Add back CORS option to rest server

[okwme]

Summary

Bring back insecure CORs option for REST server but set the default option off.

#3312
#3317
#4432
#2520

Problem Definition

What problems may be addressed by introducing this feature?

Front end devs are not familiar with the server requirements of reserve proxy and nginx in order to access the REST endpoint.

What benefits does the SDK stand to gain by including this feature?

It will support front end developers better

Are there any disadvantages of including this feature?

It would slightly increase the chance that someone may misconfigure their REST server by accidentally including --insecure that would allow unsecured access.

Proposal

add an --insecure flag to the rest server that adds CORs header with Access-Control-Allow-Origin: *

---

For Admin Use

• Not duplicate issue
• Appropriate labels applied
• Appropriate contributors tagged
• Contributor assigned/self-assigned

[alessio]

Fair enough - I'm happy with the plan

[njmurarka]

Any idea when this will happen?

[alessio]

closed in #5671