mirror of
https://github.com/HeyPuter/puter.git
synced 2026-11-14 09:50:49 +00:00
Safari keys a framed origin's local storage by the top-level origin, so the app browser embedded on a sibling subdomain finds no auth_token_v2 and shows "Apps are unavailable". The session cookie is still sent there, so the embed now falls back to /get-gui-token and keeps the token in memory.