 Alex Holliday
|
0f230c4d70
|
update tests
|
2026-06-24 10:53:13 -07:00 |
|
 Ian Troisi
|
517139cbf4
|
fix: cache negative custom domain CORS lookups
Use a shorter TTL for rejected origins so unknown domains do not hit
the database on every cross-origin request.
|
2026-06-11 14:48:31 -04:00 |
|
|
Ian Troisi
|
ef049b6521
|
fix: resolve CORS TypeScript error and format server files
Type defaultCorsOptions as CorsOptions so allowedHeaders is compatible
with the cors middleware. Format files from develop merge for CI.
|
2026-06-11 13:55:10 -04:00 |
|
|
Ian Troisi
|
33f8641f3a
|
Merge branch 'develop' into feat/status-page-custom-domain
|
2026-06-11 13:54:27 -04:00 |
|
|
Alex Holliday
|
ac77216f07
|
add middleware tests
|
2026-06-11 10:42:15 -07:00 |
|
|
Ian Troisi
|
120708ed47
|
perf: cache custom domain CORS origin lookups
Avoid hitting the database on every cross-origin request by caching
published custom domain checks for five minutes.
|
2026-06-11 13:15:02 -04:00 |
|
|
Ian Troisi
|
6a1ab622b3
|
fix: scope custom domain CORS to public status page routes
Only allow registered custom domain origins on public GET/OPTIONS status
page API routes instead of the entire application API surface.
|
2026-06-11 13:15:02 -04:00 |
|