From 35075d52dbe7e917d018f7621e646f13bb973969 Mon Sep 17 00:00:00 2001
From: Miguel Palhas <mpalhas@gmail.com>
Date: Tue, 3 Feb 2026 15:34:04 +0000
Subject: [PATCH 1/4] attempt to fix cors issues on UI

---
 server/lib/ethui_web/endpoint.ex | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/server/lib/ethui_web/endpoint.ex b/server/lib/ethui_web/endpoint.ex
index 3005147..6e9f617 100644
--- a/server/lib/ethui_web/endpoint.ex
+++ b/server/lib/ethui_web/endpoint.ex
@@ -37,7 +37,11 @@ defmodule EthuiWeb.Endpoint do
   plug EthuiWeb.Plugs.LogMetadata
   plug Plug.Telemetry, event_prefix: [:phoenix, :endpoint]
 
-  plug CORSPlug, origin: ["*"]
+  plug CORSPlug,
+    origin: ["*"],
+    credentials: true,
+    max_age: 86400,
+    headers: ["Authorization", "Content-Type", "Accept", "Origin", "User-Agent", "DNT", "Cache-Control", "X-Mx-ReqToken", "Keep-Alive", "X-Requested-With", "If-Modified-Since", "X-CSRF-Token"]
 
   plug EthuiWeb.Router
 

From d49468f3837773a2c4f4b731a1ea7baff5681755 Mon Sep 17 00:00:00 2001
From: Miguel Palhas <mpalhas@gmail.com>
Date: Tue, 3 Feb 2026 15:55:45 +0000
Subject: [PATCH 2/4] wip

---
 server/lib/ethui_web/endpoint.ex | 17 +++++++++++++++--
 1 file changed, 15 insertions(+), 2 deletions(-)

diff --git a/server/lib/ethui_web/endpoint.ex b/server/lib/ethui_web/endpoint.ex
index 6e9f617..90e141f 100644
--- a/server/lib/ethui_web/endpoint.ex
+++ b/server/lib/ethui_web/endpoint.ex
@@ -38,10 +38,23 @@ defmodule EthuiWeb.Endpoint do
   plug Plug.Telemetry, event_prefix: [:phoenix, :endpoint]
 
   plug CORSPlug,
-    origin: ["*"],
+    origin: ["https://stacks.ethui.dev"],
     credentials: true,
     max_age: 86400,
-    headers: ["Authorization", "Content-Type", "Accept", "Origin", "User-Agent", "DNT", "Cache-Control", "X-Mx-ReqToken", "Keep-Alive", "X-Requested-With", "If-Modified-Since", "X-CSRF-Token"]
+    headers: [
+      "Authorization",
+      "Content-Type",
+      "Accept",
+      "Origin",
+      "User-Agent",
+      "DNT",
+      "Cache-Control",
+      "X-Mx-ReqToken",
+      "Keep-Alive",
+      "X-Requested-With",
+      "If-Modified-Since",
+      "X-CSRF-Token"
+    ]
 
   plug EthuiWeb.Router
 

From ff95d7709249c01fa91201ead216b9ed40144b8c Mon Sep 17 00:00:00 2001
From: Miguel Palhas <mpalhas@gmail.com>
Date: Tue, 3 Feb 2026 15:56:02 +0000
Subject: [PATCH 3/4] wip

---
 server/lib/ethui_web/endpoint.ex | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/server/lib/ethui_web/endpoint.ex b/server/lib/ethui_web/endpoint.ex
index 90e141f..b09be46 100644
--- a/server/lib/ethui_web/endpoint.ex
+++ b/server/lib/ethui_web/endpoint.ex
@@ -47,12 +47,9 @@ defmodule EthuiWeb.Endpoint do
       "Accept",
       "Origin",
       "User-Agent",
-      "DNT",
       "Cache-Control",
-      "X-Mx-ReqToken",
       "Keep-Alive",
       "X-Requested-With",
-      "If-Modified-Since",
       "X-CSRF-Token"
     ]
 

From 1baa9e605275af5aa713fe3644870a815ca7cfc3 Mon Sep 17 00:00:00 2001
From: Miguel Palhas <mpalhas@gmail.com>
Date: Wed, 4 Feb 2026 11:47:37 +0000
Subject: [PATCH 4/4] wip

---
 server/lib/ethui_web/endpoint.ex | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server/lib/ethui_web/endpoint.ex b/server/lib/ethui_web/endpoint.ex
index b09be46..65fee0e 100644
--- a/server/lib/ethui_web/endpoint.ex
+++ b/server/lib/ethui_web/endpoint.ex
@@ -40,7 +40,7 @@ defmodule EthuiWeb.Endpoint do
   plug CORSPlug,
     origin: ["https://stacks.ethui.dev"],
     credentials: true,
-    max_age: 86400,
+    max_age: 86_400,
     headers: [
       "Authorization",
       "Content-Type",