refactor: Update CORS configuration for service endpoints

foxminchan · Aug 26, 2024 · 47f2558 · 47f2558
1 parent 0374e05
commit 47f2558
Show file tree

Hide file tree

Showing 2 changed files with 21 additions and 0 deletions.
diff --git a/src/BookWorm.Identity/Config.cs b/src/BookWorm.Identity/Config.cs
@@ -50,6 +50,7 @@ public static IEnumerable<Client> GetClients(ServiceOptions service)
                 AllowAccessTokensViaBrowser = true,
                 RedirectUris = { $"{service.Catalog}/swagger/oauth2-redirect.html" },
                 PostLogoutRedirectUris = { $"{service.Catalog}/swagger/" },
+                AllowedCorsOrigins = { service.Catalog },
                 AllowedScopes = { "catalog" }
             },
             new()
@@ -63,6 +64,7 @@ public static IEnumerable<Client> GetClients(ServiceOptions service)
                 AllowAccessTokensViaBrowser = true,
                 RedirectUris = { $"{service.Ordering}/swagger/oauth2-redirect.html" },
                 PostLogoutRedirectUris = { $"{service.Ordering}/swagger/" },
+                AllowedCorsOrigins = { service.Ordering },
                 AllowedScopes = { "ordering" }
             },
             new()
@@ -76,6 +78,7 @@ public static IEnumerable<Client> GetClients(ServiceOptions service)
                 AllowAccessTokensViaBrowser = true,
                 RedirectUris = { $"{service.Basket}/swagger/oauth2-redirect.html" },
                 PostLogoutRedirectUris = { $"{service.Basket}/swagger/" },
+                AllowedCorsOrigins = { service.Basket },
                 AllowedScopes = { "basket" }
             },
             new()
@@ -89,6 +92,7 @@ public static IEnumerable<Client> GetClients(ServiceOptions service)
                 AllowAccessTokensViaBrowser = true,
                 RedirectUris = { $"{service.Rating}/swagger/oauth2-redirect.html" },
                 PostLogoutRedirectUris = { $"{service.Rating}/swagger/" },
+                AllowedCorsOrigins = { service.Rating },
                 AllowedScopes = { "rating" }
             },
             new()

diff --git a/src/BookWorm.ServiceDefaults/Extensions.cs b/src/BookWorm.ServiceDefaults/Extensions.cs
@@ -22,6 +22,8 @@ public static IHostApplicationBuilder AddServiceDefaults(this IHostApplicationBu
     {
         AppContext.SetSwitch("Microsoft.SemanticKernel.Experimental.GenAI.EnableOTelDiagnosticsSensitive", true);
 
+        builder.ConfigureCors();
+
         builder.ConfigureOpenTelemetry();
 
         builder.AddDefaultHealthChecks();
@@ -39,6 +41,19 @@ public static IHostApplicationBuilder AddServiceDefaults(this IHostApplicationBu
         return builder;
     }
 
+    public static IHostApplicationBuilder ConfigureCors(this IHostApplicationBuilder builder)
+    {
+        builder.Services.AddCors(options =>
+        {
+            options.AddPolicy("AllowAll", policyBuilder => policyBuilder
+                .AllowAnyOrigin()
+                .AllowAnyMethod()
+                .AllowAnyHeader());
+        });
+
+        return builder;
+    }
+
     public static IHostApplicationBuilder ConfigureOpenTelemetry(this IHostApplicationBuilder builder)
     {
         builder.Services.AddHttpContextAccessor();
@@ -110,6 +125,8 @@ public static WebApplication MapDefaultEndpoints(this WebApplication app)
             return app;
         }
 
+        app.UseCors("AllowAll");
+
         var healthChecks = app.MapGroup("");
 
         healthChecks