Support CORS

[njordhov]

I am experimenting with accessing Lightning Charge directly from a web browser locally without server proxying, but quickly run into CORS issues.

It would be great if Lightning Charge enabled CORS, e.g. by using the cors middleware in app.js:

app.use(require('cors')())

[shesek]

Are you sure you want to access Lightning Charge directly from the web browsers? This would give clients the ability to list all the invoices ever created by the lightning charge instance, their status, their description, associated metadata, etc.

Typically, you would have some server-side code that talks with lightning charge and exposes a more restricted API to the outside world.

[njordhov]

I'd like accessing Lightning Charge from code in a web browser on the same host as lightning charge (or with privileged access). This doesn't imply providing unrestricted access from the outside world.

[shesek]

Implemented in 37af973