fix(maps): enable CORS for style json response (#983)

src/fastify-plugins/maps.js

@@ -120,6 +120,7 @@ export async function plugin(fastify, opts) {
       if (resp && resp.status === 200) {
         return reply
           .headers({
+            'access-control-allow-origin': '*',
             'cache-control': 'no-cache',
           })
           .redirect(url.toString())

src/fastify-plugins/utils.js

@@ -43,16 +43,3 @@ export async function getFastifyServerAddress(server, { timeout } = {}) {
 
   return 'http://' + addr
 }
-
-/**
- * @param {Readonly<Date>} lastModified
- */
-export function createStyleJsonResponseHeaders(lastModified) {
-  return {
-    'Cache-Control': 'max-age=' + 5 * 60, // 5 minutes
-    'Access-Control-Allow-Headers':
-      'Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since',
-    'Access-Control-Allow-Origin': '*',
-    'Last-Modified': lastModified.toUTCString(),
-  }
-}

test/fastify-plugins/maps.js

@@ -95,6 +95,12 @@ test('/style.json resolves style.json of custom map when available', async (t) =
     'style response disables caching'
   )
 
+  assert.equal(
+    styleResponse.headers['access-control-allow-origin'],
+    '*',
+    'style response enables CORS'
+  )
+
   const location = styleResponse.headers['location']
 
   assert.equal(
@@ -154,6 +160,12 @@ test('/style.json resolves online style.json when custom is not available', asyn
     'style response disables caching'
   )
 
+  assert.equal(
+    response.headers['access-control-allow-origin'],
+    '*',
+    'style response enables CORS'
+  )
+
   assert.equal(
     response.headers['location'],
     DEFAULT_ONLINE_STYLE_URL,
@@ -199,6 +211,12 @@ test('/style.json resolves style.json of fallback map when custom and online are
     'style response disables caching'
   )
 
+  assert.equal(
+    styleResponse.headers['access-control-allow-origin'],
+    '*',
+    'style response enables CORS'
+  )
+
   const location = styleResponse.headers['location']
 
   assert.equal(