From b772521053c2aa31ff455a466db4ba5c9e88ecc6 Mon Sep 17 00:00:00 2001
From: swapnamol-abraham <swapnamol.abraham@nhs.net>
Date: Wed, 26 Nov 2025 10:08:54 +0000
Subject: [PATCH] TD-6384: CORS Policy updated for Moodle

---
 Auth/LearningHub.Nhs.Auth/Program.cs | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/Auth/LearningHub.Nhs.Auth/Program.cs b/Auth/LearningHub.Nhs.Auth/Program.cs
index 04759f5..0b8aba5 100644
--- a/Auth/LearningHub.Nhs.Auth/Program.cs
+++ b/Auth/LearningHub.Nhs.Auth/Program.cs
@@ -24,6 +24,7 @@
 builder.Host.UseNLog();
 
 string corsOriginUrl = builder.Configuration.GetValue<string>("LearningHubAuthConfig:AuthClients:learninghubopenapi:BaseUrl");
+string corsMoodleUrl = builder.Configuration.GetValue<string>("MoodleAPIConfig:BaseUrl");
 
 builder.Services.AddCors(options =>
 {
@@ -34,6 +35,17 @@
         .AllowAnyHeader());
 });
 
+builder.Services.AddCors(options =>
+{
+    options.AddPolicy("MoodleCORS", builder =>
+    {
+        builder.WithOrigins(corsMoodleUrl)
+               .AllowAnyHeader()
+               .AllowAnyMethod()
+               .AllowCredentials();
+    });
+});
+
 builder.Services.ConfigureServices(builder.Configuration, builder.Environment);
 
 GlobalDiagnosticsContext.Set("connectionString", builder.Configuration.GetSection("ASPNETCORE_ConnectionStrings")["NLogDb"]);
@@ -72,6 +84,8 @@
 
 app.UseCors("CorsPolicy");
 
+app.UseCors("MoodleCORS");
+
 app.UseCookiePolicy();
 
 app.UseHttpsRedirection();