deboste 96547f68a3 fix(frontend): use URL origin for fetch/EventSource to support reverse proxy auth ...

When Hermes WebUI runs behind a reverse proxy with HTTP basic auth
(e.g. Caddy basic_auth), browsers embed credentials in the page URL.
The Fetch API and EventSource reject requests constructed from URLs
that include credentials (per Fetch spec, all modern browsers).

Fix: construct all fetch() and EventSource URLs via
new URL(path, location.origin) which strips credentials from the
base URL. Add credentials:"include" to ensure auth headers are
forwarded on each request.

2026-03-31 15:00:38 +00:00

..

boot.js

fix(frontend): use URL origin for fetch/EventSource to support reverse proxy auth

2026-03-31 15:00:38 +00:00

index.html

Hermes Web UI — Sprints 11-14: multi-provider models, settings, session QoL, alerts, polish

2026-03-31 07:02:47 +00:00

messages.js

fix(frontend): use URL origin for fetch/EventSource to support reverse proxy auth

2026-03-31 15:00:38 +00:00

panels.js

Hermes Web UI — Sprints 11-14: multi-provider models, settings, session QoL, alerts, polish

2026-03-31 07:02:47 +00:00

sessions.js

Hermes Web UI — Sprints 11-14: multi-provider models, settings, session QoL, alerts, polish

2026-03-31 07:02:47 +00:00

style.css

Hermes Web UI — Sprints 11-14: multi-provider models, settings, session QoL, alerts, polish

2026-03-31 07:02:47 +00:00

ui.js

fix(frontend): use URL origin for fetch/EventSource to support reverse proxy auth

2026-03-31 15:00:38 +00:00

workspace.js

fix(frontend): use URL origin for fetch/EventSource to support reverse proxy auth

2026-03-31 15:00:38 +00:00