search

indieweb / microsub

For tracking issues on the Microsub specification
24 stars 1 forks source link

CORS #8

Open aaronpk opened 6 years ago

aaronpk commented 6 years ago

CORS headers would make it possible to build clients that do not need any server-side code of their own. Authentication would be an issue in this case, so maybe suggesting a way to implement this would be helpful.

pstuifzand commented 3 years ago

Ekster Reader (https://reader.p83.nl/) is a client-side only microsub client. When the CORS headers are set correctly on the Microsub responses it will work as expected. The authentication works as well, but also needs CORS headers on everything. At the moment the "*" value is used in the headers, but could be changed to respond with the right values for explicitly allowed clients.