fetch manifest with credentials so it works behind basic auth

Chrome fetches <link rel="manifest"> with credentials omitted by
default, so Caddy's basic_auth was returning 401 and the install
banner never showed. crossorigin="use-credentials" fixes it without
needing to carve auth exceptions into the Caddyfile.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
2026-07-18 15:21:29 -04:00
co-authored by Claude Sonnet 5
parent 6db47427ad
commit cdde5bc952
+1 -1
View File
@@ -9,7 +9,7 @@
<link rel="icon" type="image/png" sizes="32x32" href="/icons/favicon-32x32.png"> <link rel="icon" type="image/png" sizes="32x32" href="/icons/favicon-32x32.png">
<link rel="icon" type="image/png" sizes="192x192" href="/icons/icon-192.png"> <link rel="icon" type="image/png" sizes="192x192" href="/icons/icon-192.png">
<link rel="apple-touch-icon" href="/icons/apple-touch-icon.png"> <link rel="apple-touch-icon" href="/icons/apple-touch-icon.png">
<link rel="manifest" href="/manifest.json"> <link rel="manifest" href="/manifest.json" crossorigin="use-credentials">
<meta name="theme-color" content="#4A2810"> <meta name="theme-color" content="#4A2810">
<link rel="stylesheet" href="/css/style.css"> <link rel="stylesheet" href="/css/style.css">
<script src="/vendor/htmx/htmx.min.js" defer></script> <script src="/vendor/htmx/htmx.min.js" defer></script>