• Miva Docs
• Reference Guide
• Separate Admin URL From Runtime

Separate Admin URL From Runtime

Released in 10.05.00

Starting with the 10.05.00 release there is a new Domain Setting for "Secure Base URL for Administration Graphics." This new domain setting allows for the Admin URL to be set independently from that of runtime (what the customer sees, i.e. your storefront).

Initially, admin URLs will be exactly the same as the storefront URL. Upon upgrade to version 10.05.00, this is set automatically to be the same. However, in a future update, Miva will modify each store's URL so it is different than runtime.

Separate Admin URL

A separate administration URL has the following benefits:

• Allows Miva to leverage the browser's CORS Policy (Cross-Origin Resource Sharing) when generating admin PageBuilder Preview to prevent JS and other files from executing in admin.
• Enables Independent PageBuilder Session Verification Cookies.
• Prevents JavaScript on Storefront pages from executing in admin.

Upgrade Experience

For customers stores who were created prior to version 10.05.00, this new field will be created during the streaming upgrade process. It will then be set with the exact same URL as your storefront, so you won't notice any changes immediately.

PA-DSS Checklist

There is a new checklist item that will be set to fail unless the admin and runtime URLs are different.

Secure URL to Administration: URL shares origin with secure and/or non-secure URL to Miva Merchant.