Handle CORS

Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "pierport"
-version = "0.1.1"
+version = "0.1.2"
 edition = "2021"
 rust-version = "1.76"
 authors = ["Aurimas Blažulionis <[email protected]>"]
@@ -43,12 +43,15 @@ tokio = { version = "1", features = ["full"], optional = true }
 tokio-util = { version = "0.7", optional = true }
 jsonwebtoken = { version = "9", optional = true }
 reqwest = { version = "0.11", features = ["stream", "rustls-tls", "json"], default-features = false, optional = true }
-toml = { version = "0.5", optional = true}
+toml = { version = "0.5", optional = true }
+http = { version = "0.2", optional = true }
+tower-http = { version = "0.4", features = ["cors"], optional = true }
+tower = { version = "0.4", optional = true }
 
 # See https://github.com/rust-lang/jobserver-rs/issues/79
 [build-dependencies]
 jobserver = { version = "=0.1.28", default-features = false }
 
 [features]
 default = ["bin-deps"]
-bin-deps = ["clap", "anyhow/backtrace", "tokio", "tokio-util", "jsonwebtoken", "reqwest", "toml"]
+bin-deps = ["clap", "anyhow/backtrace", "tokio", "tokio-util", "jsonwebtoken", "reqwest", "toml", "http", "tower-http", "tower"]

src/main.rs

@@ -28,8 +28,11 @@ use axum::{
     routing::{get, post},
     Router,
 };
+use http::Method;
 use hyper::{Request, Response, StatusCode};
 use reqwest::Client;
+use tower::ServiceBuilder;
+use tower_http::cors::{Any, CorsLayer};
 
 static CS: Lazy<Mutex<()>> = Lazy::new(Default::default);
 
@@ -171,12 +174,23 @@ async fn main() -> anyhow::Result<()> {
         }
     });
 
+    let cors = CorsLayer::new()
+        .allow_methods([Method::GET, Method::POST])
+        .allow_origin(Any)
+        .allow_headers([
+            hyper::header::AUTHORIZATION,
+            hyper::header::CONTENT_LENGTH,
+            header::SIZE,
+        ])
+        .allow_credentials(true);
+
     // TODO: should we include pierport/v1/ here?
     let app = Router::new()
         .route("/capabilities", get(capabilities))
         .route("/import/~:patp/:id", get(import_status))
         .route("/import/~:patp", post(import))
         .layer(DefaultBodyLimit::max(config.upload_limit))
+        .layer(ServiceBuilder::new().layer(cors))
         .with_state((config.clone(), jwt_key, sessions));
 
     axum::Server::bind(&config.bind)