Bug 31571 - CORS header needs more flexibility
Summary: CORS header needs more flexibility
Status: NEW
Alias: None
Product: Koha
Classification: Unclassified
Component: Web services (show other bugs)
Version: unspecified
Hardware: All All
: P5 - low enhancement
Assignee: Bugs List
QA Contact: Testopia
URL: https://developer.mozilla.org/en-US/d...
Keywords:
Depends on:
Blocks:
 
Reported: 2022-09-15 14:32 UTC by Tomás Cohen Arazi
Modified: 2022-09-15 14:32 UTC (History)
2 users (show)

See Also:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Tomás Cohen Arazi 2022-09-15 14:32:16 UTC
In order to have several domains allowed for the Access-Control-Allow-Origin we need to:

 * Allow the AccessControlAllowOrigin syspref to take several values
 * On the controllers code, we should check Origin on each request against the defined values and return the right value on the header.