Merge pull request #15 from moheladwy/AddFirstPageInClient

Update CORS Configurations for the api
moheladwy · Jan 1, 2025 · 28521e7 · 28521e7
2 parents dc5837f + 1358adb
commit 28521e7
Show file tree

Hide file tree

Showing 3 changed files with 16 additions and 5 deletions.
diff --git a/server/Todo.Api/Configurations/Constants.cs b/server/Todo.Api/Configurations/Constants.cs
@@ -2,6 +2,8 @@ namespace Todo.Api.Configurations;
 
 public static class Constants
 {
-  public const string ClientCrossOriginPolicyName = "AllowReactApp";
-  public const string ClientCrossOriginPolicyURL = "http://localhost:5173";
+  public const string ClientCrossOriginPolicyProductionName = "AllowProductionReactApp";
+  public const string ClientCrossOriginPolicyDevName = "AllowDevelopmentReactApp";
+  public const string ClientCrossOriginPolicyDevURL = "http://localhost:5173";
+  public const string ClientCrossOriginPolicyProductionURL = "https://todo.aladawy.duckdns.org";
 }
diff --git a/server/Todo.Api/Configurations/StartupApplicationConfiguration.cs b/server/Todo.Api/Configurations/StartupApplicationConfiguration.cs
@@ -21,7 +21,6 @@ public static void InitializeConfigurations(this WebApplication app)
         else
             app.ProductionMode();
 
-        app.UseCors(Constants.ClientCrossOriginPolicyName);
         app.UseHttpsRedirection();
         app.UseHttpLogging();
         app.UseRouting();
@@ -64,6 +63,7 @@ private static async void UseAutoMigrationAtStartup(this WebApplication app)
     private static void DevelopmentMode(this WebApplication app)
     {
         app.UseDeveloperExceptionPage();
+        app.UseCors(Constants.ClientCrossOriginPolicyDevName);
     }
 
     /// <summary>
@@ -75,5 +75,6 @@ private static void DevelopmentMode(this WebApplication app)
     private static void ProductionMode(this WebApplication app)
     {
         app.UseExceptionHandler("/error");
+        app.UseCors(Constants.ClientCrossOriginPolicyProductionName);
     }
 }
diff --git a/server/Todo.Api/Configurations/StartupBuilderConfigurations.cs b/server/Todo.Api/Configurations/StartupBuilderConfigurations.cs
@@ -43,10 +43,18 @@ public static void AddCorsService(this WebApplicationBuilder builder)
     {
         builder.Services.AddCors(options =>
         {
-            options.AddPolicy(Constants.ClientCrossOriginPolicyName, builder =>
+            options.AddPolicy(Constants.ClientCrossOriginPolicyDevName, builder =>
             {
                 builder
-                    .WithOrigins(Constants.ClientCrossOriginPolicyURL)
+                    .WithOrigins(Constants.ClientCrossOriginPolicyDevURL)
+                    .AllowAnyMethod()
+                    .AllowAnyHeader()
+                    .AllowCredentials();
+            });
+            options.AddPolicy(Constants.ClientCrossOriginPolicyProductionName, builder =>
+            {
+                builder
+                    .WithOrigins(Constants.ClientCrossOriginPolicyProductionURL)
                     .AllowAnyMethod()
                     .AllowAnyHeader()
                     .AllowCredentials();