Set use-credentials
for manifest file
#397
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Short description:
Fixing a problem with inaccessible manifest file when using HTTP basic auth.
Long description:
I am using nginx + basic auth for
your_spotify
frontend.After the last update, I can no longer see the left sidebar in Chrome. In Safari it works fine.
So on chrome page looks like that (artist and song information are hidden by me):
![Screenshot 2024-05-09 at 20 51 01](https://private-user-images.githubusercontent.com/11377013/329343779-9830858b-0815-42c7-82cd-eba82e1a3b32.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.d5PpnklTpEsRStAcnmCos8U8ZAxoODGbqaea4If6Acw)
After a little investigation I found that
![Screenshot 2024-05-09 at 20 26 30](https://private-user-images.githubusercontent.com/11377013/329344930-2bdb2980-17c0-43a8-9247-5761282ca3ab.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.zpVEbEk1UbudXDBG0t1LH99BupVWWw1UOr4MZUJ_LJ8)
manifest.json
cannot be loaded, and the problem is that it does not use auth headers when making the request:The situation is described here:
https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes/crossorigin#example_web_manifest_with_credentials
Thus, this PR fixes this problem.