feat: add cors for api/* urls

mashb1t · Mar 9, 2022 · b16f5d8 · b16f5d8
1 parent 18a19f0
commit b16f5d8
Showing 1 changed file with 7 additions and 4 deletions.
diff --git a/php/src/config/cors.php b/php/src/config/cors.php
@@ -17,17 +17,20 @@
 
     'paths' => ['api/*'],
 
-    'allowed_methods' => ['*'],
+    'allowed_methods' => ['POST', 'GET', 'OPTIONS', 'PUT', 'DELETE'],
 
-    'allowed_origins' => ['*'],
+    'allowed_origins' => [
+        env('APP_URL', 'http://localhost'),
+        env('GRAFANA_URL')
+    ],
 
     'allowed_origins_patterns' => [],
 
-    'allowed_headers' => ['*'],
+    'allowed_headers' => ['Content-Type', 'Cache-Control', 'Authorization', 'X-Requested-With'],
 
     'exposed_headers' => [],
 
-    'max_age' => 0,
+    'max_age' => 86400,
 
     'supports_credentials' => true,