Repository navigation
Commit 4eb970c
committed
fix(app): use credentials when fetching webmanifest
Web manifests are fetched in a no-CORS mode that does not include the
page's basic-auth credentials by default. With OPENCODE_SERVER_PASSWORD
set, an authenticated user still sees `Manifest fetch ... failed,
code 401` errors on every reload, and the browser issues a separate
auth dialog for the manifest before settling.
Adding `crossorigin="use-credentials"` makes the browser send the
page's credentials with the manifest request, so the manifest fetch
succeeds in the same auth context as the page.
When OPENCODE_SERVER_PASSWORD is unset (no auth), this attribute has
no effect on the request - the manifest is served unauthenticated as
before.
Refs upstream issue anomalyco#183251 parent 21604ac commit 4eb970c
1 file changed
Lines changed: 1 addition & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
8 | 8 | | |
9 | 9 | | |
10 | 10 | | |
11 | | - | |
| 11 | + | |
12 | 12 | | |
13 | 13 | | |
14 | 14 | | |
| |||
0 commit comments