Mirrors/unleash.unleash
1
0
Fork 0
mirror of https://github.com/Unleash/unleash.git synced 2025-08-04 13:48:56 +02:00
Code Issues Projects Releases Wiki Activity

fix: frontend API CORS (#10301)

Browse Source
This commit is contained in:
Mateusz Kwasniewski 2025-07-04 10:47:11 +02:00 committed by GitHub
parent 51a895b660
commit 35db1b761e
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 1 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/lib/app.ts
View File

@ -103,10 +103,7 @@ export default async function getApp(
if (config.enableOAS && services.openApiService) { if (config.enableOAS && services.openApiService) {
services.openApiService.useDocs(app); services.openApiService.useDocs(app);
} }
// Support CORS preflight requests for the frontend endpoints. app.use(
// Preflight requests should not have Authorization headers,
// so this must be handled before the API token middleware.
app.options(
`${baseUriPath}/api/frontend*`, `${baseUriPath}/api/frontend*`,
corsOriginMiddleware(services, config), corsOriginMiddleware(services, config),
); );

5
src/lib/features/frontend-api/frontend-api-controller.ts
View File

@ -19,7 +19,6 @@ import {
} from '../../openapi/index.js'; } from '../../openapi/index.js';
import type { Context } from 'unleash-client'; import type { Context } from 'unleash-client';
import { enrichContextWithIp } from './index.js'; import { enrichContextWithIp } from './index.js';
import { corsOriginMiddleware } from '../../middleware/index.js';
import NotImplementedError from '../../error/not-implemented-error.js'; import NotImplementedError from '../../error/not-implemented-error.js';
import rateLimit from 'express-rate-limit'; import rateLimit from 'express-rate-limit';
import { minutesToMilliseconds } from 'date-fns'; import { minutesToMilliseconds } from 'date-fns';
@ -65,10 +64,6 @@ export default class FrontendAPIController extends Controller {
functionName, functionName,
}); });
// Support CORS requests for the frontend endpoints.
// Preflight requests are handled in `app.ts`.
this.app.use(corsOriginMiddleware(services, config));
this.route({ this.route({
method: 'get', method: 'get',
path: '', path: '',