The deployed PHP reverse proxy at api.caterium.ru only forwarded/allowed
a fixed set of CORS request headers, missing x-supabase-api-version which
supabase-js v2.112.4's auth client sends on every request. That made the
browser reject the preflight and fail the actual login call client-side
with a generic "Failed to fetch" (not a server error, so it never showed
up in server logs) - every login was broken since the proxy went live.
Fixed on the live server and committed the previously SCP-only script
here so future edits go through git instead of being SSH-only.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
