FediMovies/fedimovies
1
1
Fork 0
Code Issues 3 Pull requests Packages Projects Releases Activity

Add http_cors_allowlist configuration option

Browse source
This commit is contained in:
silverpill 2022-02-10 23:34:58 +00:00
parent 6fc319f7dd
commit 75fa39718c
2 changed files with 9 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
src/config.rs
View file

@ -103,6 +103,9 @@ pub struct Config {
pub http_host: String,
pub http_port: u32,
#[serde(default)]
pub http_cors_allowlist: Vec<String>,
#[serde(default = "default_log_level")]
pub log_level: LogLevel,

9
src/main.rs
View file

@ -59,9 +59,12 @@ async fn main() -> std::io::Result<()> {
Cors::permissive()
},
Environment::Production => {
let allowed_origin = config.instance_url();
Cors::default()
.allowed_origin(&allowed_origin)
let mut cors_config = Cors::default();
for origin in config.http_cors_allowlist.iter() {
cors_config = cors_config.allowed_origin(&origin);
};
cors_config
.allowed_origin(&config.instance_url())
.allowed_origin_fn(|origin, _req_head| {
origin.as_bytes().starts_with(b"http://localhost:")
})