From 504a52def33dac08ddcfa83df3ebdc7a536b7606 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Alex=20S=C3=A1nchez?= Date: Mon, 17 Aug 2026 22:10:35 -0600 Subject: [PATCH] fix[frontend](proxy): removed origin header on localhost proxy --- frontend/vite.config.ts | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/frontend/vite.config.ts b/frontend/vite.config.ts index 6d983b9f8..3853698a4 100644 --- a/frontend/vite.config.ts +++ b/frontend/vite.config.ts @@ -23,12 +23,13 @@ const API_TARGET = FEDERATION ? FS_URL : BACKEND_URL // request looks same-origin. Dev-only convenience for admins of the target // instance; do not rely on this to bypass origin checks you don't control. type ConfigureProxy = NonNullable + console.log(BACKEND_URL) const spoofOriginHeaders: ConfigureProxy = (proxy) => { proxy.on('proxyReq', (proxyReq, req) => { - if (req.headers.origin?.startsWith('http://localhost')) return - proxyReq.setHeader('Origin', API_TARGET) proxyReq.setHeader('Referer', API_TARGET + '/') + if (!req.headers.origin || req.headers.origin?.startsWith('http://localhost')) return + proxyReq.setHeader('Origin', API_TARGET) }) }