From f3026c3c393f5d1c6942e2d69cbc63e68c75f320 Mon Sep 17 00:00:00 2001 From: dennismdejong Date: Wed, 22 Jul 2026 11:41:08 +0200 Subject: [PATCH] fix: resolve CORS errors when creating deploy keys (#406) Add access-control-allow-credentials: true to default CORS config, required for credentialed requests with cookies. Also fix trailing slash mismatch in SpaRouter path prefix for /management/deploykey. Fixes #406 --- src/main/java/api/router/SpaRouter.java | 2 +- src/main/resources/application.yml | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/src/main/java/api/router/SpaRouter.java b/src/main/java/api/router/SpaRouter.java index eadbff6b..1ab02b8a 100644 --- a/src/main/java/api/router/SpaRouter.java +++ b/src/main/java/api/router/SpaRouter.java @@ -23,7 +23,7 @@ public class SpaRouter { "/tapir/", "/search/", "/reports/", - "/management/deploykey/", + "/management/deploykey", "/.well-known/" }; private static final Predicate FILE_NAME_PREDICATE = diff --git a/src/main/resources/application.yml b/src/main/resources/application.yml index 4d20cded..86f430f5 100644 --- a/src/main/resources/application.yml +++ b/src/main/resources/application.yml @@ -173,6 +173,7 @@ quarkus: origins: ${registry.cors.origins} methods: "*" headers: "*" + access-control-allow-credentials: true "%dev": registry: