fix: вход за прокси Caddy (forwarded headers, 403 CORS) #3

Merged

Liosha84 merged 1 commits from fix/forwarded-headers into main

2026-10-17 22:30:15 +02:00

Author	SHA1	Message	Date
Liosha84andClaude Opus 5.5	7f2c1ec282	fix: trust proxy forwarded headers so login works behind Caddy Behind Jambotron's Caddy the app saw http while the browser used https, so same-domain requests looked cross-origin and @CrossOrigin answered 403 on /api/auth/signin. server.forward-headers-strategy=framework makes the app use X-Forwarded-Proto/Host; app.origin can be set via APP_ORIGIN. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-17 22:29:31 +02:00

Author

SHA1

Message

Date

Liosha84andClaude Opus 5.5

7f2c1ec282

fix: trust proxy forwarded headers so login works behind Caddy

Behind Jambotron's Caddy the app saw http while the browser used https,
so same-domain requests looked cross-origin and @CrossOrigin answered
403 on /api/auth/signin. server.forward-headers-strategy=framework makes
the app use X-Forwarded-Proto/Host; app.origin can be set via APP_ORIGIN.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-17 22:29:31 +02:00