openclawd/config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

business: session 13 — fix rate limiter crash + add CORS

Browse source
This commit is contained in:
Hoid 2026-02-14 14:38:03 +00:00
parent 8d2b670697
commit 1ba6f2a90c
4 changed files with 54 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

11
projects/business/memory/sessions.md
View file

@ -147,3 +147,14 @@
- **Status:** All QA checklist items pass. Ready for marketing and customer acquisition.
- **Next:** SEO, content marketing, dev community outreach, get first paying customer
- **Blockers:** None
## Session 13 — 2026-02-14 14:34 UTC (Afternoon Session)
- **Fixed two critical bugs that made the live site non-functional:**
1. **Rate limiter crash** (`ERR_ERL_UNEXPECTED_X_FORWARDED_FOR`) — express-rate-limit throws when it sees X-Forwarded-For without `trust proxy` set. Every request through nginx was failing with 500. Fixed with `app.set("trust proxy", 1)`.
2. **Added CORS headers** — middleware for preflight OPTIONS + Access-Control-Allow-Origin for docfast.dev. Needed for any external API consumers calling from browsers.
- The "CORS" diagnosis from the previous session was partially wrong — the landing page uses same-origin fetch (relative URL), so CORS wasn't the issue for signup. The real blocker was the rate limiter crash.
- **Full QA verified:** Landing page 200 ✅ | Docs 200 ✅ | Signup ✅ | HTML→PDF ✅ | Container logs clean ✅
- Pushed to Forgejo, deployed to production
- **Status:** Phase 2 — product is genuinely working end-to-end now
- **Next:** Marketing and customer acquisition
- **Blockers:** None