MOHAN 7384a6c05a Strip trailing slashes from PUBLIC_URL, CORS_ORIGINS, FRONTEND_BASE_URL
A trailing slash on CORS_ORIGINS never matches a browser's Origin header
(which never includes a path), silently breaking CORS with no error
message beyond the browser's generic "No Access-Control-Allow-Origin
header" — exactly what happened in production after switching domains.
A trailing slash on PUBLIC_URL/FRONTEND_BASE_URL similarly produced
double-slash URLs in API responses and reset-password links. All three
are now normalized at config-load time so a .env typo can't cause this
again.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-05 02:54:15 +05:30
2026-06-29 09:10:05 +05:30
2026-07-05 02:48:53 +05:30
Description
No description provided
156 KiB
Languages
Python 100%