f098c1264c
Some checks failed
CI / lint-test (push) Has been cancelled
CI / skinny-install (aco) (push) Has been cancelled
CI / skinny-install (api) (push) Has been cancelled
CI / skinny-install (bib) (push) Has been cancelled
CI / skinny-install (bls) (push) Has been cancelled
CI / skinny-install (bcda) (push) Has been cancelled
Deploy / build-scan-report (push) Has been cancelled
CI / skinny-install (ccw) (push) Has been cancelled
CI / skinny-install (cli) (push) Has been cancelled
CI / skinny-install (cms) (push) Has been cancelled
CI / skinny-install (conf) (push) Has been cancelled
CI / skinny-install (opps) (push) Has been cancelled
CI / skinny-install (perf) (push) Has been cancelled
CI / skinny-install (pfs) (push) Has been cancelled
CI / skinny-install (rex) (push) Has been cancelled
The inject-loch middleware was loading loch.css and fav32.png from //fhirworx.io (bare domain). On docs.fhirworx.io and other subdomains, this cross-origin fetch hit the dashboard's gitea-sso forwardAuth, causing a redirect loop through Gitea login that broke the page styling. Fix: point injected assets at //dashboard.fhirworx.io explicitly, and remove gitea-sso from the dashboard (public landing page, no secrets).