From 37204a5dda23c855bf94cad1014cbb31062d4902 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Ask=20Bj=C3=B8rn=20Hansen?= Date: Sun, 24 May 2026 01:34:12 -0700 Subject: [PATCH] fix(cors): correct malformed askdev wildcard origin The askdev origin pattern was missing a slash (https:/* instead of https://*), so requests from *.askdev.grundclock.com never matched the CORS allowlist and got no Access-Control-Allow-Origin header. --- server/server.go | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/server/server.go b/server/server.go index 109a4fa..55cfc6c 100644 --- a/server/server.go +++ b/server/server.go @@ -137,7 +137,8 @@ func (srv *Server) Run() error { })) e.Use(otelecho.Middleware("data-api")) - e.Use(slogecho.NewWithConfig(log, + e.Use(slogecho.NewWithConfig( + log, slogecho.Config{ WithTraceID: false, // done by logger already DefaultLevel: slog.LevelInfo, @@ -182,7 +183,7 @@ func (srv *Server) Run() error { "http://localhost", "http://localhost:5173", "http://localhost:5174", "http://localhost:8080", "https://www.ntppool.org", "https://*.ntppool.org", "https://web.beta.grundclock.com", "https://manage.beta.grundclock.com", - "https:/*.askdev.grundclock.com", + "https://*.askdev.grundclock.com", }, AllowHeaders: []string{echo.HeaderOrigin, echo.HeaderContentType, echo.HeaderAccept}, }))