Allow preflight requests for cloud template endpoints (#1709)

Fixes OPS-3165.

<img width="1556" height="588" alt="image"
src="https://github.com/user-attachments/assets/cf8be42b-a2ee-418c-a74e-774ed655e6e4"
/>

Author: MarceloRGonc

packages/server/api/src/app/flow-template/cloud-template.controller.ts

@@ -4,7 +4,10 @@ import {
 } from '@fastify/type-provider-typebox';
 import { AppSystemProp, logger, system } from '@openops/server-shared';
 import { ALL_PRINCIPAL_TYPES, OpenOpsId } from '@openops/shared';
-import { allowAllOriginsHookHandler } from '../helper/allow-all-origins-hook-handler';
+import {
+  allowAllOriginsHookHandler,
+  registerOptionsEndpoint,
+} from '../helper/allow-all-origins-hook-handler';
 import { getVerifiedUser } from '../user-info/cloud-auth';
 import { flowTemplateService } from './flow-template.service';
 
@@ -26,6 +29,8 @@ export const cloudTemplateController: FastifyPluginAsyncTypebox = async (
   // cloud templates are available on any origin
   app.addHook('onRequest', allowAllOriginsHookHandler);
 
+  registerOptionsEndpoint(app);
+
   app.get(
     '/',
     {

packages/server/api/src/app/helper/allow-all-origins-hook-handler.ts

@@ -1,4 +1,5 @@
-import { onRequestHookHandler } from 'fastify/types/hooks';
+import { ALL_PRINCIPAL_TYPES } from '@openops/shared';
+import { FastifyInstance, onRequestHookHandler } from 'fastify';
 
 export const allowAllOriginsHookHandler: onRequestHookHandler = (
   request,
@@ -19,9 +20,20 @@ export const allowAllOriginsHookHandler: onRequestHookHandler = (
 
   void reply.header('Access-Control-Allow-Credentials', 'true');
 
-  if (request.method === 'OPTIONS') {
-    return void reply.status(204).send();
-  }
-
   done();
 };
+
+export function registerOptionsEndpoint(app: FastifyInstance) {
+  app.options(
+    '*',
+    {
+      config: {
+        allowedPrincipals: ALL_PRINCIPAL_TYPES,
+        skipAuth: true,
+      },
+    },
+    (_request, reply) => {
+      return reply.status(204).send();
+    },
+  );
+}

packages/server/api/src/app/user-info/user-info.module.ts

@@ -1,7 +1,10 @@
 import { FastifyPluginAsyncTypebox } from '@fastify/type-provider-typebox';
 import { AppSystemProp, logger, system } from '@openops/server-shared';
 import { ALL_PRINCIPAL_TYPES } from '@openops/shared';
-import { allowAllOriginsHookHandler } from '../helper/allow-all-origins-hook-handler';
+import {
+  allowAllOriginsHookHandler,
+  registerOptionsEndpoint,
+} from '../helper/allow-all-origins-hook-handler';
 import { getVerifiedUser } from './cloud-auth';
 
 export const userInfoModule: FastifyPluginAsyncTypebox = async (app) => {
@@ -23,6 +26,7 @@ export const userInfoController: FastifyPluginAsyncTypebox = async (app) => {
 
   // user-info is available on any origin
   app.addHook('onRequest', allowAllOriginsHookHandler);
+  registerOptionsEndpoint(app);
 
   app.get(
     '/',