From 196bdc0ab7b64503718945cf229530bb0773b289 Mon Sep 17 00:00:00 2001
From: Slava <m0sth8@gmail.com>
Date: Wed, 27 May 2026 20:11:32 -0700
Subject: [PATCH] Send credentials when fetching the web app manifest

Add crossOrigin="use-credentials" so the browser includes cookies
when fetching /site.webmanifest. Without it the manifest request is
sent unauthenticated and gets redirected to the login page by
cookie-based auth proxies (ALB OIDC, OAuth2 Proxy, Cloudflare
Access), which the browser then blocks against the app's own CSP.
---
 src/app/layout.tsx | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/app/layout.tsx b/src/app/layout.tsx
index 0cd4363b5..624ed55bb 100644
--- a/src/app/layout.tsx
+++ b/src/app/layout.tsx
@@ -29,7 +29,7 @@ export default function ({ children }) {
         <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png" />
         <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png" />
         <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png" />
-        <link rel="manifest" href="/site.webmanifest" />
+        <link rel="manifest" href="/site.webmanifest" crossOrigin="use-credentials" />
         <link rel="mask-icon" href="/safari-pinned-tab.svg" color="#5bbad5" />
         <meta name="msapplication-TileColor" content="#da532c" />
         <meta name="theme-color" content="#fafafa" media="(prefers-color-scheme: light)" />