Skip to content

Comments

feat: allow users to publish webapps to the world (HEXA-1426, HEXA-1427, HEXA-1528)#1634

Open
yolanfery wants to merge 44 commits intomainfrom
HEXA-1427-allow-users-to-make-web-apps-publicly-accessible2
Open

feat: allow users to publish webapps to the world (HEXA-1426, HEXA-1427, HEXA-1528)#1634
yolanfery wants to merge 44 commits intomainfrom
HEXA-1427-allow-users-to-make-web-apps-publicly-accessible2

Conversation

@yolanfery
Copy link
Contributor

@yolanfery yolanfery commented Feb 21, 2026

Good part of the work is taken from #1634

Changes

  • CRUD for the is_public
  • Check access in Superset dashboard page
  • Check access for iframe webapps
  • Powered by banner for branding
  • Fix existing XSS injection

Screenshots / screencast

Screenshot 2026-02-23 at 12 37 10 Screenshot 2026-02-23 at 12 37 31 Screenshot 2026-02-23 at 12 38 07 Screenshot 2026-02-23 at 12 38 34

@yolanfery yolanfery changed the title Hexa 1427 allow users to make web apps publicly accessible2 feat: allow users to make web apps publicly accessible (HEXA-1426, HEXA-1427) Feb 23, 2026
yolanfery and others added 6 commits February 23, 2026 11:11
…as HTML

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
…ble2' of github.com:BLSQ/openhexa-app into HEXA-1427-allow-users-to-make-web-apps-publicly-accessible2
@yolanfery yolanfery changed the title feat: allow users to make web apps publicly accessible (HEXA-1426, HEXA-1427) feat: allow users to make web apps publicly accessible (HEXA-1426, HEXA-1427, HEXA-1528) Feb 23, 2026
@yolanfery yolanfery marked this pull request as ready for review February 23, 2026 11:47
@yolanfery yolanfery changed the title feat: allow users to make web apps publicly accessible (HEXA-1426, HEXA-1427, HEXA-1528) feat: allow users to publish webapps to the world (HEXA-1426, HEXA-1427, HEXA-1528) Feb 23, 2026
}

extend type Query {
webapp(workspaceSlug: String!, slug: String!): Webapp @loginRequired
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Remove enforcement to be logged in to be able to access public webapps

Comment on lines +50 to +54
await router.push({
pathname: "/workspaces/[workspaceSlug]/webapps",
query: { workspaceSlug: workspace.slug },
});
clearCache();
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Small side-quest 🙂

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The order seems less intuitive but it can create race condition. In this new order, we actually show the webapp being removed form the list

Copy link
Contributor

@DimitriKwihangana DimitriKwihangana left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This web app feature looks really promising. it is going to be something big.

I just have a small comment: when a web app is updated to public, the web apps table still shows the initial state. I think the updateWebApp mutation isn’t returning the full updated object.

Image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants