Files
librenms-librenms/app/Http/Middleware/HandleCors.php
Tony Murray 560fd71ef6 CORS settings in webui (#11912)
* Change CORS implementation
allows for upstream integration of Laravel 7

* migrate config

* skip implementing patterns for now

* Expose settings to the webui

* Make db settings apply
2020-07-08 07:36:51 -05:00

62 lines
2.0 KiB
PHP

<?php
/**
* HandleCors.php
*
* Check and load cors settings from db config at runtime
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation, either version 3 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program. If not, see <http://www.gnu.org/licenses/>.
*
* @package LibreNMS
* @link http://librenms.org
* @copyright 2020 Tony Murray
* @author Tony Murray <murraytony@gmail.com>
*/
namespace App\Http\Middleware;
use Asm89\Stack\CorsService;
use Illuminate\Contracts\Container\Container;
class HandleCors extends \Fruitcake\Cors\HandleCors
{
private $map = [
'allowmethods' => 'allowed_methods',
'origin' => 'allowed_origins',
'allowheaders' => 'allowed_headers',
'exposeheaders' => 'exposed_headers',
'maxage' => 'max_age',
'allowcredentials' => 'supports_credentials',
];
public function __construct(Container $container)
{
// load legacy config settings before booting the CorsService
if (\LibreNMS\Config::get('api.cors.enabled')) {
$laravel_config = $container['config']->get('cors');
$legacy = \LibreNMS\Config::get('api.cors');
$laravel_config['paths'][] = 'api/*';
foreach ($this->map as $config_key => $option_key) {
$laravel_config[$option_key] = $legacy[$config_key] ?? $laravel_config[$option_key];
}
$container['config']->set('cors', $laravel_config);
}
$cors = $container->make(CorsService::class);
parent::__construct($cors, $container);
}
}