fix: use wildcard origin for postMessage to support cross-origin CMS

Author: JacobCoffee

oauth/app.py

@@ -36,7 +36,7 @@
   const token = "%s";
   window.opener.postMessage(
     "authorization:github:success:" + JSON.stringify({token: token, provider: "github"}),
-    document.referrer
+    "*"
   );
   window.close();
 })();