feat: improve cors settings

CarlosPavajeau · Jul 15, 2021 · 6fe6b6c · 6fe6b6c
1 parent 11775b4
commit 6fe6b6c
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/src/Armory.Api/Extensions/Infrastructure.cs b/src/Armory.Api/Extensions/Infrastructure.cs
@@ -159,7 +159,8 @@ public static IApplicationBuilder UseSwaggerDocumentation(this IApplicationBuild
         public static IApplicationBuilder ConfigureCors(this IApplicationBuilder app, IConfiguration configuration)
         {
             var allowedUrls = configuration.GetSection("AllowedUrls").Get<List<string>>();
-            app.UseCors(c => c.WithOrigins(allowedUrls.ToArray()).AllowAnyHeader().AllowAnyMethod());
+            app.UseCors(c =>
+                c.WithOrigins(allowedUrls.ToArray()).AllowAnyHeader().AllowAnyMethod().AllowCredentials());
 
             return app;
         }

diff --git a/src/Armory.Api/Startup.cs b/src/Armory.Api/Startup.cs
@@ -32,15 +32,14 @@ public void ConfigureServices(IServiceCollection services)
         // This method gets called by the runtime. Use this method to configure the HTTP request pipeline.
         public void Configure(IApplicationBuilder app, IWebHostEnvironment env, RoleManager<ArmoryRole> roleManager)
         {
-            app.ConfigureCors(Configuration);
-
             if (env.IsDevelopment())
             {
                 app.UseDeveloperExceptionPage();
                 app.UseSwaggerDocumentation();
             }
 
             app.UseHttpsRedirection();
+            app.ConfigureCors(Configuration);
 
             app.UseRouting();