Merge pull request #105 from ricardogsilva/101-allow-configuring-CORS…

…-on-the-backend-server

Added CORS middleware to API v2 app

arpav_ppcv/config.py

@@ -169,6 +169,9 @@ class ArpavPpcvSettings(BaseSettings):  # noqa
     log_config_file: Path | None = None
     session_secret_key: str = "changeme"
     admin_user: AdminUserSettings = AdminUserSettings()
+    cors_origins: list[str] = []
+    cors_methods: list[str] = []
+    allow_cors_credentials: bool = False
 
     @pydantic.model_validator(mode="after")
     def ensure_test_db_dsn(self):

arpav_ppcv/webapp/api_v2/app.py

@@ -1,4 +1,5 @@
 import fastapi
+from fastapi.middleware.cors import CORSMiddleware
 
 from ... import config
 from .routers.coverages import router as coverages_router
@@ -21,6 +22,13 @@ def create_app(settings: config.ArpavPpcvSettings) -> fastapi.FastAPI:
             "email": settings.contact.email,
         },
     )
+    app.add_middleware(
+        CORSMiddleware,
+        allow_origins=settings.cors_origins,
+        allow_credentials=settings.allow_cors_credentials,
+        allow_methods=settings.cors_methods,
+        allow_headers=["*"],
+    )
     app.include_router(
         base_router,
         prefix="/base",

docker/compose.dev.yaml

@@ -43,7 +43,10 @@ services:
   webapp:
     image: *webapp-image
     environment:
-      *common-env
+      <<: *common-env
+      ARPAV_PPCV__CORS_ORIGINS: '["*"]'
+      ARPAV_PPCV__CORS_METHODS: '["*"]'
+      ARPAV_PPCV__ALLOW_CORS_CREDENTIALS: true
     ports:
       - target: 5001
         published: 5001