Browser Extension Setup

If you run Arivu on your own domain, the extension needs two updates:

• host permissions for your domain
• API URL pointing to your deployment

How Extension Auth Works

1. You log into Arivu in your browser
2. Extension content script calls /api/auth/extension-token
3. Backend returns short-lived tokens
4. Extension stores tokens in chrome.storage.session
5. Save action uses those tokens to call /api/bookmarks

1. Update Manifest Host Permissions

Edit extension/manifest.json in your cloned repo:

"host_permissions": [
  "https://your-domain.example/*",
  "http://localhost:8001/*"
],
"content_scripts": [
  {
    "matches": ["https://your-domain.example/*", "http://localhost/*"],
    "js": ["content.js"],
    "run_at": "document_idle"
  }
]

Reload extension after saving.

2. Install / Reload Extension

Chrome

1. Open chrome://extensions/
2. Enable Developer mode
3. Click Load unpacked
4. Select the extension/ directory in your cloned repo

If already installed, click Reload.

Firefox

1. Open about:debugging#/runtime/this-firefox
2. Click Load Temporary Add-on
3. Select extension/manifest.json from your cloned repo

3. Set Extension API URL

In extension popup:

1. Open popup
2. Click Settings
3. Set API URL to https://your-domain.example/api

This value is saved as apiUrl in chrome.storage.local.

4. Validate End-to-End

• Open your Arivu web app and sign in
• Open extension popup on any page
• Ensure URL and title are pre-filled
• Save bookmark and verify it appears in /dashboard

Common Issues

Popup asks to log in repeatedly

• You are not logged in on the same browser profile
• Content script domain does not match deployment host
• API URL points to wrong origin

Save fails with unauthorized

• Session token expired; open Arivu and refresh login
• Verify /api/auth/extension-token is reachable and proxied

Save fails on private/self-signed cert

• Browser may block mixed or untrusted requests
• Use trusted TLS certificate for production domains

Reference Files

• extension/manifest.json
• extension/content.js
• extension/popup.js
• extension/README.md