Bryan Helmkamp 328bddea33 fix(install): pass GitHub App manifest state as form field, not URL query ... GitHub's App Manifest endpoint rejects `redirect_url` values that carry a query string with "invalid redirect_uri", leaving the web wizard stuck: the 10-minute pending-setup guard then blocked every retry for ten minutes. Move the CSRF state out of `redirect_url` and into a hidden `state` form field on the auto-submit — GitHub preserves it on the callback, matching the CLI's working Manifest flow. Drop the retry conflict so a fresh POST to /install/github/app/manifest always replaces the pending entry and mints a new state token; stale callbacks are already rejected by the existing state-match check on the redirect handler. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>		2026-04-21 14:21:33 -04:00
..
client-sdks.mdx	Rename fabro-api-types to fabro-api with progenitor client generation	2026-04-03 11:17:27 -07:00
demo-mode.mdx	refactor(server): remove inbound TLS termination	2026-04-19 10:43:57 -04:00
fabro-api.yaml	fix(install): pass GitHub App manifest state as form field, not URL query	2026-04-21 14:21:33 -04:00
overview.mdx	refactor(server): remove inbound TLS termination	2026-04-19 10:43:57 -04:00