Freegle / Iznik / 9293

70%

push

circleci

fix(modtools): proxy /discourse_sso through modtools.org for SSO cookie compatibility

Discourse SSO redirects to api.ilovefreegle.org/discourse_sso, but the
Iznik-Discourse-SSO cookie is set on modtools.org. Browsers won't send a
modtools.org cookie to api.ilovefreegle.org (different root domains), causing
an infinite redirect loop.

By proxying /discourse_sso through modtools.org via Netlify, the browser sends
the cookie with the request, and Netlify forwards it to the Go API.

After deploying, update Discourse's SSO URL to https://modtools.org/discourse_sso.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

13645 of 20621 branches covered (66.17%)

Branch coverage included in aggregate %.

98403 of 134261 relevant lines covered (73.29%)

22.37 hits per line