CORS settings in webui (#11912)

* Change CORS implementation
allows for upstream integration of Laravel 7

* migrate config

* skip implementing patterns for now

* Expose settings to the webui

* Make db settings apply
This commit is contained in:
Tony Murray
2020-07-08 07:36:51 -05:00
committed by GitHub
parent 726a762944
commit 560fd71ef6
9 changed files with 318 additions and 194 deletions

View File

@@ -0,0 +1,61 @@
<?php
/**
* HandleCors.php
*
* Check and load cors settings from db config at runtime
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation, either version 3 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program. If not, see <http://www.gnu.org/licenses/>.
*
* @package LibreNMS
* @link http://librenms.org
* @copyright 2020 Tony Murray
* @author Tony Murray <murraytony@gmail.com>
*/
namespace App\Http\Middleware;
use Asm89\Stack\CorsService;
use Illuminate\Contracts\Container\Container;
class HandleCors extends \Fruitcake\Cors\HandleCors
{
private $map = [
'allowmethods' => 'allowed_methods',
'origin' => 'allowed_origins',
'allowheaders' => 'allowed_headers',
'exposeheaders' => 'exposed_headers',
'maxage' => 'max_age',
'allowcredentials' => 'supports_credentials',
];
public function __construct(Container $container)
{
// load legacy config settings before booting the CorsService
if (\LibreNMS\Config::get('api.cors.enabled')) {
$laravel_config = $container['config']->get('cors');
$legacy = \LibreNMS\Config::get('api.cors');
$laravel_config['paths'][] = 'api/*';
foreach ($this->map as $config_key => $option_key) {
$laravel_config[$option_key] = $legacy[$config_key] ?? $laravel_config[$option_key];
}
$container['config']->set('cors', $laravel_config);
}
$cors = $container->make(CorsService::class);
parent::__construct($cors, $container);
}
}