Test

Author: MarceloRGonc

packages/server/api/src/app/flow-template/cloud-template.controller.ts

@@ -4,7 +4,9 @@ import {
 } from '@fastify/type-provider-typebox';
 import { AppSystemProp, logger, system } from '@openops/server-shared';
 import { ALL_PRINCIPAL_TYPES, OpenOpsId } from '@openops/shared';
-import { allowAllOriginsHookHandler } from '../helper/allow-all-origins-hook-handler';
+import {
+  allowAllOriginsHookHandlerTest,
+} from '../helper/allow-all-origins-hook-handler';
 import { getVerifiedUser } from '../user-info/cloud-auth';
 import { flowTemplateService } from './flow-template.service';
 
@@ -23,8 +25,20 @@ export const cloudTemplateController: FastifyPluginAsyncTypebox = async (
   //   return;
   // }
 
+  // app.addHook('onRequest', allowAllOriginsHookHandler);
+
   // cloud templates are available on any origin
-  app.addHook('onRequest', allowAllOriginsHookHandler);
+  app.options(
+    '/*',
+    {
+      config: {
+        allowedPrincipals: ALL_PRINCIPAL_TYPES,
+        skipAuth: true,
+        cors: false,
+      },
+    },
+    allowAllOriginsHookHandlerTest,
+  );
 
   app.get(
     '/',

packages/server/api/src/app/helper/allow-all-origins-hook-handler.ts

@@ -1,4 +1,5 @@
 import { logger } from '@openops/server-shared';
+import { FastifyReply, FastifyRequest } from 'fastify';
 import { onRequestHookHandler } from 'fastify/types/hooks';
 
 export const allowAllOriginsHookHandler: onRequestHookHandler = (
@@ -27,3 +28,26 @@ export const allowAllOriginsHookHandler: onRequestHookHandler = (
 
   done();
 };
+
+export const allowAllOriginsHookHandlerTest = (
+  request: FastifyRequest,
+  reply: FastifyReply,
+) => {
+  void reply.header(
+    'Access-Control-Allow-Origin',
+    request.headers.origin || request.headers['ops-origin'] || '*',
+  );
+
+  void reply.header('Access-Control-Allow-Methods', 'GET,OPTIONS');
+
+  void reply.header(
+    'Access-Control-Allow-Headers',
+    'Content-Type,Ops-Origin,Authorization',
+  );
+
+  void reply.header('Access-Control-Allow-Credentials', 'true');
+
+  logger.info('Returning 204 No Content for CORS preflight request.');
+
+  return reply.status(204).send();
+};

packages/server/api/src/app/user-info/user-info.module.ts

@@ -1,7 +1,10 @@
 import { FastifyPluginAsyncTypebox } from '@fastify/type-provider-typebox';
 import { AppSystemProp, logger, system } from '@openops/server-shared';
 import { ALL_PRINCIPAL_TYPES } from '@openops/shared';
-import { allowAllOriginsHookHandler } from '../helper/allow-all-origins-hook-handler';
+import {
+  allowAllOriginsHookHandler,
+  allowAllOriginsHookHandlerTest,
+} from '../helper/allow-all-origins-hook-handler';
 import { getVerifiedUser } from './cloud-auth';
 
 export const userInfoModule: FastifyPluginAsyncTypebox = async (app) => {
@@ -22,7 +25,19 @@ export const userInfoController: FastifyPluginAsyncTypebox = async (app) => {
   }
 
   // user-info is available on any origin
-  app.addHook('onRequest', allowAllOriginsHookHandler);
+  // app.addHook('onRequest', allowAllOriginsHookHandler);
+
+  app.options(
+    '/*',
+    {
+      config: {
+        allowedPrincipals: ALL_PRINCIPAL_TYPES,
+        skipAuth: true,
+        cors: false,
+      },
+    },
+    allowAllOriginsHookHandlerTest,
+  );
 
   app.get(
     '/',

packages/server/api/types/fastify.d.ts

@@ -23,6 +23,7 @@ declare module 'fastify' {
     allowedPrincipals?: PrincipalType[];
     rawBody?: boolean;
     skipAuth?: boolean;
+    cors?: boolean;
     scope?: EndpointScope;
     permission?: Permission;
   }