From 5c75d716a82646c4b6defc19de60f8cf12109a4e Mon Sep 17 00:00:00 2001
From: neodk2004 <barac.daniel@gmail.com>
Date: Mon, 10 Aug 2026 08:02:11 +0200
Subject: [PATCH] fix(security): allow wss:// to Clerk in CSP connect-src

Clerk's client SDK opens a WebSocket to the frontend API for session
sync; the CSP only allowed https:// to that origin, silently breaking
login (blank page, "Connection closed" exception) once enforced.
---
 next.config.ts | 1 +
 1 file changed, 1 insertion(+)

diff --git a/next.config.ts b/next.config.ts
index d7d902b..5679506 100644
--- a/next.config.ts
+++ b/next.config.ts
@@ -26,6 +26,7 @@ function buildCsp(): string {
     "connect-src": [
       "'self'",
       "https://clerk.pawfeed.org",
+      "wss://clerk.pawfeed.org",
       "https://accounts.pawfeed.org",
       supabase,
       "https://stream.mux.com",