Skip to content
Snippets Groups Projects
Verified Commit 20dd2181 authored by Timm Fitschen's avatar Timm Fitschen
Browse files

EHN: Access-Control-Allow-Origin header configurable

parent bf7a7ae4
No related branches found
No related tags found
No related merge requests found
Pipeline #56440 failed
......@@ -1019,7 +1019,12 @@ class CaosDBComponent extends Component {
request.getAttributes().put("SRID", UUID.randomUUID().toString());
response.setServerInfo(CaosDBServer.getServerInfo());
super.handle(request, response);
response.setAccessControlAllowOrigin("*");
String accessControlAllowOrigin =
CaosDBServer.getServerProperty(
ServerProperties.KEY_SERVER_HEADER_ACCESS_CONTROL_ALLOW_ORIGIN);
if (accessControlAllowOrigin != null && !accessControlAllowOrigin.isBlank()) {
response.setAccessControlAllowOrigin(accessControlAllowOrigin);
}
log(request, response, t1);
}
......
......@@ -69,6 +69,8 @@ public class ServerProperties extends Properties implements Observable {
public static final String KEY_SERVER_PORT_HTTPS = "SERVER_PORT_HTTPS";
public static final String KEY_SERVER_PORT_HTTP = "SERVER_PORT_HTTP";
public static final String KEY_REDIRECT_HTTP_TO_HTTPS_PORT = "REDIRECT_HTTP_TO_HTTPS_PORT";
public static final String KEY_SERVER_HEADER_ACCESS_CONTROL_ALLOW_ORIGIN =
"SERVER_HEADER_ACCESS_CONTROL_ALLOW_ORIGIN";
public static final String KEY_GRPC_SERVER_PORT_HTTPS = "GRPC_SERVER_PORT_HTTPS";
public static final String KEY_GRPC_SERVER_PORT_HTTP = "GRPC_SERVER_PORT_HTTP";
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment