Anon Ray
199a24d050
add support for multiple domains in cors config ( close #1436 ) ( #1536 )
...
Support for multiple domains (as CSV) in the `--cors-domain` flag and `HASURA_GRAPHQL_CORS_DOMAIN` env var.
Following are all valid configurations (must include scheme and optional port):
```shell
HASURA_GRAPHQL_CORS_DOMAIN="https://*.foo.bar.com:8080 "
HASURA_GRAPHQL_CORS_DOMAIN="https://*.foo.bar.com , http://*.localhost , https://example.com "
HASURA_GRAPHQL_CORS_DOMAIN="*"
HASURA_GRAPHQL_CORS_DOMAIN="http://example.com , http://*.localhost , http://localhost:3000 , https://*.foo.bar.com , https://foo.bar.com "
```
**Note**: top-level domains are not considered as part of wildcard domains. You have to add them separately. E.g - `https://*.foo.com ` doesn't include `https://foo.com `.
The default (if the flag or env var is not specified) is `*`. Which means CORS headers are sent for all domains.
2019-02-14 11:28:38 +05:30
