Also attempt CORS fixes here.
This commit is contained in:
parent
add738b492
commit
aed29e2007
1 changed files with 6 additions and 3 deletions
|
@ -11,11 +11,13 @@ class V1Routes implements RouteHandler {
|
|||
|
||||
public function registerRoutes(Router $router): void {
|
||||
$router->use('/', function(HttpResponseBuilder $response, HttpRequest $request) {
|
||||
$response->setHeader('Access-Control-Allow-Origin', '*');
|
||||
$response->setHeader('Access-Control-Allow-Headers', 'Authorization');
|
||||
|
||||
if($request->hasHeader('Origin')) {
|
||||
$host = parse_url($request->getHeaderLine('Origin'), PHP_URL_HOST);
|
||||
$origin = $request->getHeaderLine('Origin');
|
||||
$response->setHeader('Access-Control-Allow-Origin', $origin);
|
||||
$response->setHeader('Vary', 'Origin');
|
||||
$host = parse_url($origin, PHP_URL_HOST);
|
||||
if(is_string($host)) {
|
||||
$host = '.' . $host;
|
||||
$allowCookieOrigins = $this->ctx->allowCookieOrigins;
|
||||
|
@ -25,7 +27,8 @@ class V1Routes implements RouteHandler {
|
|||
break;
|
||||
}
|
||||
}
|
||||
}
|
||||
} else
|
||||
$response->setHeader('Access-Control-Allow-Origin', '*');
|
||||
});
|
||||
|
||||
$router->use('/', $this->ctx->authz->bearerTokenAuthMiddleware(...));
|
||||
|
|
Loading…
Add table
Reference in a new issue