Commit 24ec38b
Stop forwarding IP headers to Convex ingest-chat endpoint
Forwarding cf-connecting-ip (and possibly x-forwarded-for) from the
browser request to Convex causes Cloudflare to return 403 when the
staging server sits behind Cloudflare (staging.mcpjam.com) — the
forwarded cf-connecting-ip mismatches the actual connecting IP
(Railway server), triggering Cloudflare's WAF. PR previews on
*.up.railway.app work because they don't go through Cloudflare, so
no cf-connecting-ip header exists to forward.
Keep forwarding user-agent and accept-language for device/language
enrichment. The removed IP headers were only used for chatbox visitor
hashing, which can rely on Cloudflare's own cf-connecting-ip on the
Convex side.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>1 parent 034a6e4 commit 24ec38b
1 file changed
Lines changed: 0 additions & 4 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
12 | 12 | | |
13 | 13 | | |
14 | 14 | | |
15 | | - | |
16 | | - | |
17 | | - | |
18 | | - | |
19 | 15 | | |
20 | 16 | | |
21 | 17 | | |
| |||
0 commit comments