validate_origin() only allowed localhost origins by default, causing production WebSocket connections to be rejected. Now it reads APP_DOMAIN_URL and APP_STATIC_DOMAIN from env and automatically adds their http/https/ws/wss variants to the allowed origins list. Also add APP_DOMAIN_URL to the production configmap. |
||
|---|---|---|
| .. | ||
| agent | ||
| agent-tool-derive | ||
| api | ||
| avatar | ||
| config | ||
| db | ||
| git | ||
| migrate | ||
| models | ||
| queue | ||
| room | ||
| rpc | ||
| service | ||
| session | ||
| transport | ||
| webhook | ||