feat: add config to specify CORS origins (#2986)

test/spec/Feature/CorsSpec.hs

@@ -20,8 +20,7 @@ spec =
           ""
         `shouldRespondWith`
           ""
-          { matchHeaders = [ "Access-Control-Allow-Origin" <:> "http://example.com"
-                           , "Access-Control-Allow-Credentials" <:> "true"
+          { matchHeaders = [ "Access-Control-Allow-Origin" <:> "*"
                            , "Access-Control-Allow-Methods" <:> "GET, POST, PATCH, PUT, DELETE, OPTIONS, HEAD"
                            , "Access-Control-Allow-Headers" <:> "Authorization, Foo, Bar, Accept, Accept-Language, Content-Language"
                            , "Access-Control-Max-Age" <:> "86400" ]

test/spec/SpecHelper.hs

@@ -97,49 +97,50 @@ validateOpenApiResponse headers = do
 baseCfg :: AppConfig
 baseCfg = let secret = Just $ encodeUtf8 "reallyreallyreallyreallyverysafe" in
   AppConfig {
-    configAppSettings           = [ ("app.settings.app_host", "localhost") , ("app.settings.external_api_secret", "0123456789abcdef") ]
-  , configDbAnonRole            = Just "postgrest_test_anonymous"
-  , configDbChannel             = mempty
-  , configDbChannelEnabled      = True
-  , configDbExtraSearchPath     = []
-  , configDbMaxRows             = Nothing
-  , configDbPlanEnabled         = False
-  , configDbPoolSize            = 10
-  , configDbPoolAcquisitionTimeout = 10
-  , configDbPoolMaxLifetime     = 1800
-  , configDbPoolMaxIdletime     = 600
-  , configDbPoolAutomaticRecovery = True
-  , configDbPreRequest          = Just $ QualifiedIdentifier "test" "switch_role"
-  , configDbPreparedStatements  = True
-  , configDbRootSpec            = Nothing
-  , configDbSchemas             = fromList ["test"]
-  , configDbConfig              = False
-  , configDbPreConfig           = Nothing
-  , configDbUri                 = "postgresql://"
-  , configDbUseLegacyGucs       = True
-  , configFilePath              = Nothing
-  , configJWKS                  = parseSecret <$> secret
-  , configJwtAudience           = Nothing
-  , configJwtRoleClaimKey       = [JSPKey "role"]
-  , configJwtSecret             = secret
-  , configJwtSecretIsBase64     = False
-  , configJwtCacheMaxLifetime   = 0
-  , configLogLevel              = LogCrit
-  , configOpenApiMode           = OAFollowPriv
-  , configOpenApiSecurityActive = False
-  , configOpenApiServerProxyUri = Nothing
-  , configRawMediaTypes         = []
-  , configServerHost            = "localhost"
-  , configServerPort            = 3000
-  , configServerTraceHeader     = Nothing
-  , configServerUnixSocket      = Nothing
-  , configServerUnixSocketMode  = 432
-  , configDbTxAllowOverride     = True
-  , configDbTxRollbackAll       = True
-  , configAdminServerPort       = Nothing
-  , configRoleSettings          = mempty
-  , configRoleIsoLvl            = mempty
-  , configInternalSCSleep       = Nothing
+    configAppSettings               = [ ("app.settings.app_host", "localhost") , ("app.settings.external_api_secret", "0123456789abcdef") ]
+  , configDbAnonRole                = Just "postgrest_test_anonymous"
+  , configDbChannel                 = mempty
+  , configDbChannelEnabled          = True
+  , configDbExtraSearchPath         = []
+  , configDbMaxRows                 = Nothing
+  , configDbPlanEnabled             = False
+  , configDbPoolSize                = 10
+  , configDbPoolAcquisitionTimeout  = 10
+  , configDbPoolMaxLifetime         = 1800
+  , configDbPoolMaxIdletime         = 600
+  , configDbPoolAutomaticRecovery   = True
+  , configDbPreRequest              = Just $ QualifiedIdentifier "test" "switch_role"
+  , configDbPreparedStatements      = True
+  , configDbRootSpec                = Nothing
+  , configDbSchemas                 = fromList ["test"]
+  , configDbConfig                  = False
+  , configDbPreConfig               = Nothing
+  , configDbUri                     = "postgresql://"
+  , configDbUseLegacyGucs           = True
+  , configFilePath                  = Nothing
+  , configJWKS                      = parseSecret <$> secret
+  , configJwtAudience               = Nothing
+  , configJwtRoleClaimKey           = [JSPKey "role"]
+  , configJwtSecret                 = secret
+  , configJwtSecretIsBase64         = False
+  , configJwtCacheMaxLifetime       = 0
+  , configLogLevel                  = LogCrit
+  , configOpenApiMode               = OAFollowPriv
+  , configOpenApiSecurityActive     = False
+  , configOpenApiServerProxyUri     = Nothing
+  , configRawMediaTypes             = []
+  , configServerCorsAllowedOrigins  = Nothing
+  , configServerHost                = "localhost"
+  , configServerPort                = 3000
+  , configServerTraceHeader         = Nothing
+  , configServerUnixSocket          = Nothing
+  , configServerUnixSocketMode      = 432
+  , configDbTxAllowOverride         = True
+  , configDbTxRollbackAll           = True
+  , configAdminServerPort           = Nothing
+  , configRoleSettings              = mempty
+  , configRoleIsoLvl                = mempty
+  , configInternalSCSleep           = Nothing
   }
 
 testCfg :: AppConfig