logto-io / logto

🧑‍🚀 The better identity infrastructure for developers and the open-source alternative to Auth0.
https://logto.io
Mozilla Public License 2.0
8.94k stars 446 forks source link

fix(core): allow all origins for profile and verification api #6799

Closed wangsijie closed 1 week ago

wangsijie commented 1 week ago

Summary

Allow access from all origins for UserRoute, which includes /profile and /verifications.

Because thoese APIs are for end users directly.

Testing

Local tested and integration tests.

Checklist

github-actions[bot] commented 1 week ago

COMPARE TO master

Total Size Diff :chart_with_upwards_trend: +1.16 KB

Diff by File |Name|Diff| |---|---| |packages/core/src/middleware/koa-cors.test.ts|:chart_with_upwards_trend: +486 Bytes| |packages/core/src/middleware/koa-cors.ts|:chart_with_upwards_trend: +243 Bytes| |packages/core/src/routes-me/init.ts|:chart_with_upwards_trend: +2 Bytes| |packages/core/src/routes/init.ts|:chart_with_upwards_trend: +31 Bytes| |packages/integration-tests/src/tests/api/profile/index.test.ts|:chart_with_upwards_trend: +429 Bytes|