v1.8.2 Release - Streaming Hotfix: Cross-Platform Video Playback Correction

Author: Cameron Amer

CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## [1.8.2] - 2026-06-03
+
+### Streaming Hotfix: Cross-Platform Video Playback Correction
+
+- **CORS Configuration Update**
+  - Updated CORS configuration on local streaming and API servers to use dynamic origin matching.
+  - Resolved video playback failures (`TypeError: Failed to fetch` / `TypeError: Load failed`) on Windows, macOS, and Linux clients by explicitly supporting platform-specific custom schemes and WebKit's `null` origin.
+
+---
+
 ## [1.8.1] - 2026-06-03
 
 ### Features, Security & Architecture (MimoPro Cleanups Part 2)

app/package.json

@@ -1,7 +1,7 @@
 {
   "name": "app",
   "private": true,
-  "version": "1.8.1",
+  "version": "1.8.2",
   "type": "module",
   "scripts": {
     "dev": "vite",

app/src-tauri/Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "app"
-version = "1.8.1"
+version = "1.8.2"
 description = "Turn your Telegram account into an unlimited, secure cloud storage drive. an Open-source desktop app built with Tauri, Rust, and React."
 authors = ["Cameron Amer"]
 edition = "2021"

app/src-tauri/Cargo.toml

@@ -128,10 +128,17 @@ pub fn restart_api_server(app: &tauri::AppHandle) {
 
             match actix_web::HttpServer::new(move || {
                 let cors = actix_cors::Cors::default()
-                    .allowed_origin("http://127.0.0.1")
-                    .allowed_origin("http://localhost")
-                    .allowed_origin("tauri://localhost")
-                    .allowed_origin("https://tauri.localhost")
+                    .allowed_origin_fn(|origin, _req_head| {
+                        let origin_bytes = origin.as_bytes();
+                        origin_bytes.starts_with(b"tauri://")
+                            || origin_bytes.starts_with(b"http://tauri.localhost")
+                            || origin_bytes.starts_with(b"https://tauri.localhost")
+                            || origin_bytes.starts_with(b"http://localhost")
+                            || origin_bytes.starts_with(b"http://127.0.0.1")
+                            || origin_bytes.starts_with(b"https://asset.localhost")
+                            || origin_bytes.starts_with(b"http://asset.localhost")
+                            || origin_bytes == b"null"
+                    })
                     .allow_any_method()
                     .allow_any_header();
 

app/src-tauri/src/lib.rs

@@ -286,9 +286,17 @@ pub async fn start_server(
 
     let server = HttpServer::new(move || {
         let cors = Cors::default()
-            .allowed_origin("tauri://localhost")
-            .allowed_origin("http://localhost:1420")
-            .allowed_origin("https://tauri.localhost")
+            .allowed_origin_fn(|origin, _req_head| {
+                let origin_bytes = origin.as_bytes();
+                origin_bytes.starts_with(b"tauri://")
+                    || origin_bytes.starts_with(b"http://tauri.localhost")
+                    || origin_bytes.starts_with(b"https://tauri.localhost")
+                    || origin_bytes.starts_with(b"http://localhost")
+                    || origin_bytes.starts_with(b"http://127.0.0.1")
+                    || origin_bytes.starts_with(b"https://asset.localhost")
+                    || origin_bytes.starts_with(b"http://asset.localhost")
+                    || origin_bytes == b"null"
+            })
             .allow_any_method()
             .allow_any_header();
 

app/src-tauri/src/server.rs

@@ -12,7 +12,7 @@
     }
   },
   "productName": "Telegram Drive",
-  "version": "1.8.1",
+  "version": "1.8.2",
   "identifier": "com.cameronamer.telegramdrive",
   "build": {
     "beforeDevCommand": "npm run dev",