Merge pull request #644 from mnfst/claude/fix-auth-origin-error-ADLwQ

Fix INVALID_ORIGIN error by auto-adding BETTER_AUTH_URL to trusted origins

Author: brunobuddy

.changeset/fix-auth-origin-error.md

@@ -0,0 +1,5 @@
+---
+"manifest": patch
+---
+
+Fix INVALID_ORIGIN error by automatically adding BETTER_AUTH_URL to trusted origins

packages/manifest/backend/src/auth/auth.ts

@@ -9,6 +9,12 @@ import Database from 'better-sqlite3';
 function getTrustedOrigins(): string[] {
   const origins: string[] = [];
 
+  // Add BETTER_AUTH_URL to trusted origins (the app's own URL should always be trusted)
+  if (process.env.BETTER_AUTH_URL) {
+    // Remove trailing slash if present for consistency
+    origins.push(process.env.BETTER_AUTH_URL.replace(/\/$/, ''));
+  }
+
   // Add origins from ALLOWED_ORIGINS env var
   if (process.env.ALLOWED_ORIGINS) {
     origins.push(...process.env.ALLOWED_ORIGINS.split(',').map((o) => o.trim()));