Monorepo for Tangled tangled.org

spindle/xrpc: allow cross-origin requests from the web frontend #4468

Open anirudh.fi
targeting sv-fe from icy/wvnkts
Open opened by and assigned to anirudh.fi
targeting sv-fe from icy/wvnkts

The web app calls the spindle's service-auth'd xrpc directly to manage repo secrets; add a wildcard CORS middleware (auth is bearer-token, not cookie-based, so * is safe), mirroring the appview.

Signed-off-by: Anirudh Oppiliappan anirudh@tangled.org

Commits 0