From 3476afe1abf8c8b79d1fb1bef8853da9b3b67a95 Mon Sep 17 00:00:00 2001 From: les Date: Tue, 10 Dec 2019 22:29:36 +0100 Subject: [PATCH] [api] cors for public api --- server/api/index.js | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/server/api/index.js b/server/api/index.js index eb6debaa..3b96f860 100644 --- a/server/api/index.js +++ b/server/api/index.js @@ -2,6 +2,7 @@ const express = require('express') const multer = require('multer') const cookieParser = require('cookie-parser') const bodyParser = require('body-parser') +const cors = require('cors')() const { isAuth, isAdmin } = require('./auth') const eventController = require('./controller/event') @@ -77,13 +78,13 @@ api.get('/event/confirm/:event_id', isAuth, eventController.confirm) api.get('/event/unconfirm/:event_id', isAuth, eventController.unconfirm) // get event -api.get('/event/:event_id.:format?', eventController.get) +api.get('/event/:event_id.:format?', cors, eventController.get) // export events (rss/ics) -api.get('/export/:type', exportController.export) +api.get('/export/:type', cors, exportController.export) // get events in this range -api.get('/event/:month/:year', eventController.getAll) +api.get('/event/:month/:year', cors, eventController.getAll) api.get('/instances', isAdmin, instanceController.getAll) api.get('/instances/:instance_domain', isAdmin, instanceController.get)