Luca/thetool
1
0
Fork 0
Code Issues 5 Pull Requests 5 Actions Packages Projects Releases Wiki Activity

returning CORS Allow-Origin when returning Unauthorized

Browse Source
This commit is contained in:
Frank Schubert
2022-12-01 16:46:14 +01:00
parent 88b966e2ed
commit 5ccd74dc3c
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
lib/mvcfronk/mfBase/mfBaseApicontroller.php
+8
View File
@@ -123,6 +123,14 @@ class mfBaseApicontroller {
$me->loadByApikey($key); $me->loadByApikey($key);
if(!$me->id) { if(!$me->id) {
header("Access-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS");
header("Access-Control-Allow-Headers: X-Api-Key");
if(preg_match('#^(https?)://([^/:]+)(:\d+)?/?$#i', $this->headers['origin'], $m)) {
$origin_proto = $m[1];
$origin_hostname = $m[2];
header("Access-Control-Allow-Origin: ".$origin_proto."://".$origin_hostname);
}
$this->return(mfResponse::Unauthorized(['message' => "API key missing or invalid"])); $this->return(mfResponse::Unauthorized(['message' => "API key missing or invalid"]));
} }
$_SESSION[MFAPPNAME.'_username'] = $me->username; $_SESSION[MFAPPNAME.'_username'] = $me->username;