are running on the same domain/subdomain.
After this, you need to change the required fields in the Canva app settings.
The code is up and running on the digitalocean droplet, accessible through the terminal.
WP integration is in both Authentication and BE apps
1. The authentication base URL and the redirect URL are not on the same origin.
2. The redirect endpoint does not validate nonce in the query params
3. The redirect endpoint does not get the nonceWithExpire cookie in the request. This is caused by issue 1 and the cookie has been set on a different origin. After fixing the origin issue, you should also be validating the cookie in the redirect endpoint.
More details are shared in the documentation for authenticating users regarding the base URL and redirect URL.: https://www.canva.dev/docs/apps/authenticating-users/
For the missing validations in items 2 and 3, refer to this section in the dev doc: https://www.canva.dev/docs/apps/authenticating-users/#step-4-set-up-a-redirect-url
Some notes from previous developer:
The application consists of 2 parts:
https://auth.primostats.com/
https://canva-be.primostats.com/
Following the guide https://www.canva.dev/docs/apps/authentication-migration-guide/, you need to make sure that both applications are running on the same domain/subdomain.
After this, you need to change the required fields in the Canva app settings.
The code is up and running on the digitalocean droplet, accessible through the terminal.
WP integration is in both Authentication and BE apps