Merge pull request #6 from commitdev/add-cors

Add a very open cors policy to allow the frontend to hit endpoints

Author: bmonkman

README.md

@@ -1,2 +1,4 @@
 # commit0-deployable-backend
-A commit0 module containing a backend that can be deployed to the infrastructure set up using commit0-aws-eks-stack
+A commit0 module containing a backend that can be deployed to the infrastructure set up using commit0-aws-eks-stack.
+
+After rendering the template with the `zero` tool, check it into github and run `go mod init github.com/<path on github>`

main.go

@@ -12,6 +12,8 @@ import (
 	"strconv"
 	"syscall"
 	"time"
+
+	"github.com/rs/cors"
 )
 
 const gracefulShutdownTimeout = 10 * time.Second
@@ -37,8 +39,11 @@ func main() {
 		fmt.Fprintf(w, "Hello, %q", html.EscapeString(r.URL.Path))
 	})
 
+	// Change this to a more strict CORS policy
+	handler := cors.Default().Handler(r)
+
 	serverAddress := fmt.Sprintf("0.0.0.0:%s", os.Getenv("SERVER_PORT"))
-	server := &http.Server{Addr: serverAddress, Handler: r}
+	server := &http.Server{Addr: serverAddress, Handler: handler}
 
 	// Watch for signals to handle graceful shutdown
 	stop := make(chan os.Signal, 1)