Disallowed localhost cors in debug mode

2023-12-22 22:01:32 +01:00 · 2023-12-22 22:01:32 +01:00 · 07b40105c2
commit 07b40105c2
parent b34a06387f
1 changed files with 4 additions and 1 deletions
--- a/server/src/main.rs
+++ b/server/src/main.rs
@ -39,10 +39,13 @@ async fn main() -> std::io::Result<()> {
    HttpServer::new(move || {
        let cors = Cors::default()
            .allowed_origin("https://shitpost.se")
-            .allowed_origin("http://localhost:8080")
            .allowed_methods(vec!["GET", "POST"])
            .max_age(3600);

+        // In debug mode, allow localhost
+        #[cfg(debug_assertions)]
+        let cors = cors.allowed_origin("http://localhost:8080");
+
        App::new()
            .wrap(cors)
            .wrap(middleware::Compress::default())