Files
backend/common/Cors.cc
T
2026-06-02 19:39:15 +02:00

62 lines
1.6 KiB
C++

#include "common/Cors.h"
#include <drogon/drogon.h>
namespace visione::cors
{
namespace
{
std::string allowedOrigin()
{
return drogon::app()
.getCustomConfig()["cors"]
.get("allowed_origin", "http://localhost:5173")
.asString();
}
bool isAllowed(const drogon::HttpRequestPtr &request)
{
return request->getHeader("Origin") == allowedOrigin();
}
void addHeaders(const drogon::HttpRequestPtr &request,
const drogon::HttpResponsePtr &response)
{
if (!isAllowed(request))
{
return;
}
response->addHeader("Access-Control-Allow-Origin", allowedOrigin());
response->addHeader("Access-Control-Allow-Credentials", "true");
response->addHeader("Access-Control-Allow-Methods",
"GET,POST,PATCH,DELETE,OPTIONS");
response->addHeader("Access-Control-Allow-Headers",
"Authorization,Content-Type");
}
} // namespace
void configure()
{
drogon::app().registerSyncAdvice(
[](const drogon::HttpRequestPtr &request) -> drogon::HttpResponsePtr {
if (request->method() != drogon::Options)
{
return nullptr;
}
auto response = drogon::HttpResponse::newHttpResponse();
response->setStatusCode(drogon::k204NoContent);
addHeaders(request, response);
return response;
});
drogon::app().registerPostHandlingAdvice(
[](const drogon::HttpRequestPtr &request,
const drogon::HttpResponsePtr &response) {
addHeaders(request, response);
});
}
} // namespace visione::cors