fix: axum cors settings (#108)

Gumichocopengin8 · Dec 10, 2023 · aa7f93f · aa7f93f
1 parent b234c2d
commit aa7f93f
Show file tree

Hide file tree

Showing 3 changed files with 14 additions and 6 deletions.
diff --git a/api/Cargo.lock b/api/Cargo.lock
diff --git a/api/Cargo.toml b/api/Cargo.toml
@@ -17,7 +17,7 @@ rust-version = "1.71"
 [dependencies]
 anyhow = "1"
 axum = "0.7.2"
-crates_io_api = "0.8"
+crates_io_api = "0.9"
 env_logger = "0.10"
 http-body-util = "0.1.0"
 serde_json = "1.0.107"

diff --git a/api/src/main.rs b/api/src/main.rs
@@ -11,14 +11,17 @@ use axum::{
     extract::Path,
     http::{
         header::{ACCEPT, AUTHORIZATION},
-        HeaderValue, Method, StatusCode,
+        request, HeaderValue, Method, StatusCode,
     },
     response::IntoResponse,
     routing::get,
     Json, Router,
 };
 use std::time::Duration;
-use tower_http::{cors::CorsLayer, trace::TraceLayer};
+use tower_http::{
+    cors::{AllowOrigin, CorsLayer},
+    trace::TraceLayer,
+};
 use tracing_subscriber::{layer::SubscriberExt, util::SubscriberInitExt};
 
 #[tokio::main]
@@ -58,7 +61,12 @@ fn app() -> Router {
         )
         .layer(
             CorsLayer::new()
-                .allow_origin("http://localhost:3000".parse::<HeaderValue>().unwrap())
+                .allow_origin(AllowOrigin::predicate(
+                    |origin: &HeaderValue, _request_parts: &request::Parts| {
+                        origin.as_bytes() == b"http://localhost:3000"
+                            || origin.as_bytes().ends_with(b".vercel.app")
+                    },
+                ))
                 .allow_methods([Method::GET])
                 .allow_headers([AUTHORIZATION, ACCEPT])
                 .max_age(Duration::from_secs(60) * 5),