From 68915390f1a4889a018e9df6ead8cf5e17cfcf8c Mon Sep 17 00:00:00 2001 From: Robert Field Date: Fri, 30 Jan 2026 23:54:49 +0000 Subject: [PATCH] fix: Enable credentials on updateProjectData CORS Change cors() to cors({ origin: true, credentials: true }) on POST /api/v1/projects/:projectId to support requests with credentials. This reflects the requesting origin (instead of returning wildcard *) while still allowing any origin to access the endpoint. --- platform/wab/src/wab/server/AppServer.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/wab/src/wab/server/AppServer.ts b/platform/wab/src/wab/server/AppServer.ts index 740d91b6a..f15e0bed8 100644 --- a/platform/wab/src/wab/server/AppServer.ts +++ b/platform/wab/src/wab/server/AppServer.ts @@ -1607,7 +1607,7 @@ export function addMainAppServerRoutes( ); app.post( "/api/v1/projects/:projectId", - cors(), + cors({ origin: true, credentials: true }), safeCast(authRoutes.teamApiUserAuth), apiAuth, updateProjectData