CORS error on manifest.json behind oauth2-proxy

[diyfr]

When I use AKHQ behind oauth2-proxy which handles authentication, it sets a cookie.
With this cookie, requests are forwarded to the AKHQ server.
Everything works fine, except for the manifest.json, where the browser doesn't send the cookie and you end up with an error (CORS).

The solution is to add the crossorigin="use-credentials" attribute to the tag:

<link rel="manifest" href="/manifest.json" crossorigin="use-credentials">

Documentation :
crossorigin
link attributes

[tchiotludo]

Good catch, PR are welcome 🙏