4d6975934abbe6897d8a6a9991c384a29074ed87
Scope OFFICER_VAULT_ORIGIN to ['/api/auth', '/api/vault'] instead of '/api/vault' only. The OffVault app authenticates to the platform first (/api/auth/signin) and only then reaches the vault proxy — same shape as the music app's ['/api/auth', '/api/music']. Without /api/auth the signin was rejected in originScopeMiddleware with "Origin not permitted". Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Description
No description provided
51 MiB
Languages
TypeScript
84.6%
CSS
6.7%
Shell
5%
JavaScript
3.7%