Merge pull request #699 from 0xPolygonID/fix/cors

fix: add CORS settings with AllowCredentials
0xPolygonID · Jul 29, 2024 · 781f9dc · 781f9dc
2 parents 011d006 + b5f2a98
commit 781f9dc
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/cmd/platform/main.go b/cmd/platform/main.go
@@ -189,11 +189,19 @@ func main() {
 	serverHealth.Run(ctx, health.DefaultPingPeriod)
 
 	mux := chi.NewRouter()
+
+	corsMiddleware := cors.New(cors.Options{
+		AllowedOrigins:   []string{"localhost", "127.0.0.1", "*"},
+		AllowedMethods:   []string{"GET", "POST", "PUT", "DELETE", "OPTIONS"},
+		AllowedHeaders:   []string{"Accept", "Authorization", "Content-Type"},
+		AllowCredentials: true,
+	})
+
 	mux.Use(
 		chiMiddleware.RequestID,
 		log.ChiMiddleware(ctx),
 		chiMiddleware.Recoverer,
-		cors.Handler(cors.Options{AllowedOrigins: []string{"*"}}),
+		corsMiddleware.Handler,
 		chiMiddleware.NoCache,
 	)
 	api.HandlerWithOptions(