Freegle / Iznik / 9293 / 9293

70%

master: 70%

push

circleci

fix(modtools): proxy /discourse_sso through modtools.org for SSO cookie compatibility

Discourse SSO redirects to api.ilovefreegle.org/discourse_sso, but the
Iznik-Discourse-SSO cookie is set on modtools.org. Browsers won't send a
modtools.org cookie to api.ilovefreegle.org (different root domains), causing
an infinite redirect loop.

By proxying /discourse_sso through modtools.org via Netlify, the browser sends
the cookie with the request, and Netlify forwards it to the Go API.

After deploying, update Discourse's SSO URL to https://modtools.org/discourse_sso.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

4571 of 10213 branches covered (44.76%)

Branch coverage included in aggregate %.

2049 of 4227 relevant lines covered (48.47%)

42.04 hits per line