MetatroncubeSoftwareSolutions/datewise
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: allow form actions from the app domain behind the HTTPS proxy

Browse Source 
React Router's CSRF check compared https Origin with the http URL seen behind Nginx,
rejecting every admin form save with 400.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
metatroncubeswdev 2026-10-15 05:06:05 -04:00
parent 23f259fcc8
commit 38e82f791e
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
react-router.config.ts
View File

@ -2,4 +2,8 @@ import type { Config } from "@react-router/dev/config";
export default {
ssr: true,
// Behind Nginx/Caddy the Node server sees http://, while the browser's Origin is https://, so
// React Router's CSRF check rejects every form action (400 Bad Request). List the hosts that may
// post: production, and the Shopify CLI dev tunnels.
allowedActionOrigins: ["datewise.metatronlabz.com", "*.trycloudflare.com"],
} satisfies Config;