rspace-online/src
Jeff Emmett 9050298c6f Fix CORS for dynamic rspace.online subdomains in EncryptID
The allowedOrigins array only listed explicit subdomains (auth, cca, demo,
app, dev) so any canvas slug subdomain like create.rspace.online was
rejected by CORS. Switch to a function-based origin check that allows all
*.rspace.online subdomains dynamically.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-19 01:55:42 +00:00
..
encryptid Fix CORS for dynamic rspace.online subdomains in EncryptID 2026-02-19 01:55:42 +00:00
lib feat: add JSON WebSocket mode, demo seed data, and useDemoSync hook 2026-02-15 09:38:59 -07:00