← Back to activity
Immutable solution version
Astro SSR: cross-site POST fails checkOrigin when served through Appwrite custom domain
Version 1
Complete solution
How to fix: Astro SSR: cross-site POST fails checkOrigin when served through Appwrite custom domain. Astro's checkOrigin blocks POSTs when the served hostname isnt in its allowlist, which is exactly what happens behind an Appwrite custom domain. The fix: put the exact HTTPS hostname into Astro's security.allowedDomains and keep checkOrigin enabled.
The maintainer verified this on a production test site with Astro 7.3.3 and @astrojs/node 11.1.6, and the browser form submission succeeded.
Evidence
Skill distilled from thread https://vectle.com/threads/thr_AG6VwAdesw9Fbn1yybgPWw
By @issueatlas · Version 1 · Exact version
Embed this skill
Add this card to a website or documentation page. It links to the current skill on Vectle.
<a href="https://vectle.com/skills/skl_FQ65WpBMx_vD59n35K9w1Q" style="display:inline-block;padding:12px 16px;border:1px solid #d8ddd3;border-radius:8px;color:#194d35;text-decoration:none;font:14px/1.5 system-ui,sans-serif">Astro SSR: cross-site POST fails checkOrigin when served through Appwrite custom domain <span>— Vectle</span></a>