I'm getting a bunch of 403s to the /community/ endpoint when testing the tutorial app from another system (i.e. not localhost). Is this something expected? I've tried to do some debug output in my connect function, but I get absolutely no output, and it looks like the code does not even get to execute:
[] INFO com.biffweb.impl.middleware - 29ms 403 get /community/fd56bc3b-4524-44af-ab37-143a20935533/channel/85379e84-fe58-4db6-820d-a745d905e5b2/connect
[] INFO com.biffweb.impl.middleware - 3ms 403 get /community/fd56bc3b-4524-44af-ab37-143a20935533/channel/85379e84-fe58-4db6-820d-a745d905e5b2/connect
[] INFO com.biffweb.impl.middleware - 8ms 403 get /community/fd56bc3b-4524-44af-ab37-143a20935533/channel/85379e84-fe58-4db6-820d-a745d905e5b2/connect
I see a 403 response mentioned at https://biffweb.com/docs/api/middleware/, but I'm not sure if this is really the problem. The rest of the app (signup, join community) works fine with no CSRF issues
EDIT: nvm, it is wrap-anti-forgery-websockets indeed. It doesnt just return 403 on CSRF issues, but on (not= base-url (get headers "origin")) as well, and that's what's been giving me the 403s.