mirror of
https://github.com/rcourtman/Pulse.git
synced 2026-09-22 19:23:31 +00:00
4e5d28341d
- Detect when running behind a proxy/tunnel (X-Forwarded-*, CF-Ray headers) - Use SameSite=None for cookies when proxied to allow cross-origin access - Properly detect HTTPS when behind proxy using X-Forwarded-Proto - Fixes authentication not working through Cloudflare tunnels The issue was that SameSite=Strict/Lax cookies don't work when the origin changes (which happens with tunnels/proxies). Now we detect proxy headers and relax the cookie policy to SameSite=None when needed.