JavaScript

JavaScript applications, when built for production, are just a bunch of static files. You can deploy them to any web server, configure that web server to be SPA-aware, and you should be good to go!

Heroku

One easy way to deploy your JavaScript app to production with Okta is with Heroku.

To begin, install the Heroku CLI (opens new window) and run heroku login.

You can deploy your JavaScript application to Heroku in five steps:

Run heroku create.
Add the Git remote that's created as a remote for your project.
```
git remote add heroku <heroku-repo>
```

Create a static.json file with the configuration for secure headers and redirect all HTTP requests to HTTPS. Make sure to change dist/<your-app> to have the location of your app's built files.

{
  "headers": {
    "/**": {
      "Content-Security-Policy": "default-src 'self'; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:; frame-ancestors 'none'; connect-src 'self' https://*.okta.com https://*.herokuapp.com",
      "Referrer-Policy": "no-referrer, strict-origin-when-cross-origin",
      "Strict-Transport-Security": "max-age=63072000; includeSubDomains",
      "X-Content-Type-Options": "nosniff",
      "X-Frame-Options": "DENY",
      "X-XSS-Protection": "1; mode=block",
      "Feature-Policy": "accelerometer 'none'; camera 'none'; microphone 'none'"
    }
  },
  "https_only": true,
  "root": "dist/<your-app>/",
  "routes": {
    "/**": "index.html"
  }
}

For static.json to be read, you have to use the Heroku static buildpack (opens new window). The static buildpack runs npm run build by default. For Angular, add --prod to the build script.
```
"scripts": {
  "ng": "ng",
  "start": "ng serve",
  "build": "ng build --prod",
  "test": "ng test",
  "lint": "ng lint",
  "e2e": "ng e2e"
},
```

Commit your changes, add the Node.js + static buildpack, and deploy your app.

git add .
git commit -m "Configure secure headers and static buildpack"
heroku buildpacks:add heroku/nodejs
heroku buildpacks:add https://github.com/heroku/heroku-buildpack-static.git
git push heroku master

If your branch isn't named master, run:

git push --set-upstream heroku <branch-name>

You won't be able to sign in to your application until you add your Heroku app's URLs to your Sign-in redirect URIs, Sign-out redirect URIs, and Trusted Origins on Okta.

For more information, see Angular Deployment with a Side of Spring Boot (opens new window). This blog post includes instructions for deploying to Heroku, Firebase, Netlify, and AWS S3.

Docker

You can package your JavaScript application with Docker, too. See Angular + Docker with a Big Hug from Spring Boot (opens new window) for a blog post that details how. Specifically, see the Create a Docker Container for Your Angular App (opens new window) section.

We also have a tutorial that details how to package a React app with Docker (opens new window).

Edit This Page On GitHub

JavaScript

On This Page

Heroku

Docker