Also attempt CORS fixes here.

This commit is contained in:
flash 2025-01-14 04:10:46 +00:00
parent add738b492
commit aed29e2007

View file

@ -11,11 +11,13 @@ class V1Routes implements RouteHandler {
public function registerRoutes(Router $router): void { public function registerRoutes(Router $router): void {
$router->use('/', function(HttpResponseBuilder $response, HttpRequest $request) { $router->use('/', function(HttpResponseBuilder $response, HttpRequest $request) {
$response->setHeader('Access-Control-Allow-Origin', '*');
$response->setHeader('Access-Control-Allow-Headers', 'Authorization'); $response->setHeader('Access-Control-Allow-Headers', 'Authorization');
if($request->hasHeader('Origin')) { if($request->hasHeader('Origin')) {
$host = parse_url($request->getHeaderLine('Origin'), PHP_URL_HOST); $origin = $request->getHeaderLine('Origin');
$response->setHeader('Access-Control-Allow-Origin', $origin);
$response->setHeader('Vary', 'Origin');
$host = parse_url($origin, PHP_URL_HOST);
if(is_string($host)) { if(is_string($host)) {
$host = '.' . $host; $host = '.' . $host;
$allowCookieOrigins = $this->ctx->allowCookieOrigins; $allowCookieOrigins = $this->ctx->allowCookieOrigins;
@ -25,7 +27,8 @@ class V1Routes implements RouteHandler {
break; break;
} }
} }
} } else
$response->setHeader('Access-Control-Allow-Origin', '*');
}); });
$router->use('/', $this->ctx->authz->bearerTokenAuthMiddleware(...)); $router->use('/', $this->ctx->authz->bearerTokenAuthMiddleware(...));