ntppool/data-api
Private
Public Access
1
0
Fork 0
Code Activity

fix(cors): correct malformed askdev wildcard origin

Browse Source 
The askdev origin pattern was missing a slash (https:/* instead of
https://*), so requests from *.askdev.grundclock.com never matched the
CORS allowlist and got no Access-Control-Allow-Origin header.
This commit is contained in:
ask
2026-05-24 01:34:12 -07:00
parent bf27d87891
commit 37204a5dda
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/server.go
+3 -2
View File
@@ -137,7 +137,8 @@ func (srv *Server) Run() error {
})) }))
e.Use(otelecho.Middleware("data-api")) e.Use(otelecho.Middleware("data-api"))
e.Use(slogecho.NewWithConfig(log, e.Use(slogecho.NewWithConfig(
log,
slogecho.Config{ slogecho.Config{
WithTraceID: false, // done by logger already WithTraceID: false, // done by logger already
DefaultLevel: slog.LevelInfo, DefaultLevel: slog.LevelInfo,
@@ -182,7 +183,7 @@ func (srv *Server) Run() error {
"http://localhost", "http://localhost:5173", "http://localhost:5174", "http://localhost:8080", "http://localhost", "http://localhost:5173", "http://localhost:5174", "http://localhost:8080",
"https://www.ntppool.org", "https://*.ntppool.org", "https://www.ntppool.org", "https://*.ntppool.org",
"https://web.beta.grundclock.com", "https://manage.beta.grundclock.com", "https://web.beta.grundclock.com", "https://manage.beta.grundclock.com",
"https:/*.askdev.grundclock.com", "https://*.askdev.grundclock.com",
}, },
AllowHeaders: []string{echo.HeaderOrigin, echo.HeaderContentType, echo.HeaderAccept}, AllowHeaders: []string{echo.HeaderOrigin, echo.HeaderContentType, echo.HeaderAccept},
})) }))