fix/forwarded-headers
Behind Jambotron's Caddy the app saw http while the browser used https, so same-domain requests looked cross-origin and @CrossOrigin answered 403 on /api/auth/signin. server.forward-headers-strategy=framework makes the app use X-Forwarded-Proto/Host; app.origin can be set via APP_ORIGIN. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Description
No description provided
2.1 MiB
Languages
Java
34.2%
TypeScript
32.3%
HTML
15.2%
SCSS
12.7%
Dockerfile
2.3%
Other
3.3%