Skip to content

Conversation

@bob10042
Copy link

Summary

Adds the \Cross-Origin-Opener-Policy: same-origin-allow-popups\ header to the webpack dev server configuration to fix Google OneTap Sign-In popup being blocked.

Changes

  • Added \devServer.headers\ configuration to \webpack.dev.js\
  • Sets COOP header as suggested by maintainer in issue comments

Testing

  • Start dev server with
    pm run dev\
  • Navigate to radar with a private Google Sheet URL
  • Google OneTap popup should now appear without being blocked

Fixes #346

Adds 'same-origin-allow-popups' COOP header to webpack dev server config
to fix Google OneTap Sign-In popup being blocked.

Fixes thoughtworks#346
Copilot AI review requested due to automatic review settings January 30, 2026 14:45
@bob10042 bob10042 requested a review from a team as a code owner January 30, 2026 14:45
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds a development-only Cross-Origin-Opener-Policy: same-origin-allow-popups header to the webpack dev server to prevent Google OneTap Sign-In popups from being blocked (Fixes #346).

Changes:

  • Configure devServer.headers in webpack.dev.js to send the COOP header during local development.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Cross-Origin-Opener-Policy policy would block the window.opener call.

1 participant