From 50f0620341f41318d3b15ed94a508de3e6fc37a4 Mon Sep 17 00:00:00 2001
From: Satyam Singh <trueleo@protonmail.com>
Date: Thu, 26 Oct 2023 12:41:55 +0530
Subject: [PATCH] Mirror CORS request and allow credentials (#541)

Will follow with a separate PR to move this to
developer mode.
---
 server/src/handlers/livetail.rs | 11 +++++------
 1 file changed, 5 insertions(+), 6 deletions(-)

diff --git a/server/src/handlers/livetail.rs b/server/src/handlers/livetail.rs
index 1100f21fc..e09899fbf 100644
--- a/server/src/handlers/livetail.rs
+++ b/server/src/handlers/livetail.rs
@@ -35,7 +35,7 @@ use arrow_flight::{
     HandshakeResponse, PutResult, SchemaResult, Ticket,
 };
 use tonic_web::GrpcWebLayer;
-use tower_http::cors::{Any, CorsLayer};
+use tower_http::cors::{AllowHeaders, AllowMethods, AllowOrigin, CorsLayer};
 
 use crate::livetail::{Message, LIVETAIL};
 use crate::metadata::STREAM_INFO;
@@ -175,11 +175,10 @@ pub fn server() -> impl Future<Output = Result<(), Box<dyn std::error::Error + S
     let svc = FlightServiceServer::new(service);
 
     let cors = CorsLayer::new()
-        // allow `GET` and `POST` when accessing the resource
-        .allow_methods(Any)
-        .allow_headers(Any)
-        .allow_origin(Any);
-    // allow requests from any origin
+        .allow_methods(AllowMethods::mirror_request())
+        .allow_headers(AllowHeaders::mirror_request())
+        .allow_origin(AllowOrigin::mirror_request())
+        .allow_credentials(true);
 
     Server::builder()
         .accept_http1(true)