amy/donetick
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refactor: Update server configuration to allow specific CORS origins

Browse source
This commit is contained in:
Mo Tarbin 2024-06-30 22:58:33 -04:00
parent c13dd9addb
commit 49d877486c
3 changed files with 11 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

3
main.go
View file

@ -109,7 +109,8 @@ func newServer(lc fx.Lifecycle, cfg *config.Config, db *gorm.DB, notifier *notif
WriteTimeout: cfg.Server.WriteTimeout,
}
config := cors.DefaultConfig()
config.AllowAllOrigins = true
config.AllowAllOrigins = !cfg.IsDoneTickDotCom
config.AllowOrigins = cfg.Server.CorsAllowOrigins
config.AllowCredentials = true
config.AddAllowHeaders("Authorization", "secretkey")
r.Use(cors.New(config))