Skip to content

fix(app): support authenticated web app manifests#30399

Open
chadvoegele wants to merge 1 commit into
anomalyco:devfrom
chadvoegele:fix/manifest-credentials
Open

fix(app): support authenticated web app manifests#30399
chadvoegele wants to merge 1 commit into
anomalyco:devfrom
chadvoegele:fix/manifest-credentials

Conversation

@chadvoegele
Copy link
Copy Markdown

@chadvoegele chadvoegele commented Jun 2, 2026

Issue for this PR

Fixes #30405

Type of change

  • Bug fix
  • New feature
  • Refactor / code improvement
  • Documentation

What does this PR do?

Adds crossorigin="use-credentials" to the web app manifest link.

MDN's Web application manifest documentation says:

If the manifest requires credentials to fetch, the crossorigin attribute must be set to use-credentials, even if the manifest file is in the same origin as the current page.

Why do you need this PR?

I am running opencode web behind a nginx reverse proxy for TLS and authentik for SSO authentication. I could load the opencode web app but the PWA option was not available. The reason was that the browser was not sending credentials for /site.webmanifest and so it was redirected to the auth page.

How did you verify your code works?

I applied the patch, reloaded on mobile, and installed the PWA via the prompt.

Screenshots / recordings

N/A - link attribute change only.

Checklist

  • I have tested my changes locally
  • I have not included unrelated changes in this PR

Use of AI

codex was used to diagnose the issue and prepare the PR. The final PR and description were prepared by me, a human (@chadvoegele)

@github-actions github-actions Bot added needs:compliance This means the issue will auto-close after 2 hours. needs:title labels Jun 2, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Jun 2, 2026

Hey! Your PR title Add credentials to web app manifest links doesn't follow conventional commit format.

Please update it to start with one of:

  • feat: or feat(scope): new feature
  • fix: or fix(scope): bug fix
  • docs: or docs(scope): documentation changes
  • chore: or chore(scope): maintenance tasks
  • refactor: or refactor(scope): code refactoring
  • test: or test(scope): adding or updating tests

Where scope is the package name (e.g., app, desktop, opencode).

See CONTRIBUTING.md for details.

@chadvoegele chadvoegele changed the title Add credentials to web app manifest links feat(app): support authenticated web app manifests Jun 2, 2026
@github-actions github-actions Bot removed needs:compliance This means the issue will auto-close after 2 hours. needs:title labels Jun 2, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Jun 2, 2026

Thanks for updating your PR! It now meets our contributing guidelines. 👍

@chadvoegele chadvoegele changed the title feat(app): support authenticated web app manifests fix(app): support authenticated web app manifests Jun 2, 2026
@github-actions github-actions Bot added needs:compliance This means the issue will auto-close after 2 hours. needs:issue labels Jun 2, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Jun 2, 2026

Thanks for your contribution!

This PR doesn't have a linked issue. All PRs must reference an existing issue.

Please:

  1. Open an issue describing the bug/feature (if one doesn't exist)
  2. Add Fixes #<number> or Closes #<number> to this PR description

See CONTRIBUTING.md for details.

@github-actions github-actions Bot removed needs:compliance This means the issue will auto-close after 2 hours. needs:issue labels Jun 2, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Jun 2, 2026

Thanks for updating your PR! It now meets our contributing guidelines. 👍

@chadvoegele chadvoegele marked this pull request as ready for review June 2, 2026 13:08
@chadvoegele chadvoegele requested a review from adamdotdevin as a code owner June 2, 2026 13:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

PWA manifest is not fetched with credentials behind authenticated proxy

1 participant