search

brunostjohn / perplexideez

Search the web and your self-hosted apps using local AI agents.
GNU Affero General Public License v3.0
113 stars 1 forks source link

CORS issue on password signup #2

Open mmealman opened 2 hours ago

mmealman commented 2 hours ago

Using the docker setup without SSO.

On http://website.com:3000/auth/signUp for creating a user where PUBLIC_BASE_URL has attempted to be set to "http://website.com", "https://website.com"(though SSL isn't really a thing here), or "http://website.com:3000" I'm getting the below error:

Cross-site POST form submissions are forbidden

brunostjohn commented 2 hours ago

The app assumes it'll be behind a reverse proxy with SSL so it uses secure cookies by default. These won't get transferred over an unencrypted connection. I'll add an environment variable in the next release that optionally lets you disable that.