UA-Fediland/pixelfed
2
0
Fork 0
mirror of https://github.com/pixelfed/pixelfed.git synced 2024-11-21 22:11:26 +00:00
Code Issues Projects Releases Packages Wiki Activity

Adjust CORS configuration to support API & OAuth Routes

Browse source 
Fixes #4411 and #3381
This commit is contained in:
Emelia Smith 2024-03-17 21:43:16 +01:00
parent c96167f2f7
commit 1eadff9d2e
No known key found for this signature in database
2 changed files with 8 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
app/Http/Kernel.php
View file

@ -14,12 +14,12 @@ class Kernel extends HttpKernel
* @var array
*/
protected $middleware = [
\Illuminate\Http\Middleware\HandleCors::class,
\Illuminate\Foundation\Http\Middleware\CheckForMaintenanceMode::class,
\Illuminate\Foundation\Http\Middleware\ValidatePostSize::class,
\App\Http\Middleware\TrustProxies::class,
\App\Http\Middleware\TrimStrings::class,
\Illuminate\Foundation\Http\Middleware\ConvertEmptyStringsToNull::class,
\App\Http\Middleware\TrustProxies::class,
\Illuminate\Http\Middleware\HandleCors::class,
];
/**

7
config/cors.php
View file

@ -22,7 +22,9 @@ return [
* Example: ['api/*']
*/
'paths' => [
'.well-known/*'
'.well-known/*',
'api/*',
'oauth/*'
],
/*
@ -48,7 +50,8 @@ return [
/*
* Sets the Access-Control-Expose-Headers response header with these headers.
*/
'exposed_headers' => [],
// TODO: Add support for rate-limit related headers
'exposed_headers' => ['Link'],
/*
* Sets the Access-Control-Max-Age response header when > 0.