Also attempt CORS fixes here.

This commit is contained in:
flash 2025-01-14 04:10:46 +00:00
parent add738b492
commit aed29e2007

View file

@ -11,11 +11,13 @@ class V1Routes implements RouteHandler {
public function registerRoutes(Router $router): void {
$router->use('/', function(HttpResponseBuilder $response, HttpRequest $request) {
$response->setHeader('Access-Control-Allow-Origin', '*');
$response->setHeader('Access-Control-Allow-Headers', 'Authorization');
if($request->hasHeader('Origin')) {
$host = parse_url($request->getHeaderLine('Origin'), PHP_URL_HOST);
$origin = $request->getHeaderLine('Origin');
$response->setHeader('Access-Control-Allow-Origin', $origin);
$response->setHeader('Vary', 'Origin');
$host = parse_url($origin, PHP_URL_HOST);
if(is_string($host)) {
$host = '.' . $host;
$allowCookieOrigins = $this->ctx->allowCookieOrigins;
@ -25,7 +27,8 @@ class V1Routes implements RouteHandler {
break;
}
}
}
} else
$response->setHeader('Access-Control-Allow-Origin', '*');
});
$router->use('/', $this->ctx->authz->bearerTokenAuthMiddleware(...));