add advanced setting for enabling plain HTTP domains

.gitignore

@@ -2,6 +2,7 @@
 *.untracked.*
 node-compile-cache/
 
+
 *.cpuprofile
 
 

apps/dashboard/src/app/(main)/(protected)/projects/[projectId]/domains/page-client.tsx

@@ -30,9 +30,8 @@ function EditDialog(props: {
   }
 )) {
   const domainFormSchema = yup.object({
-    domain: urlSchema
-      .url("Invalid URL")
-      .transform((value) => 'https://' + value)
+    domain: yup.string()
+      // .url("Invalid URL")
       .notOneOf(
         props.domains
           .filter((_, i) => (props.type === 'update' && i !== props.editIndex) || props.type === 'create')
@@ -44,6 +43,7 @@ function EditDialog(props: {
       .matches(/^\//, "Handler path must start with /")
       .defined(),
     addWww: yup.boolean(),
+    allowInsecureHttp: yup.boolean(),
   });
 
   const canAddWww = (domain: string | undefined) => {
@@ -71,6 +71,7 @@ function EditDialog(props: {
       addWww: props.type === 'create',
       domain: props.type === 'update' ? props.defaultDomain.replace(/^https:\/\//, "") : undefined,
       handlerPath: props.type === 'update' ? props.defaultHandlerPath : "/handler",
+      allowInsecureHttp: false,
     }}
     onOpenChange={props.onOpenChange}
     trigger={props.trigger}
@@ -84,11 +85,11 @@ function EditDialog(props: {
             domains: [
               ...props.domains,
               {
-                domain: values.domain,
+                domain: (values.allowInsecureHttp ? 'http' : 'https') + `://` + values.domain,
                 handlerPath: values.handlerPath,
               },
-              ...(canAddWww(values.domain.slice(8)) && values.addWww ? [{
-                domain: 'https://www.' + values.domain.slice(8),
+              ...(canAddWww(values.domain) && values.addWww ? [{
+                domain: `${values.allowInsecureHttp ? 'http' : 'https'}://www.` + values.domain,
                 handlerPath: values.handlerPath,
               }] : []),
             ],
@@ -119,7 +120,7 @@ function EditDialog(props: {
           label="Domain"
           name="domain"
           control={form.control}
-          prefixItem='https://'
+          prefixItem={form.getValues('allowInsecureHttp') ? 'http://' : 'https://'}
           placeholder='example.com'
         />
 
@@ -145,6 +146,16 @@ function EditDialog(props: {
               <Typography variant="secondary" type="footnote">
                 only modify this if you changed the default handler path in your app
               </Typography>
+              <div className="my-4">
+                <SwitchField
+                  label="Allow insecure HTTP domains"
+                  name="allowInsecureHttp"
+                  control={form.control}
+                />
+              </div>
+              <Typography variant="secondary" type="footnote">
+                Warning: HTTP domains are insecure and should only be used for development / internal networks.
+              </Typography>
             </AccordionContent>
           </AccordionItem>
         </Accordion>

packages/stack-shared/src/interface/crud/projects.ts

@@ -57,7 +57,7 @@ export const emailConfigSchema = yupObject({
 });
 
 const domainSchema = yupObject({
-  domain: schemaFields.projectTrustedDomainSchema.defined(),
+  domain: schemaFields.urlSchema.defined(),
   handler_path: schemaFields.handlerPathSchema.defined(),
 });