Gabriel Vidal edabfc08a3 fix(pwa): load the web manifest behind Authelia ...

The browser fetches `<link rel="manifest">` anonymously unless told otherwise,
so Authelia answered it with the 302 to the portal and the cross-origin hop was
then blocked by CORS. The manifest failed to load on every single page view —
visible as an `ERR_FAILED` in the console — which is the file carrying the app
name, icons and theme colours used when installing the PWA.

`useCredentials: true` emits `crossorigin="use-credentials"`, so the request
carries the session cookie and is served as a normal authenticated 200.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

2026-08-15 11:44:11 +02:00

4.7 KiB

Raw Permalink Blame History

View Raw