kevinveenbirkenbachandClaude Opus 4.8 954da6d180 fix(tor): onion-aware CSP and oauth2-proxy (exclusive vs primary) ...

Over Tor a page served on an .onion still advertised a clearnet-only CSP and oauth2-proxy config, so onion origins were blocked (dashboard could not frame auth.<onion>; oauth2-proxy rejected the redirect back to the onion app). build_csp_header now mirrors the clearnet primary to the node onion per token; the keycloak oauth2-proxy config derives whitelist_domains and cookie_domains from the app resolved domains. Exclusive (onion-only) apps get onion tokens only, primary apps get both, non-tor apps stay clearnet.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-07 13:25:44 +02:00

..

action

…

filter

fix(tor): onion-aware CSP and oauth2-proxy (exclusive vs primary)

2026-07-07 13:25:44 +02:00

lookup

feat(lookups): tor_socks endpoint SPOT + tor_ports exposed-port forwarding

2026-07-06 23:53:18 +02:00

__init__.py

…