xiaoxia/xiaoxia-saas
1
0
Fork 0
Code Issues 11 Pull Requests 3 Actions Packages Projects Releases 7 Wiki Activity

fix: [HOTFIX] 确保生产CORS始终包含saas.xiaoxiajianji.com #93

Merged
xiaoxia merged 1 commits from fix/cors-production-domains into main 2026-06-28 21:56:51 +08:00
Conversation 0 Commits 1 Files Changed 1
+5 -4
xiaoxia commented 2026-06-28 21:56:36 +08:00
Owner
Copy Link
Copy Source

问题

v0.1.75的CORS修复只在CORS_ORIGINS为空时才添加默认域名，但生产环境通过CORS_ORIGINS_RAW环境变量设置了特定的域名列表，导致saas.xiaoxiajianji.com仍然不在CORS允许列表中。

修复

无论CORS_ORIGINS_RAW如何配置，在非DEBUG模式下都确保包含xiaoxiajianji.com和saas.xiaoxiajianji.com两个生产域名。

变更

  • apps/api/main.py: CORS配置逻辑改为"始终追加"而非"仅默认"

紧急合并到main以修复生产环境CORS问题。

## 问题 v0.1.75的CORS修复只在CORS_ORIGINS为空时才添加默认域名，但生产环境通过`CORS_ORIGINS_RAW`环境变量设置了特定的域名列表，导致`saas.xiaoxiajianji.com`仍然不在CORS允许列表中。 ## 修复 无论`CORS_ORIGINS_RAW`如何配置，在非DEBUG模式下都确保包含`xiaoxiajianji.com`和`saas.xiaoxiajianji.com`两个生产域名。 ## 变更 - `apps/api/main.py`: CORS配置逻辑改为"始终追加"而非"仅默认" 紧急合并到main以修复生产环境CORS问题。
xiaoxia added 1 commit 2026-06-28 21:56:36 +08:00
fix: 确保生产CORS始终包含saas.xiaoxiajianji.com
Tests / test (pull_request) Failing after 1m3s
Details
Tests / lint (pull_request) Failing after 1m2s
Details
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
Details
CI/CD Pipeline / Frontend Lint (pull_request) Has been cancelled
Details
7545a5ccdc 
之前的修复只在CORS_ORIGINS为空时才添加默认域名，
但生产环境通过环境变量设置了CORS_ORIGINS_RAW，
导致saas子域仍然不在允许列表中。

现在无论CORS_ORIGINS_RAW如何配置，都会确保包含
xiaoxiajianji.com和saas.xiaoxiajianji.com。
xiaoxia merged commit 60afbf450d into main 2026-06-28 21:56:51 +08:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
P0
阻塞性，必须立即处理
 P1
高优先级
 P2
中优先级
 P3
低优先级/后考虑
 architecture
架构设计
 backend
后端相关
 blocked
阻塞中
 bug
Bug修复
 ci-bug
CI本身的bug
 ci-optimization
CI优化类任务
 ci-pipeline
CI流水线/workflow相关
 cleanup
代码清理
 devops
运维/部署/CI
 documentation
文档相关
 feature
新功能
 frontend
前端相关
 question
需要讨论确认
 ready
PR CI通过，可合并
 refactor
代码重构
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
auto-approve-bot xiaoxia
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: xiaoxia/xiaoxia-saas#93
Delete Branch "fix/cors-production-domains"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?