fix/forwarded-headers
Behind Jambotron's Caddy the app saw http while the browser used https, so same-domain requests looked cross-origin and @CrossOrigin answered 403 on /api/auth/signin. server.forward-headers-strategy=framework makes the app use X-Forwarded-Proto/Host; app.origin can be set via APP_ORIGIN. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Description
No description provided
884 KiB
Languages
HTML
32.8%
Java
26.8%
TypeScript
25.9%
SCSS
10.1%
PLpgSQL
1.8%
Other
2.6%