change how origin header is treated

Now check whether the origin is in allowed_origins table,
and if not check allow_all_origins config parameter.

While here:
- add are_cors_preflight_requests_available - if true then preflight
  requests are available (default false)
This commit is contained in:
2022-09-09 01:01:39 +02:00
parent 05ecac8426
commit 6138497fe0
4 changed files with 76 additions and 51 deletions

View File

@@ -357,8 +357,9 @@ void Config::AssignValues()
request_queue_job_limit = Size(L"request_queue_job_limit", 1024);
allow_all_cors_origins = Bool(L"allow_all_cors_origins", false);
ListText(L"allowed_cors_origins", allowed_cors_origins);
ListText(L"allowed_origins", allowed_origins);
allow_all_origins = Bool(L"allow_all_origins", true);
are_cors_preflight_requests_available = Bool(L"are_cors_preflight_requests_available", false);
ListText(L"access_control_expose_headers", access_control_expose_headers);
access_control_allow_credentials = Bool(L"access_control_allow_credentials", false);
}