Allow any CORS origin in Development

This commit is contained in:
2026-05-31 19:25:15 +02:00
parent 834d7a25c1
commit 03d9fa054f
+11 -5
View File
@@ -14,11 +14,17 @@ builder.Services.AddSingleton<TicketValidator>();
const string corsPolicy = "media-clients"; const string corsPolicy = "media-clients";
var allowedOrigins = builder.Configuration.GetSection("Cors:AllowedOrigins").Get<string[]>() ?? []; var allowedOrigins = builder.Configuration.GetSection("Cors:AllowedOrigins").Get<string[]>() ?? [];
builder.Services.AddCors(options => options.AddPolicy(corsPolicy, policy => policy builder.Services.AddCors(options => options.AddPolicy(corsPolicy, policy =>
.WithOrigins(allowedOrigins) {
.AllowAnyHeader() if (builder.Environment.IsDevelopment())
.WithMethods("GET", "HEAD") policy.AllowAnyOrigin();
.WithExposedHeaders("Content-Range", "Accept-Ranges", "Content-Length"))); else
policy.WithOrigins(allowedOrigins);
policy.AllowAnyHeader()
.WithMethods("GET", "HEAD")
.WithExposedHeaders("Content-Range", "Accept-Ranges", "Content-Length");
}));
builder.Services builder.Services
.AddReverseProxy() .AddReverseProxy()