oidc: enable CORS for internal apps

2024-04-11 15:51:20 +02:00
parent a79486275e
commit 36ab5800a3
1 changed files with 6 additions and 0 deletions
--- a/src/oidc.js
+++ b/src/oidc.js
@@ -801,6 +801,12 @@ async function start() {
                return false;
            }
        },
+        clientBasedCORS(ctx, origin, client) {
+            // allow CORS for clients where at least the origin matches where we redirect back to
+            if (client.redirectUris.find((u) => u.indexOf(origin) === 0)) return true;
+
+            return false;
+        },
        conformIdTokenClaims: false,
        // https://github.com/panva/node-oidc-provider/blob/main/recipes/skip_consent.md
        loadExistingGrant: async function (ctx) {