From 7a867cbc5ec9e28d649684440569ed2e723322cd Mon Sep 17 00:00:00 2001
From: Frank Schubert <fronk@fronk.at>
Date: Thu, 15 Sep 2022 20:01:14 +0200
Subject: [PATCH] allowing requests without Origin header

---
 application/Api/v1/AddressdbApicontroller.php | 2 +-
 application/Api/v1/PreorderApicontroller.php  | 2 +-
 public/docs/preorder-api.yaml                 | 1 +
 3 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/application/Api/v1/AddressdbApicontroller.php b/application/Api/v1/AddressdbApicontroller.php
index fb4a3e4ec..7e3866de5 100644
--- a/application/Api/v1/AddressdbApicontroller.php
+++ b/application/Api/v1/AddressdbApicontroller.php
@@ -11,7 +11,7 @@ class AddressdbApicontroller extends mfBaseApicontroller {
     $this->addRoute("/addressdb/findZip", "findZip", "POST");
     $this->addRoute("/addressdb/findCity", "findCity", "POST");
     
-    $this->allowMissingOrigin = false;
+    $this->allowMissingOrigin = true;
   }
   
   protected function authenticated() {
diff --git a/application/Api/v1/PreorderApicontroller.php b/application/Api/v1/PreorderApicontroller.php
index f05cbe86b..324fd3cf6 100644
--- a/application/Api/v1/PreorderApicontroller.php
+++ b/application/Api/v1/PreorderApicontroller.php
@@ -10,7 +10,7 @@ class PreorderApicontroller extends mfBaseApicontroller {
     
     $this->addRoute("/preorder", "submitPreorder", "POST");
     
-    $this->allowMissingOrigin = false;
+    $this->allowMissingOrigin = true;
   }
   
   protected function authenticated() {
diff --git a/public/docs/preorder-api.yaml b/public/docs/preorder-api.yaml
index e3e9eaeac..f9affc4b8 100644
--- a/public/docs/preorder-api.yaml
+++ b/public/docs/preorder-api.yaml
@@ -10,6 +10,7 @@ info:
     url: http://www.apache.org/licenses/LICENSE-2.0.html
   version: 1.0.0
 servers:
+  - url: https://thetool-test.xinon.at/api/v1
   - url: https://thetool.xinon.at/api/v1
 tags:
   - name: addressdb