cozystack

0 Fork 0

mirror of https://github.com/cozystack/cozystack.git synced 2026-11-03 18:47:04 +09:00

Files

T

History

Ivan Okhotnikov 78709bba88 fix(dashboard): set webOrigins to "+" and add --api-route for k8s API paths

Two related issues caused the dashboard SPA to break with CORS errors
after the kc-access cookie expired:

1. KeycloakClient for dashboard had no webOrigins set, so the operator
   never touched the field in Keycloak after initial creation. After
   any rootUrl change the existing webOrigins value became stale and
   blocked CORS from the SPA. Setting "+" tells Keycloak to derive
   allowed origins from redirectUris.

2. oauth2-proxy returned 302 -> Keycloak /auth for unauthenticated
   XHR/fetch on /api and /apis. The login page does not emit
   Access-Control-Allow-Origin, so the SPA's fetch failed with CORS.
   --api-route makes oauth2-proxy answer 401 without redirect, so the
   SPA can handle the re-auth itself via top-level navigation.

Signed-off-by: Ivan Okhotnikov <ivan.okhotnikov@aenix.io>
(cherry picked from commit be8f6b4739)

2026-07-14 10:07:33 +00:00

images/token-proxy

fix(dashboard): unblock token-proxy startup when JWKS is briefly unreachable

2026-05-26 18:06:45 +03:00

templates

fix(dashboard): set webOrigins to "+" and add --api-route for k8s API paths

2026-07-14 10:07:33 +00:00

tests

fix(ingress): keep tls section in operator wildcard mode

2026-06-10 03:18:42 +03:00

.gitignore

fix(dashboard): unblock token-proxy startup when JWKS is briefly unreachable