From ad05b33cfb75289d2ce13356c3e6d69e54b8f0b0 Mon Sep 17 00:00:00 2001
From: Jean-Paul Calderone <exarkun@twistedmatrix.com>
Date: Thu, 21 Nov 2019 15:40:59 -0500
Subject: [PATCH] Apply simple CORS rules with Network.Wai CORS middleware.
A POST to the charge endpoint is not actually a simple request according to
the CORS spec but this demonstrates that the CORS middleware at least fits in
place.
The next step is to replace simpleCors with a policy that's compatible with
use of our endpoint.
---
PaymentServer.cabal | 1 +
src/PaymentServer/Server.hs | 10 +++++++++-
2 files changed, 10 insertions(+), 1 deletion(-)
diff --git a/PaymentServer.cabal b/PaymentServer.cabal
index b6cd94e..bd1e969 100644
--- a/PaymentServer.cabal
+++ b/PaymentServer.cabal
@@ -30,6 +30,7 @@ library
, servant-server
, wai
, wai-extra
+ , wai-cors
, data-default
, warp
, warp-tls
diff --git a/src/PaymentServer/Server.hs b/src/PaymentServer/Server.hs
index feef0b0..4478a35 100644
--- a/src/PaymentServer/Server.hs
+++ b/src/PaymentServer/Server.hs
@@ -7,6 +7,9 @@ module PaymentServer.Server
( paymentServerApp
) where
+import Network.Wai.Middleware.Cors
+ ( simpleCors
+ )
import Servant
( Proxy(Proxy)
, Server
@@ -48,4 +51,9 @@ paymentServerAPI = Proxy
-- | Create a Servant Application which serves the payment server API using
-- the given database.
paymentServerApp :: VoucherDatabase d => StripeSecretKey -> Issuer -> d -> Application
-paymentServerApp key issuer = serve paymentServerAPI . paymentServer key issuer
+paymentServerApp key issuer =
+ let
+ app = serve paymentServerAPI . paymentServer key issuer
+ cors = simpleCors
+ in
+ cors . app
--
GitLab