-
-
Notifications
You must be signed in to change notification settings - Fork 859
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[Bug]: POST /pictrs/image not possible with CORS #3567
Comments
This is rather tedious. I'm not sure if the obvious fix (allow CORS credentials) is the right fix here for security reasons. Is there no other way to pass the token to Pictrs? If we're currently using multipart forms for uploading, then a new form key could be introduced just for JSON data (including the JWT token). An |
Note: Proxy server is still required due to LemmyNet/lemmy#3567
Note: Proxy server is still required due to LemmyNet/lemmy#3567
Note: Proxy server is still required due to LemmyNet/lemmy#3567
With #3818 |
Requirements
Summary
Currently a POST to
/pictrs/image
requires JWT to be incookie
header.Web clients cannot set the
cookie
header.Steps to Reproduce
Ideally, I would be able to send JWT as a query parameter.
Technical Details
N/A
Version
0.18.1
Lemmy Instance URL
No response
The text was updated successfully, but these errors were encountered: