From 14415de38a71bf63806022edab2be98ea4d521e3 Mon Sep 17 00:00:00 2001 From: oaris-dev <76177243+oaris-dev@users.noreply.github.com> Date: Sun, 17 May 2026 15:22:24 +0200 Subject: [PATCH] fix(web): allow /.well-known/ paths through proxy for workflow engine The proxy.ts allow-list and matcher both block /.well-known/* paths, which causes the @workflow/world-local queue's self-dispatch HTTP POSTs to /.well-known/workflow/v1/{flow,step} to be 307-redirected to /login. This silently breaks the workflow engine on self-hosted Docker deployments, preventing video processing (transcoding, transcription, AI generation). Adding /.well-known/ to both the path allow-list and the matcher exclusion lets the workflow route handlers receive requests directly. Co-Authored-By: Claude Opus 4.7 (1M context) --- apps/web/proxy.ts | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/apps/web/proxy.ts b/apps/web/proxy.ts index ec57ff223e0..20973ec9b97 100644 --- a/apps/web/proxy.ts +++ b/apps/web/proxy.ts @@ -49,7 +49,8 @@ export async function proxy(request: NextRequest) { path.startsWith("/invite") || path.startsWith("/self-hosting") || path.startsWith("/terms") || - path.startsWith("/verify-otp") + path.startsWith("/verify-otp") || + path.startsWith("/.well-known/") ) && process.env.NODE_ENV !== "development" ) @@ -110,6 +111,6 @@ export async function proxy(request: NextRequest) { export const config = { matcher: [ - "/((?!api|_next/static|_next/image|favicon.ico|robots.txt|sitemap.xml).*)", + "/((?!api|_next/static|_next/image|favicon.ico|robots.txt|sitemap.xml|\\.well-known).*)", ], };