29e699dc74
All checks were successful
Deploy to Production / deploy (push) Successful in 1m22s
@fastify/cors injects Access-Control-Allow-* in the onSend hook, but the SSE endpoint goes straight to reply.raw.flushHeaders() — onSend never runs, so the browser saw "No 'Access-Control-Allow-Origin' header" and blocked the fetch before any bytes flowed. Set Allow-Origin (reflecting the configured app origin), Allow-Credentials, and Vary: Origin manually right before the SSE content-type headers. Matches what the cors plugin would have emitted on a normal response. |
||
|---|---|---|
| .. | ||
| src | ||
| Dockerfile | ||
| package.json | ||
| tsconfig.json | ||