Security Bloghttps://blog.wavespro.net/https://blog.wavespro.net/posts/keyless-deploy-with-oidchttps://blog.wavespro.net/posts/keyless-deploy-with-oidc这个博客部署到 Azure Static Web Apps 时如何做到 GitHub 端零长效 secret：从 Entra ID 的 workload identity、federated credential 四要素，到 OIDC Discovery 验签、双层 token 与信任边界。Fri, 03 Jul 2026 00:00:00 GMTsecurityazureoidcci-cdhttps://blog.wavespro.net/posts/view-transitions-and-islandshttps://blog.wavespro.net/posts/view-transitions-and-islands用浏览器原生 View Transitions API 做跨页动画，配合 Astro Islands 把交互成本压在岛屿内，最终守住 0 JS 默认与首屏 < 50KB 的预算。Sun, 28 Jun 2026 00:00:00 GMTastroperformanceuxhttps://blog.wavespro.net/posts/strict-csp-on-static-hostinghttps://blog.wavespro.net/posts/strict-csp-on-static-hosting在 Azure Static Web Apps 上落地 script-src 'self'，放弃 per-request nonce，权衡 Trusted Types 与 Pagefind，并把所有响应头收进 staticwebapp.config.json。Wed, 24 Jun 2026 00:00:00 GMTsecuritycspazurehttps://blog.wavespro.net/posts/hello-astrohttps://blog.wavespro.net/posts/hello-astro记录这个双语技术博客的技术选型：Astro 5 Islands、零 JS 默认、Tailwind v4 CSS-first，以及为什么不选 Next 或纯静态生成器。Sat, 20 Jun 2026 00:00:00 GMTastrometafrontend