fix(api): use permissive cors (#361)

# What ❔

<!-- What are the changes this PR brings about? -->
<!-- Example: This PR adds a PR template to the repo. -->
<!-- (For bigger PRs adding more context is appreciated) -->

## Why ❔

<!-- Why are these changes done? What goal do they contribute to? What
are the principles behind them? -->
<!-- Example: PR templates ensure PR reviewers, observers, and future
iterators are in context about the evolution of repos. -->

## Checklist

<!-- Check your PR fulfills the following items. -->
<!-- For draft PRs check the boxes as you complete them. -->

- [ ] PR title corresponds to the body of PR (we generate changelog
entries from PRs).
- [ ] Tests for the changes have been added / updated.
- [ ] Documentation comments have been added / updated.
- [ ] Code has been formatted via `cargo fmt`.

Cargo.toml

@@ -67,5 +67,7 @@ tx-sender = { path = "./tx-sender" }
 finalizer = { path = "./finalizer" }
 tokio-stream = "0.1.14"
 tokio-util = "0.7.10"
+tower-http = "0.5.1"
 url = "2.5.0"
+axum = "0.7.4"
 vlog = { path = "./vlog" }

api/Cargo.toml

@@ -7,9 +7,10 @@ edition.workspace = true
 authors.workspace = true
 
 [dependencies]
-axum = "0.7.4"
+axum = { workspace = true }
+tower-http = { workspace = true, features = ["cors"] }
 storage.workspace = true
 sqlx.workspace = true
 serde.workspace = true
 tokio.workspace = true
-ethers.workspace = true
+ethers.workspace = true

api/src/lib.rs

@@ -5,6 +5,7 @@ use ethers::types::{H256, U256};
 use serde::{Deserialize, Serialize};
 use sqlx::PgPool;
 use storage::UserWithdrawal;
+use tower_http::cors::CorsLayer;
 
 #[derive(Deserialize, Serialize, Clone)]
 struct WithdrawalRequest {
@@ -30,9 +31,11 @@ impl From<UserWithdrawal> for WithdrawalResponse {
 }
 
 pub async fn run_server(pool: PgPool) {
+    let cors_layer = CorsLayer::permissive();
     let app = Router::new()
         .route("/withdrawals/:from", get(get_withdrawals))
         .route("/health", get(health))
+        .layer(cors_layer)
         .with_state(pool);
 
     // run our app with hyper, listening globally on port 3000