Signed requests are made server-side by this Cloudflare Worker — no CORS, no secrets in the browser.
Request
Diagnose fires one request per signature scheme (up to 14) and stops at the first 2xx. If none succeed, the problem is the credentials, uid registration, or IP allow-listing on BGW's side — not the signature.