jerick 2e264014b6 fix: derive redirect and origin check from Host header ...

req.url resolves to the internal hostname in Docker standalone mode.
Read the Host header directly so redirects and CSRF origin checks use
whatever host the browser actually used (IP, hostname, or domain).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-20 16:44:11 -04:00

..

app

first build commit

2026-04-19 00:44:43 -04:00

components

first build commit

2026-04-19 00:44:43 -04:00

lib

fix: split auth config so middleware uses Edge-compatible module

2026-04-20 16:12:15 -04:00

middleware.ts

fix: derive redirect and origin check from Host header

2026-04-20 16:44:11 -04:00