fix typos

Author: enrico-kaack-comp

.env.template

@@ -22,4 +22,4 @@ FEEDBACK_SLACK_URL=
 FEEDBACK_URL_LINK=
 
 # frame-ancestors attribute of CSP. Separate multiple values with a space
-FRAME_ANCHESTORS=
+FRAME_ANCESTORS=

server.js

@@ -37,7 +37,7 @@ fastify.register(
       directives: {
         "connect-src": ["'self'", "sdk.openui5.org"],
         "script-src": isLocalDev ? ["'self'", "'unsafe-inline'"] : ["'self'"],
-        "frame-ancestors": [fastify.config.FRAME_ANCHESTORS]
+        "frame-ancestors": [fastify.config.FRAME_ANCESTORS]
       },
     }
   }

server/config/env.js

@@ -13,7 +13,7 @@ const schema = {
     'COOKIE_SECRET',
     'SESSION_SECRET',
     'API_BACKEND_URL',
-    'FRAME_ANCHESTORS',
+    'FRAME_ANCESTORS',
   ],
   properties: {
     // Application variables (.env)
@@ -28,7 +28,7 @@ const schema = {
     API_BACKEND_URL: { type: 'string' },
     FEEDBACK_SLACK_URL: { type: 'string' },
     FEEDBACK_URL_LINK: { type: 'string' },
-    FRAME_ANCHESTORS: { type: 'string' },
+    FRAME_ANCESTORS: { type: 'string' },
 
     // System variables
     NODE_ENV: { type: 'string', enum: ['development', 'production'] },

server/encrypted-session.js

@@ -32,7 +32,7 @@ async function encryptedSession(fastify) {
       path: '/',
       httpOnly: true,
       sameSite: "None", // cross-site cookies are needed for the session to work when embedded. By setting CORS to None and CSP.frame-anchestors we restrict the api calls from the browser that contain the cookies to originating from our site only.
-      partioned: true, // use for modern isolation of third party cookies when embedded, every embedded iframe (or not embedded) gets its own cookie partition
+      partitioned: true, // use for modern isolation of third party cookies when embedded, every embedded iframe (or not embedded) gets its own cookie partition
       secure: true,
       maxAge: 60 * 60 * 24 * 7, // 7 days
     },
@@ -45,7 +45,7 @@ async function encryptedSession(fastify) {
       path: '/',
       httpOnly: true,
       sameSite: "None", // see secureSession cookie for explanation
-      partioned: true, // see secureSession cookie for explanation
+      partitioned: true, // see secureSession cookie for explanation
       secure: true,
       maxAge: 60 * 60 * 24 * 7, // 7 days
     },