biff 2024-06-15

I'm getting a bunch of 403s to the /community//channel//connect endpoint when testing the tutorial app from another system (i.e. not localhost). Is this something expected? I've tried to do some debug output in my connect function, but I get absolutely no output, and it looks like the code does not even get to execute:

[] INFO com.biffweb.impl.middleware -  29ms 403 get  /community/fd56bc3b-4524-44af-ab37-143a20935533/channel/85379e84-fe58-4db6-820d-a745d905e5b2/connect
[] INFO com.biffweb.impl.middleware -   3ms 403 get  /community/fd56bc3b-4524-44af-ab37-143a20935533/channel/85379e84-fe58-4db6-820d-a745d905e5b2/connect
[] INFO com.biffweb.impl.middleware -   8ms 403 get  /community/fd56bc3b-4524-44af-ab37-143a20935533/channel/85379e84-fe58-4db6-820d-a745d905e5b2/connect
I see a 403 response mentioned at https://biffweb.com/docs/api/middleware/, but I'm not sure if this is really the problem. The rest of the app (signup, join community) works fine with no CSRF issues EDIT: nvm, it is wrap-anti-forgery-websockets indeed. It doesnt just return 403 on CSRF issues, but on (not= base-url (get headers "origin")) as well, and that's what's been giving me the 403s.

👍 1