mirror of
https://github.com/rcourtman/Pulse.git
synced 2026-09-22 11:13:26 +00:00
15682557c7
- Detect when running behind a proxy/tunnel (X-Forwarded-*, CF-Ray headers) - Use SameSite=None for cookies when proxied to allow cross-origin access - Properly detect HTTPS when behind proxy using X-Forwarded-Proto - Fixes authentication not working through Cloudflare tunnels The issue was that SameSite=Strict/Lax cookies don't work when the origin changes (which happens with tunnels/proxies). Now we detect proxy headers and relax the cookie policy to SameSite=None when needed.