mirror of
https://github.com/AstrBotDevs/AstrBot
synced 2026-07-16 09:40:30 +08:00
SSE connections to /api/live-log are same-origin (VITE_API_BASE is empty in production, resolves to relative /api path). The Authorization header and withCredentials:true triggered CORS preflight (OPTIONS) requests, but the SSE route only handles GET, causing the preflight to fail.