cors tweaks

retailcoder · retailcoder · commit a2deed7f29c7 · 2025-04-18T12:40:57.000-04:00
diff --git a/rubberduckvba.Server/Api/Admin/AdminController.cs b/rubberduckvba.Server/Api/Admin/AdminController.cs
@@ -46,6 +46,7 @@ public IActionResult ClearCache()
     }
 
 #if DEBUG
+    [EnableCors("CorsPolicy")]
     [HttpGet("admin/config/current")]
     public IActionResult Config()
     {
diff --git a/rubberduckvba.Server/Api/Auth/AuthController.cs b/rubberduckvba.Server/Api/Auth/AuthController.cs
@@ -37,6 +37,7 @@ public AuthController(IOptions<GitHubSettings> configuration, IOptions<ApiSettin
     }
 
     [HttpGet("auth")]
+    [EnableCors("CorsPolicy")]
     [AllowAnonymous]
     public IActionResult Index()
     {
diff --git a/rubberduckvba.Server/Program.cs b/rubberduckvba.Server/Program.cs
@@ -51,7 +51,6 @@ public static void Main(string[] args)
             {
                 policy
                     .SetIsOriginAllowed(origin => true)
-                    .AllowAnyOrigin()
                     .AllowAnyHeader()
                     .WithMethods("OPTIONS", "GET", "POST")
                     .AllowCredentials()

Original file line number	Diff line number	Diff line change
`@@ -46,6 +46,7 @@ public IActionResult ClearCache()`
`46`	`46`	`}`
`47`	`47`
`48`	`48`	`#if DEBUG`
	`49`	`+ [EnableCors("CorsPolicy")]`
`49`	`50`	`[HttpGet("admin/config/current")]`
`50`	`51`	`public IActionResult Config()`
`51`	`52`	`{`
Original file line number	Diff line number	Diff line change
`@@ -37,6 +37,7 @@ public AuthController(IOptions<GitHubSettings> configuration, IOptions<ApiSettin`
`37`	`37`	`}`
`38`	`38`
`39`	`39`	`[HttpGet("auth")]`
	`40`	`+ [EnableCors("CorsPolicy")]`
`40`	`41`	`[AllowAnonymous]`
`41`	`42`	`public IActionResult Index()`
`42`	`43`	`{`
Original file line number	Diff line number	Diff line change
`@@ -51,7 +51,6 @@ public static void Main(string[] args)`
`51`	`51`	`{`
`52`	`52`	`policy`
`53`	`53`	`.SetIsOriginAllowed(origin => true)`
`54`		`- .AllowAnyOrigin()`
`55`	`54`	`.AllowAnyHeader()`
`56`	`55`	`.WithMethods("OPTIONS", "GET", "POST")`
`57`	`56`	`.AllowCredentials()`