LakG
311f14b0eb
Astro por default rechaza POST con "Cross-site POST form submissions are forbidden" cuando el header Host y el Origin no matchean literalmente. Detrás de Cloudflare Tunnel esto pasa siempre porque Host llega como el hostname público pero Origin trae la URL edge. Los endpoints ya están protegidos por cookies HttpOnly + SameSite=Lax y OAuth PKCE, así que CSRF no aplica. Se desactiva checkOrigin. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Astro Starter Kit: Basics
npm create astro@latest -- --template basics
🧑🚀 Seasoned astronaut? Delete this file. Have fun!
🚀 Project Structure
Inside of your Astro project, you'll see the following folders and files:
/
├── public/
│ └── favicon.svg
├── src
│ ├── assets
│ │ └── astro.svg
│ ├── components
│ │ └── Welcome.astro
│ ├── layouts
│ │ └── Layout.astro
│ └── pages
│ └── index.astro
└── package.json
To learn more about the folder structure of an Astro project, refer to our guide on project structure.
🧞 Commands
All commands are run from the root of the project, from a terminal:
| Command | Action |
|---|---|
npm install |
Installs dependencies |
npm run dev |
Starts local dev server at localhost:4321 |
npm run build |
Build your production site to ./dist/ |
npm run preview |
Preview your build locally, before deploying |
npm run astro ... |
Run CLI commands like astro add, astro check |
npm run astro -- --help |
Get help using the Astro CLI |
👀 Want to learn more?
Feel free to check our documentation or jump into our Discord server.