fix production login issue

2026-07-29 00:48:32 -04:00
parent a665c942d2
commit 9e2fc050be
7 changed files with 78 additions and 4 deletions
@@ -76,6 +76,9 @@ function buildSecurityHeaders({ assetSources = [], connectSources = collectBrows
  const imgSrc = [...new Set(["'self'", 'data:', 'blob:', 'https:', ...assetOrigins, ...connectOrigins])]
  const fontSrc = ["'self'", 'data:', ...assetOrigins]
  const connectSrc = [...new Set(["'self'", 'https:', 'wss:', ...assetOrigins, ...connectOrigins, ...websocketOrigins])]
+  if (process.env.NODE_ENV !== 'production') {
+    connectSrc.push('ws:')
+  }

  return [
    { key: 'Strict-Transport-Security', value: 'max-age=31536000; includeSubDomains' },