Allow any CORS origin in Development

2026-05-31 19:25:15 +02:00
parent 834d7a25c1
commit 03d9fa054f
1 changed files with 11 additions and 5 deletions
@@ -14,11 +14,17 @@ builder.Services.AddSingleton<TicketValidator>();

 const string corsPolicy = "media-clients";
 var allowedOrigins = builder.Configuration.GetSection("Cors:AllowedOrigins").Get<string[]>() ?? [];
-builder.Services.AddCors(options => options.AddPolicy(corsPolicy, policy => policy
-    .WithOrigins(allowedOrigins)
-    .AllowAnyHeader()
-    .WithMethods("GET", "HEAD")
-    .WithExposedHeaders("Content-Range", "Accept-Ranges", "Content-Length")));
+builder.Services.AddCors(options => options.AddPolicy(corsPolicy, policy =>
+{
+    if (builder.Environment.IsDevelopment())
+        policy.AllowAnyOrigin();
+    else
+        policy.WithOrigins(allowedOrigins);
+
+    policy.AllowAnyHeader()
+        .WithMethods("GET", "HEAD")
+        .WithExposedHeaders("Content-Range", "Accept-Ranges", "Content-Length");
+}));

 builder.Services
    .AddReverseProxy()