Test

Author: MarceloRGonc

packages/server/api/src/app/app.ts

@@ -139,6 +139,8 @@ export const setupApp = async (
 
   await app.register(cors, {
     origin: (origin, callback) => {
+      logger.info('Allow cors request plugin');
+
       if (origin === system.get(SharedSystemProp.FRONTEND_URL)) {
         return callback(null, true);
       }

packages/server/api/src/app/flow-template/cloud-template.controller.ts

@@ -11,21 +11,43 @@ import { flowTemplateService } from './flow-template.service';
 export const cloudTemplateController: FastifyPluginAsyncTypebox = async (
   app,
 ) => {
-  const publicKey = system.get(AppSystemProp.FRONTEGG_PUBLIC_KEY);
-  const connectionPageEnabled = system.getBoolean(
-    AppSystemProp.CLOUD_CONNECTION_PAGE_ENABLED,
-  );
-
-  if (!publicKey || !connectionPageEnabled) {
-    logger.info(
-      'Missing Frontegg configuration, disabling cloud templates API',
-    );
-    return;
-  }
+  const publicKey = system.get(AppSystemProp.FRONTEGG_PUBLIC_KEY) || '';
+  // const connectionPageEnabled = system.getBoolean(
+  //   AppSystemProp.CLOUD_CONNECTION_PAGE_ENABLED,
+  // );
+  //
+  // if (!publicKey || !connectionPageEnabled) {
+  //   logger.info(
+  //     'Missing Frontegg configuration, disabling cloud templates API',
+  //   );
+  //   return;
+  // }
 
   // cloud templates are available on any origin
   app.addHook('onRequest', allowAllOriginsHookHandler);
 
+  app.options('/*', async (request, reply) => {
+    logger.info('Options request');
+
+    void reply.header(
+      'Access-Control-Allow-Origin',
+      request.headers.origin || request.headers['Ops-Origin'] || '*',
+    );
+
+    void reply.header('Access-Control-Allow-Methods', 'GET,OPTIONS');
+
+    void reply.header(
+      'Access-Control-Allow-Headers',
+      'Content-Type,Ops-Origin,Authorization',
+    );
+
+    void reply.header('Access-Control-Allow-Credentials', 'false');
+
+    if (request.method === 'OPTIONS') {
+      return void reply.status(204).send();
+    }
+  });
+
   app.get(
     '/',
     {

packages/server/api/src/app/helper/allow-all-origins-hook-handler.ts

@@ -1,10 +1,13 @@
+import { logger } from '@openops/server-shared';
 import { onRequestHookHandler } from 'fastify/types/hooks';
 
 export const allowAllOriginsHookHandler: onRequestHookHandler = (
   request,
   reply,
   done,
 ) => {
+  logger.info('Allow cors request');
+
   void reply.header(
     'Access-Control-Allow-Origin',
     request.headers.origin || request.headers['Ops-Origin'] || '*',
@@ -17,7 +20,7 @@ export const allowAllOriginsHookHandler: onRequestHookHandler = (
     'Content-Type,Ops-Origin,Authorization',
   );
 
-  void reply.header('Access-Control-Allow-Credentials', 'true');
+  void reply.header('Access-Control-Allow-Credentials', 'false');
 
   if (request.method === 'OPTIONS') {
     return void reply.status(204).send();