Skip to content

reenable CORS for IRMA #3571

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Nov 20, 2024
Merged

Conversation

woutslakhorst
Copy link
Member

fixes #3570

Can be released with v6.1

Tested by hand with

curl localhost:8080/public/auth/irmaclient/session -X OPTIONS -H "Origin: https://sub.example.com" -v

and config

auth.irma.cors.origin: "https://*.example.com"

@woutslakhorst woutslakhorst force-pushed the fix/3570/reenable_cord_middleware branch from d588ff4 to 28f4efd Compare November 19, 2024 13:24
@@ -51,6 +54,7 @@ func FlagSet() *pflag.FlagSet {
defs := auth.DefaultConfig()
flags.String(ConfIrmaSchemeManager, defs.Irma.SchemeManager, "IRMA schemeManager to use for attributes. Can be either 'pbdf' or 'irma-demo'.")
flags.Bool(ConfAutoUpdateIrmaSchemas, defs.Irma.AutoUpdateSchemas, "set if you want automatically update the IRMA schemas every 60 minutes.")
flags.StringSlice(ConfIrmaCorsOrigin, defs.Irma.CORS.Origin, "sets the allowed CORS origins for the IRMA server")
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

A note for what the behavior is when not set?

@woutslakhorst woutslakhorst merged commit 25e5ce3 into master Nov 20, 2024
7 of 9 checks passed
@woutslakhorst woutslakhorst deleted the fix/3570/reenable_cord_middleware branch November 20, 2024 08:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Proposal of replacing CORS with config in reverse proxy is not a 1-on-1 replacement.
2 participants