adapt cors headers

Signed-off-by: Christian Richter <crichter@owncloud.com>
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
This commit is contained in:
Christian Richter
2024-02-23 08:53:06 +01:00
parent 6927fe1afd
commit 72916dc53c
8 changed files with 48 additions and 13 deletions

View File

@@ -38,7 +38,7 @@ func DefaultConfig() *config.Config {
Protocol: "tcp",
Prefix: "data",
CORS: config.CORS{
AllowedOrigins: []string{"*"},
AllowedOrigins: []string{"https://localhost:9200"},
AllowedMethods: []string{
"POST",
"HEAD",
@@ -63,7 +63,7 @@ func DefaultConfig() *config.Config {
"Upload-Incomplete",
"Upload-Draft-Interop-Version",
},
AllowCredentials: true,
AllowCredentials: false,
ExposedHeaders: []string{
"Upload-Offset",
"Location",
@@ -208,6 +208,11 @@ func EnsureDefaults(cfg *config.Config) {
if cfg.Tasks.PurgeTrashBin.UserID == "" && cfg.Commons != nil {
cfg.Tasks.PurgeTrashBin.UserID = cfg.Commons.AdminUserID
}
if cfg.HTTP.CORS.AllowedOrigins == nil && cfg.Commons != nil && cfg.Commons.OcisURL != "" ||
len(cfg.HTTP.CORS.AllowedOrigins) == 1 && cfg.HTTP.CORS.AllowedOrigins[0] == "https://localhost:9200" {
cfg.HTTP.CORS.AllowedOrigins = []string{cfg.Commons.OcisURL}
}
}
// Sanitize sanitized the configuration