[Bug] B5: LND 'connect your wallet' details/QR broken fleet-wide (CORS) #12

Closed
opened 2026-06-15 15:18:53 +00:00 by lfg2025 · 2 comments
Owner

Two root causes: (a) /lnd-connect-info returns DUPLICATE Access-Control-Allow-Origin on nodes whose nginx adds its own add_header on top of the backend's; (b) /proxy/lnd/v1/* 401 carried no CORS header. FIX IN PROGRESS (.97): bootstrap.rs strips redundant nginx add_header; handler/mod.rs unauthorized_cors() adds CORS to the 401. Verified fix (b) on .116 (harness 4/4). TOP PRIORITY.

Tracked in repo: tests/production-quality/TRACKER.md

Two root causes: (a) /lnd-connect-info returns DUPLICATE Access-Control-Allow-Origin on nodes whose nginx adds its own add_header on top of the backend's; (b) /proxy/lnd/v1/* 401 carried no CORS header. FIX IN PROGRESS (.97): bootstrap.rs strips redundant nginx add_header; handler/mod.rs unauthorized_cors() adds CORS to the 401. Verified fix (b) on .116 (harness 4/4). TOP PRIORITY. Tracked in repo: tests/production-quality/TRACKER.md
Author
Owner

FIXED for v1.7.97-alpha (1db720af): strip duplicate nginx ACAO + CORS on /proxy/lnd 401. Verified harness 4/4 on .116/.198/.103. (tracker: tests/production-quality/TRACKER.md on vps2 main)

FIXED for v1.7.97-alpha (1db720af): strip duplicate nginx ACAO + CORS on /proxy/lnd 401. Verified harness 4/4 on .116/.198/.103. (tracker: tests/production-quality/TRACKER.md on vps2 main)
Author
Owner

Fixed: LND CORS (backend owns CORS + 401 carries ACAO). Deployed.

Fixed: LND CORS (backend owns CORS + 401 carries ACAO). Deployed.
Sign in to join this conversation.
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: lfg2025/archy#12
No description provided.