Bug 31571

Summary: CORS header needs more flexibility
Product: Koha Reporter: Tomás Cohen Arazi <tomascohen>
Component: Web servicesAssignee: Bugs List <koha-bugs>
Status: NEW --- QA Contact: Testopia <testopia>
Severity: enhancement    
Priority: P5 - low CC: liz, nick
Version: unspecified   
Hardware: All   
OS: All   
URL: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Origin
Change sponsored?: --- Patch complexity: ---
Documentation contact: Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:

Description Tomás Cohen Arazi 2022-09-15 14:32:16 UTC
In order to have several domains allowed for the Access-Control-Allow-Origin we need to:

 * Allow the AccessControlAllowOrigin syspref to take several values
 * On the controllers code, we should check Origin on each request against the defined values and return the right value on the header.