4d6975934abbe6897d8a6a9991c384a29074ed87
Scope OFFICER_VAULT_ORIGIN to ['/api/auth', '/api/vault'] instead of '/api/vault' only. The OffVault app authenticates to the platform first (/api/auth/signin) and only then reaches the vault proxy — same shape as the music app's ['/api/auth', '/api/music']. Without /api/auth the signin was rejected in originScopeMiddleware with "Origin not permitted". Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Description
No description provided
42 MiB
Languages
TypeScript
90.9%
Shell
4.7%
JavaScript
4.1%
CSS
0.2%
HTML
0.1%