sdarbinyan/marketplaces
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(admin): isolate login on admin host
Some checks failed
Architecture Governance / architecture (push) Has been cancelled
Details
Deploy Frontend / deploy (push) Has been cancelled
Details

Browse Source 
Allow runtime request headers through API preflight and keep the storefront shell hidden while admin QR authentication gates backoffice.
This commit is contained in:
sdarbinyan
2026-08-20 20:15:21 +04:00
parent 2e41e216c0
commit 14d46ceaa6
3 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
scripts/deploy/configure-api-domain.sh
View File

@@ -59,7 +59,7 @@ server {
add_header Access-Control-Allow-Origin \$cors_origin always;
add_header Access-Control-Allow-Credentials "true" always;
add_header Access-Control-Allow-Methods "GET, POST, PUT, PATCH, DELETE, OPTIONS" always;
add_header Access-Control-Allow-Headers "Authorization, Content-Type, AdminWebSessionID, X-Requested-With" always;
add_header Access-Control-Allow-Headers "Authorization, Content-Type, AdminWebSessionID, WebSessionID, Currency, X-Language, X-Region, X-Requested-With" always;
add_header Vary "Origin" always;
if (\$request_method = OPTIONS) { return 204; }