Applied CORS fix

2026-10-24 14:58:55 +02:00
parent c43e18f184
commit 1233f15b91
2 changed files with 26 additions and 1 deletions
@@ -116,7 +116,30 @@ builder.Services.AddCors(options =>
 {
    options.AddPolicy(CorsPolicy, policy =>
    {
-        policy.WithOrigins(allowedOrigins)
+        policy.SetIsOriginAllowed(origin =>
+              {
+                  if (string.IsNullOrWhiteSpace(origin)) return false;
+                  var clean = origin.TrimEnd('/');
+                  if (allowedOrigins.Any(a => string.Equals(a.TrimEnd('/'), clean, StringComparison.OrdinalIgnoreCase)))
+                      return true;
+
+                  try
+                  {
+                      var host = new Uri(origin).Host;
+                      if (host.EndsWith("khongisa.co.za", StringComparison.OrdinalIgnoreCase) ||
+                          host.Equals("localhost", StringComparison.OrdinalIgnoreCase) ||
+                          host.Equals("127.0.0.1", StringComparison.OrdinalIgnoreCase))
+                      {
+                          return true;
+                      }
+                  }
+                  catch
+                  {
+                      // ignore parse failure
+                  }
+
+                  return false;
+              })
              .AllowAnyHeader()
              .AllowAnyMethod()
              .AllowCredentials();
@@ -131,6 +154,7 @@ var scheduler = await schedulerFactory.GetScheduler();
 if (scheduler!.Status != SchedulerStatus.Running)
    await scheduler.Start();

+app.UseCors(CorsPolicy);
 app.UseHsts();
 app.UseHttpsRedirection();
 app.UseRouting();