Allow Capacitor WebView origins in CORS/CSRF (#22) #19

Merged
westfarn merged 1 commits from capacitor-cors-csrf-22 into master 2026-07-26 14:04:10 -07:00
1 Commits
Author SHA1 Message Date
westfarn bc2bc115b2 Allow Capacitor WebView origins in CORS/CSRF (#22)
CI / test (pull_request) Successful in 10s
Unit Tests / test (pull_request) Successful in 9s
Merge https://localhost and capacitor://localhost into CORS_ALLOWED_ORIGINS
and CSRF_TRUSTED_ORIGINS so JWT API calls from native shells pass origin
checks without cookie credentials.
2026-07-26 15:40:45 -05:00