mirror of
https://github.com/BetterCorp/BetterFrame.git
synced 2026-05-26 17:56:34 +00:00
WebView "URL can't be shown" — Authorization header only applies to the initial page load. CSS/JS/XHR/WebSocket sub-resources from the loaded page don't inherit it → Angie auth_request rejects → page breaks. Kiosk side: set_kiosk_cookie() injects betterframe_kiosk_key cookie into WebKit's cookie jar via JS bridge before loading the URL. Cookie persists across all sub-resource requests automatically. Server side: extractBearerToken() now checks betterframe_kiosk_key cookie as fallback when no Authorization header present. Same verifyKioskKey path, just different transport. |
||
|---|---|---|
| .. | ||
| src | ||
| .gitignore | ||
| bsb-tests.json | ||
| package.json | ||
| tsconfig.json | ||