Jason Woltje ac2a92d371 fix(api): use getTrustedOrigins() for WebSocket CORS instead of WEB_URL ...

The WebSocket gateway was hardcoded to `process.env.WEB_URL ?? "http://localhost:3000"`
for CORS origin, while the main API uses getTrustedOrigins() which reads TRUSTED_ORIGINS.
In production, WEB_URL was not set, causing CORS to reject connections from
mosaic.woltje.com with "Access-Control-Allow-Origin: http://localhost:3000".

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-27 06:04:40 -06:00

..

api

fix(api): use getTrustedOrigins() for WebSocket CORS instead of WEB_URL

2026-02-27 06:04:40 -06:00

coordinator

fix: eliminate apt-get from Kaniko builds, use static dumb-init binary

2026-02-16 20:06:06 -06:00

orchestrator

fix: enforce alpha versioning (0.0.x), delete erroneous 0.1.x releases (#526)

2026-02-27 01:22:12 +00:00

web

fix(web): update useWebSocket test for withCredentials (#548)

2026-02-27 11:47:44 +00:00