Bug 31571 - CORS header needs more flexibility
Summary: CORS header needs more flexibility
Status: NEW
Alias: None
Product: Koha
Classification: Unclassified
Component: Web services (show other bugs)
Version: unspecified
Hardware: All All
: P5 - low enhancement
Assignee: Bugs List
QA Contact: Testopia
URL: https://developer.mozilla.org/en-US/d...
Keywords:
Depends on:
Blocks:
 
Reported: 2022-09-15 14:32 UTC by Tomás Cohen Arazi (tcohen)
Modified: 2022-09-15 14:32 UTC (History)
2 users (show)

See Also:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Tomás Cohen Arazi (tcohen) 2022-09-15 14:32:16 UTC 
In order to have several domains allowed for the Access-Control-Allow-Origin we need to:

 * Allow the AccessControlAllowOrigin syspref to take several values
 * On the controllers code, we should check Origin on each request against the defined values and return the right value on the header.