Spaces:
Paused
Paused
Commit History
-
bypass CF proxy for oauth/access_token — go direct to X
oauth/access_token was returning 500 from X when routed through the CF Worker. OAuth 1.0a signatures are sensitive to exact request details; CF Worker may have altered headers/body. Direct paths (no proxy): /oauth/access_token request_token still proxied (working fine via CF). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>248182d
-
fix: set FRONTEND_URL to bare origin so CORS allow-origin matches browser
FRONTEND_URL was set to PUBLIC_URL/app (with basePath suffix). Postiz backend uses FRONTEND_URL as the CORS allowed-origin. Browsers send Origin: https://host (scheme+host only, no path per the HTTP spec), so the /app suffix caused every pre-flight and credentialed request to be blocked — making login and signup silently fail. Fix: FRONTEND_URL = PUBLIC_URL (no /app). Email links generated by Postiz (e.g. ${FRONTEND_URL}/auth/login) still work because health-server now redirects any bare /auth/* path to /app/auth/*. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>ff3303a
-
initialize project
b4d7c1c