Skip to content

Fix PWA manifest access behind authenticated proxies - #5820

Merged
ssddanbrown merged 1 commit into
BookStackApp:developmentfrom
tfnh621:patch-1
Oct 5, 2025
Merged

Fix PWA manifest access behind authenticated proxies#5820
ssddanbrown merged 1 commit into
BookStackApp:developmentfrom
tfnh621:patch-1

Conversation

@tfnh621

@tfnh621 tfnh621 commented Oct 2, 2025

Copy link
Copy Markdown
Contributor

In environments where BookStack is served behind an authenticated proxy (such as Cloudflare Zero Trust), the browser fails to fetch manifest.json since credentials are not sent by default.
As a result, PWA installation and functionality do not work.

This PR resolves the issue by adding crossorigin="use-credentials" to the <link rel="manifest"> tag, ensuring credentials are included when the manifest is requested.

Reference:
https://developer.mozilla.org/en-US/docs/Web/Progressive_web_apps/Manifest#deploying_a_manifest

@ssddanbrown ssddanbrown added this to the v25.07.3 milestone Oct 5, 2025
@ssddanbrown

Copy link
Copy Markdown
Member

Thanks @tfnh621!

@ssddanbrown
ssddanbrown merged commit 009d146 into BookStackApp:development Oct 5, 2025
@tfnh621
tfnh621 deleted the patch-1 branch October 8, 2025 13:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants