Merge pull request #104 from drivergroup/zsmith/reject-corsv1.8.2

Respond with correct cors headers for all rejections

1 files changed, 19 insertions, 1 deletions

diff --git a/src/main/resources/reference.conf b/src/main/resources/reference.conf
index 16dcfda..74ad206 100644
--- a/src/main/resources/reference.conf
+++ b/src/main/resources/reference.conf
@@ -2,7 +2,7 @@
 # Default settings for driver core. Any settings defined by users of #
 # this library will take precedence. See the documentation of the    #
 # Typesafe Config Library (https://github.com/lightbend/config) for  #
-# more information.						     #
+# more information.                                                  #
 ######################################################################
 
 # This scope is for general settings related to the execution of a
@@ -10,6 +10,24 @@
 application {
   baseUrl: "localhost:8080"
   environment: "local_testing"
+
+  cors {
+    allowedMethods: ["GET", "PUT", "POST", "PATCH", "DELETE", "OPTIONS"]
+    allowedOrigins: [
+      {
+        scheme: http
+        hostSuffix: localhost
+      },
+      {
+        scheme: https
+        hostSuffix: driver.xyz
+      },
+      {
+        scheme: https
+        hostSuffix: driver.network
+      }
+    ]
+  }
 }
 
 # Settings about the auto-generated REST API documentation.