Skip to content

fix(server): allow authenticated CORS preflight - #38026

Merged
thdxr merged 1 commit into
v2from
server-cors
Jul 21, 2026
Merged

fix(server): allow authenticated CORS preflight#38026
thdxr merged 1 commit into
v2from
server-cors

Conversation

@Brendonovich

@BrendonovichBrendonovich commented Jul 21, 2026

Copy link
Copy Markdown
Member

Summary

  • apply the shared CORS policy before server authentication
  • allow browser preflight requests to reach password-protected servers
  • cover preflight and authenticated health response headers

Testing

  • bun test test/process.test.ts in packages/server
  • bun typecheck in packages/server
  • full pre-push workspace typecheck (32 tasks)

@thdxr
thdxr merged commit 09a38f1 into v2Jul 21, 2026
8 of 10 checks passed
@thdxr
thdxr deleted the server-cors branch July 21, 2026 03:41
github-actionsBot pushed a commit to ReStranger/opencode that referenced this pull request Jul 21, 2026
nix-auto-updates[bot]
Merge remote-tracking branch 'upstream/v2' into nix-auto-updates
1b5cc18
* upstream/v2:
test(app): stabilize offset observer test (anomalyco#38044)
feat(codemode): support bounded async iteration (anomalyco#38040)
fix(core): normalize CRLF patch lines (anomalyco#38038)
fix(core): accept padded patch markers (anomalyco#38036)
fix(core): compose successive patch updates (anomalyco#38034)
feat(codemode): support labeled control flow (anomalyco#38035)
fix(core): improve patch errors (anomalyco#38016)
fix(server): allow authenticated CORS preflight (anomalyco#38026)
github-actionsBot pushed a commit to ReStranger/opencode that referenced this pull request Jul 21, 2026
nix-auto-updates[bot]
Merge remote-tracking branch 'upstream/v2' into nix-auto-updates
8f5e872
* upstream/v2: (23 commits)
refactor(codemode): simplify model-facing wording (anomalyco#38042)
fix(core): enforce patch EOF anchors (anomalyco#38039)
fix(tui): prevent autocomplete search flicker (anomalyco#38128)
refactor(core): break plugin host cycle (anomalyco#38120)
refactor: extract shared util package (anomalyco#37828)
fix: preserve runtime option defaults (anomalyco#38118)
refactor(tui): simplify mini footer status line (anomalyco#38112)
mini: settle on wait and durable pending (anomalyco#37984)
test(app): stabilize offset observer test (anomalyco#38044)
feat(codemode): support bounded async iteration (anomalyco#38040)
fix(core): normalize CRLF patch lines (anomalyco#38038)
fix(core): accept padded patch markers (anomalyco#38036)
fix(core): compose successive patch updates (anomalyco#38034)
feat(codemode): support labeled control flow (anomalyco#38035)
fix(core): improve patch errors (anomalyco#38016)
fix(server): allow authenticated CORS preflight (anomalyco#38026)
feat(codemode): support JSON callbacks (anomalyco#38006)
fix: remove legacy sdk from ci builds
removed packages/opencode
fix(server): preserve v1 auth compatibility
...
github-actionsBot pushed a commit to ReStranger/opencode that referenced this pull request Jul 21, 2026
nix-auto-updates[bot]
Merge remote-tracking branch 'upstream/v2' into nix-auto-updates
83bc45a
* upstream/v2: (24 commits)
feat(cli): port ACP to V2 (anomalyco#37907)
refactor(codemode): simplify model-facing wording (anomalyco#38042)
fix(core): enforce patch EOF anchors (anomalyco#38039)
fix(tui): prevent autocomplete search flicker (anomalyco#38128)
refactor(core): break plugin host cycle (anomalyco#38120)
refactor: extract shared util package (anomalyco#37828)
fix: preserve runtime option defaults (anomalyco#38118)
refactor(tui): simplify mini footer status line (anomalyco#38112)
mini: settle on wait and durable pending (anomalyco#37984)
test(app): stabilize offset observer test (anomalyco#38044)
feat(codemode): support bounded async iteration (anomalyco#38040)
fix(core): normalize CRLF patch lines (anomalyco#38038)
fix(core): accept padded patch markers (anomalyco#38036)
fix(core): compose successive patch updates (anomalyco#38034)
feat(codemode): support labeled control flow (anomalyco#38035)
fix(core): improve patch errors (anomalyco#38016)
fix(server): allow authenticated CORS preflight (anomalyco#38026)
feat(codemode): support JSON callbacks (anomalyco#38006)
fix: remove legacy sdk from ci builds
removed packages/opencode
...
github-actionsBot pushed a commit to ReStranger/opencode that referenced this pull request Jul 21, 2026
nix-auto-updates[bot]
Merge remote-tracking branch 'upstream/v2' into nix-auto-updates
29d4626
* upstream/v2: (24 commits)
feat(cli): port ACP to V2 (anomalyco#37907)
refactor(codemode): simplify model-facing wording (anomalyco#38042)
fix(core): enforce patch EOF anchors (anomalyco#38039)
fix(tui): prevent autocomplete search flicker (anomalyco#38128)
refactor(core): break plugin host cycle (anomalyco#38120)
refactor: extract shared util package (anomalyco#37828)
fix: preserve runtime option defaults (anomalyco#38118)
refactor(tui): simplify mini footer status line (anomalyco#38112)
mini: settle on wait and durable pending (anomalyco#37984)
test(app): stabilize offset observer test (anomalyco#38044)
feat(codemode): support bounded async iteration (anomalyco#38040)
fix(core): normalize CRLF patch lines (anomalyco#38038)
fix(core): accept padded patch markers (anomalyco#38036)
fix(core): compose successive patch updates (anomalyco#38034)
feat(codemode): support labeled control flow (anomalyco#38035)
fix(core): improve patch errors (anomalyco#38016)
fix(server): allow authenticated CORS preflight (anomalyco#38026)
feat(codemode): support JSON callbacks (anomalyco#38006)
fix: remove legacy sdk from ci builds
removed packages/opencode
...
github-actionsBot pushed a commit to ReStranger/opencode that referenced this pull request Jul 21, 2026
nix-auto-updates[bot]
Merge remote-tracking branch 'upstream/v2' into nix-auto-updates
df1ce5a
* upstream/v2: (26 commits)
fix(core): refresh model catalog every five minutes (anomalyco#38142)
feat(util): configure package publishing (anomalyco#38129)
feat(cli): port ACP to V2 (anomalyco#37907)
refactor(codemode): simplify model-facing wording (anomalyco#38042)
fix(core): enforce patch EOF anchors (anomalyco#38039)
fix(tui): prevent autocomplete search flicker (anomalyco#38128)
refactor(core): break plugin host cycle (anomalyco#38120)
refactor: extract shared util package (anomalyco#37828)
fix: preserve runtime option defaults (anomalyco#38118)
refactor(tui): simplify mini footer status line (anomalyco#38112)
mini: settle on wait and durable pending (anomalyco#37984)
test(app): stabilize offset observer test (anomalyco#38044)
feat(codemode): support bounded async iteration (anomalyco#38040)
fix(core): normalize CRLF patch lines (anomalyco#38038)
fix(core): accept padded patch markers (anomalyco#38036)
fix(core): compose successive patch updates (anomalyco#38034)
feat(codemode): support labeled control flow (anomalyco#38035)
fix(core): improve patch errors (anomalyco#38016)
fix(server): allow authenticated CORS preflight (anomalyco#38026)
feat(codemode): support JSON callbacks (anomalyco#38006)
...
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@Brendonovich@thdxr