95adabf435
ci/someci/push/web Pipeline was successful
@deno/svelte-adapter 0.1.1 passes req straight to SvelteKit without any proxy-aware rewriting (the Node adapter does this via ORIGIN env or PROTOCOL_HEADER). Behind itsh.dev's nginx-gateway TLS terminates and the pod receives plain http, so: req.url = http://marktvogt.de/<path> event.url.origin = http://marktvogt.de event.fetch() sets Origin: http://marktvogt.de on outbound calls Backend CORS allowlists only https://marktvogt.de — every /auth/refresh POST from the web pod was 403'd, breaking session refresh on prod. Rewrap baseHandler in serve.ts: rewrite the request URL's scheme to match X-Forwarded-Proto before forwarding. Comma-split handles the 'proto1,proto2' form some proxies emit.
Marktvogt Web
SvelteKit + Tailwind 4