The web app calls the spindle's service-auth'd xrpc directly to manage repo secrets; add a wildcard CORS middleware (auth is bearer-token, not cookie-based, so * is safe), mirroring the appview.
Signed-off-by: Anirudh Oppiliappan anirudh@tangled.org
The web app calls the spindle's service-auth'd xrpc directly to manage repo secrets; add a wildcard CORS middleware (auth is bearer-token, not cookie-based, so * is safe), mirroring the appview.
Signed-off-by: Anirudh Oppiliappan anirudh@tangled.org