From 58d92080d544e255ee3fd0c0e722a7c6f1c474a7 Mon Sep 17 00:00:00 2001 From: Rory& Date: Tue, 14 Oct 2025 09:07:55 +0200 Subject: Admin api changes --- extra/admin-api/Spacebar.AdminAPI/Program.cs | 27 ++++++++++++++++++--------- 1 file changed, 18 insertions(+), 9 deletions(-) (limited to 'extra/admin-api/Spacebar.AdminAPI/Program.cs') diff --git a/extra/admin-api/Spacebar.AdminAPI/Program.cs b/extra/admin-api/Spacebar.AdminAPI/Program.cs index f70aa575..93b28b15 100644 --- a/extra/admin-api/Spacebar.AdminAPI/Program.cs +++ b/extra/admin-api/Spacebar.AdminAPI/Program.cs @@ -45,20 +45,29 @@ builder.Services.AddRequestTimeouts(x => { } }; }); -builder.Services.AddCors(options => { - options.AddPolicy( - "Open", - policy => policy.AllowAnyOrigin().AllowAnyHeader().AllowAnyMethod()); -}); +// builder.Services.AddCors(options => { +// options.AddPolicy( +// "Open", +// policy => policy.AllowAnyOrigin().AllowAnyHeader().AllowAnyMethod()); +// }); var app = builder.Build(); +app.Use((context, next) => { + context.Response.Headers["Access-Control-Allow-Origin"] = "*"; + context.Response.Headers["Access-Control-Allow-Methods"] = "GET, POST, PUT, DELETE, OPTIONS"; + context.Response.Headers["Access-Control-Allow-Headers"] = "*, Authorization"; + if (context.Request.Method == "OPTIONS") { + context.Response.StatusCode = 200; + return Task.CompletedTask; + } + + return next(); +}); app.UsePathBase("/_spacebar/admin"); -app.UseCors("Open"); +// app.UseCors("Open"); // Configure the HTTP request pipeline. -if (app.Environment.IsDevelopment()) { - app.MapOpenApi(); -} +app.MapOpenApi(); app.UseMiddleware(); app.UseAuthorization(); -- cgit 1.5.1