Files
vikingowl 95adabf435
ci/someci/push/web Pipeline was successful
fix(web): honor X-Forwarded-Proto so event.url.origin is https
@deno/svelte-adapter 0.1.1 passes req straight to SvelteKit without any
proxy-aware rewriting (the Node adapter does this via ORIGIN env or
PROTOCOL_HEADER). Behind itsh.dev's nginx-gateway TLS terminates and the
pod receives plain http, so:

  req.url           = http://marktvogt.de/<path>
  event.url.origin  = http://marktvogt.de
  event.fetch() sets Origin: http://marktvogt.de on outbound calls

Backend CORS allowlists only https://marktvogt.de — every /auth/refresh
POST from the web pod was 403'd, breaking session refresh on prod.

Rewrap baseHandler in serve.ts: rewrite the request URL's scheme to
match X-Forwarded-Proto before forwarding. Comma-split handles the
'proto1,proto2' form some proxies emit.
2026-05-16 04:33:30 +02:00
..
2026-02-18 04:49:25 +01:00

Marktvogt Web

SvelteKit + Tailwind 4