The token POST stays on tokenBaseURL. When that origin is not the browser-facing HTTPS origin, the request sets X-Forwarded-Proto and X-Forwarded-Host from that origin. Browser redirects are unchanged. Assistant: grok Assistant-Session: 01a0e29c-2e57-7342-a500-8f3b43b5fefd |
||
|---|---|---|
| .. | ||
| cmd | ||
| internal | ||
| tests | ||
| go.mod | ||
| go.sum | ||
| Makefile | ||