CORS origins, methods and auth are hooked up to our settings and can be configured by means of env variables. For security purposes, the default settings disallow all origins, disallow all methods and disable CORS auth.
The dev compose file enables all origins and all methods.
NOTE
The staging environment needs to be updated to also enable the relevant settings in order to this to work as expected on staging.
This PR enables the CORS middleware on the V2 API application. It follows the docs on the relevant FastAPI section.
CORS origins, methods and auth are hooked up to our settings and can be configured by means of env variables. For security purposes, the default settings disallow all origins, disallow all methods and disable CORS auth.
The dev compose file enables all origins and all methods.
NOTE
The staging environment needs to be updated to also enable the relevant settings in order to this to work as expected on staging.