785408 - Add 'Access-Control-Allow-Origin' to eideticker headers

Status: RESOLVED FIXED

(Testing Graveyard :: Eideticker, defect)

Description

[Benoit Girard (:BenWa)]

We need to let cleopatra fetch profiles and shared libraries from eideticker directly. Since eideticker data is all public it safe to add 'Access-Control-Allow-Origin: *'. This way we don't have to worry about where cleopatra is hosted.

Comment 1

[William Lachance (:wlach)]

(In reply to Benoit Girard (:BenWa) from comment #0)
> We need to let cleopatra fetch profiles and shared libraries from eideticker
> directly. Since eideticker data is all public it safe to add
> 'Access-Control-Allow-Origin: *'. This way we don't have to worry about
> where cleopatra is hosted.

This is more a documentation and deployment issue than a code one. But yes, I'll do this for wrla.ch (and we should be able to do this for the AWS instance we'll be migrating to eventually). When the cleopatra integration code lands in eideticker, we can document this as well.

Comment 2

[Benoit Girard (:BenWa)]

Can you add documentation for this?

Comment 3

[William Lachance (:wlach)]

(In reply to Benoit Girard (:BenWa) from comment #2)
> Can you add documentation for this?

Yup, doing so now while migrating the eideticker server. I'll mark this bug as fixed when I do.

Comment 4

[William Lachance (:wlach)]

Documented in this commit:

https://github.com/mozilla/eideticker/commit/45b3373406a98c65a84ccb3516a65c37d420d319