thecore_api 1.1.19 → 1.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: eb3f1313669274d375e66ac65d076013046d8f1e
-  data.tar.gz: 251e902eb7f430c4a9f8d75cf2df6db752b66696
+  metadata.gz: 4150ac295cc272aad66fe0144cc5fe7a675bd3eb
+  data.tar.gz: 964bf8967f023d225b7d634cf6ccbfa38fee2542
 SHA512:
-  metadata.gz: c8a4ef6afc9ba184054446ce343946cd233a5b9e15c7a3f7910ea6efbdc7518a01f0870c9851aae3a99393109a20db6b35f18b0e2f0a90e9692cd2be5f1ffcca
-  data.tar.gz: 29a425758f62d2b10c56a326538adebec7b4e4b7c8f0426ddc18c75eca36a28c7b0a72e1459d4dd78f2eb963654618c0044f959efe6c96dc9b13acdccfa20c68
+  metadata.gz: 3df94866c03df4fb0aa822ec0ecfd83e349c9e3cb23d91ca4124adf0ee649ab09c34c927e52024a83b687b476ea7801311d0c7e3ac685b0563002c1b15b50026
+  data.tar.gz: 12efbcbef6f5ad1bf09081ab95beb773f40c19c73bb0ac4e05221e81b5ee06875c5138a1f551e39c690937f8d9e8fc936fd99b706062982bbd551e477a4a22fb

data/config/initializers/cors_api_thecore.rb

@@ -1,7 +1,15 @@
 # config/initializers/cors.rb
 Rails.application.config.middleware.insert_before 0, Rack::Cors do
   allow do
-    origins '*'
+    origins { |source, env| 
+      # No settings => '*'
+      allowed_origins = Settings.ns('api').allowed_origins
+      return true if allowed_origins.blank?
+      allowed_origins.split(",").each do |domain|
+        return true if source.end_with?(domain.strip)
+      end
+      return false 
+    }
     resource '*',
       headers: :any,
       methods: %i(get post put patch delete options head)

data/db/migrate/20181120234856_add_allowed_origins_to_settings.rb

@@ -0,0 +1,5 @@
+class AddAllowedOriginsToSettings < ActiveRecord::Migration[5.2]
+  def change
+    Settings.ns('api').allowed_origins = "localhost:3000,127.0.0.1:3000,localhost:8081"
+  end
+end

data/lib/thecore_api/version.rb

@@ -1,3 +1,3 @@
 module ThecoreApi
-  VERSION = "1.1.19".freeze
+  VERSION = "1.2.0".freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: thecore_api
 version: !ruby/object:Gem::Version
-  version: 1.1.19
+  version: 1.2.0
 platform: ruby
 authors:
 - Gabriele Tassoni
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-11-18 00:00:00.000000000 Z
+date: 2018-11-20 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: thecore
@@ -96,6 +96,7 @@ files:
 - config/initializers/cors_api_thecore.rb
 - config/initializers/wrap_parameters.rb
 - config/routes.rb
+- db/migrate/20181120234856_add_allowed_origins_to_settings.rb
 - lib/tasks/thecore_api_tasks.rake
 - lib/thecore_api.rb
 - lib/thecore_api/engine.rb
@@ -130,6 +131,7 @@ files:
 - test/dummy/config/locales/en.yml
 - test/dummy/config/routes.rb
 - test/dummy/config/secrets.yml
+- test/dummy/log/development.log
 - test/dummy/public/404.html
 - test/dummy/public/422.html
 - test/dummy/public/500.html
@@ -177,6 +179,7 @@ test_files:
 - test/dummy/public/favicon.ico
 - test/dummy/public/422.html
 - test/dummy/Rakefile
+- test/dummy/log/development.log
 - test/dummy/config.ru
 - test/dummy/README.rdoc
 - test/dummy/config/locales/en.yml