daemon: add CORS middleware

Author: alessio-perugini

cmd/arduino-app-cli/daemon.go

@@ -12,6 +12,7 @@ import (
 	"github.com/arduino/arduino-app-cli/pkg/httprecover"
 
 	dockerClient "github.com/docker/docker/client"
+	"github.com/jub0bs/cors"
 	"github.com/spf13/cobra"
 )
 
@@ -43,9 +44,36 @@ func httpHandler(ctx context.Context, dockerClient *dockerClient.Client, daemonP
 	slog.Info("Starting HTTP server", slog.String("address", ":"+daemonPort))
 	apiSrv := api.NewHTTPRouter(dockerClient, Version)
 
+	corsMiddlware, err := cors.NewMiddleware(
+		cors.Config{
+			Origins: []string{
+				"wails://wails.localhost:34115",
+				"http://localhost:*", "https://localhost:*",
+			},
+			Methods: []string{
+				http.MethodGet,
+				http.MethodPost,
+				http.MethodPut,
+				http.MethodOptions,
+				http.MethodDelete,
+				http.MethodPatch,
+			},
+			RequestHeaders: []string{
+				"Accept",
+				"Authorization",
+				"Content-Type",
+			},
+			MaxAgeInSeconds: 86400,
+			ResponseHeaders: []string{},
+		},
+	)
+	if err != nil {
+		panic(err)
+	}
+
 	httpSrv := http.Server{
 		Addr:              ":" + daemonPort,
-		Handler:           httprecover.RecoverPanic(apiSrv),
+		Handler:           httprecover.RecoverPanic(corsMiddlware.Wrap(apiSrv)),
 		ReadHeaderTimeout: 60 * time.Second,
 	}
 	go func() {

go.mod

@@ -22,6 +22,8 @@ require (
 	gopkg.in/yaml.v3 v3.0.1
 )
 
+require github.com/jub0bs/cors v0.5.9 // indirect
+
 require (
 	dario.cat/mergo v1.0.0 // indirect
 	fortio.org/safecast v1.0.0 // indirect

go.sum

@@ -284,6 +284,8 @@ github.com/jstemmer/go-junit-report v0.0.0-20190106144839-af01ea7f8024/go.mod h1
 github.com/jstemmer/go-junit-report v0.9.1/go.mod h1:Brl9GWCQeLvo8nXZwPNNblvFj/XSXhF0NWZEnDohbsk=
 github.com/jtolds/gls v4.20.0+incompatible h1:xdiiI2gbIgH/gLH7ADydsJ1uDOEzR8yvV7C0MuV77Wo=
 github.com/jtolds/gls v4.20.0+incompatible/go.mod h1:QJZ7F/aHp+rZTRtaJ1ow/lLfFfVYBRgL+9YlvaHOwJU=
+github.com/jub0bs/cors v0.5.9 h1:DZcrSGvh8xiDT2OjWPCOw6JGNQsy8FhgWk8EZgEvbTM=
+github.com/jub0bs/cors v0.5.9/go.mod h1:nvEts2Hrlwj3bHxTAXX0oglPQ0V4P+Ymq1z33ks77Z8=
 github.com/juju/errors v1.0.0 h1:yiq7kjCLll1BiaRuNY53MGI0+EQ3rF6GB+wvboZDefM=
 github.com/juju/errors v1.0.0/go.mod h1:B5x9thDqx0wIMH3+aLIMP9HjItInYWObRovoCFM5Qe8=
 github.com/kevinburke/ssh_config v1.2.0 h1:x584FjTGwHzMwvHx18PXxbBVzfnxogHaAReU4gf13a4=
@@ -857,8 +859,8 @@ honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWh
 honnef.co/go/tools v0.0.1-2019.2.3/go.mod h1:a3bituU0lyd329TUQxRnasdCoJDkEUEAqEt0JzvZhAg=
 honnef.co/go/tools v0.0.1-2020.1.3/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k=
 honnef.co/go/tools v0.0.1-2020.1.4/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k=
+mkuznets.com/go/tabwriter v0.1.2 h1:qU4i7b1O3aEc68qFX2FLrCpcRG9Htas85gOdZyZJFfs=
+mkuznets.com/go/tabwriter v0.1.2/go.mod h1:shVL+F79yfTqgB7IzYqNo0QOgxdRYrhHsOA4ANHo4j8=
 rsc.io/binaryregexp v0.2.0/go.mod h1:qTv7/COck+e2FymRvadv62gMdZztPaShugOCi3I+8D8=
 rsc.io/quote/v3 v3.1.0/go.mod h1:yEA65RcK8LyAZtP9Kv3t0HmxON59tX3rD+tICJqUlj0=
 rsc.io/sampler v1.3.0/go.mod h1:T1hPZKmBbMNahiBKFy5HrXp6adAjACjK9JXDnKaTXpA=
-mkuznets.com/go/tabwriter v0.1.2 h1:qU4i7b1O3aEc68qFX2FLrCpcRG9Htas85gOdZyZJFfs=
-mkuznets.com/go/tabwriter v0.1.2/go.mod h1:shVL+F79yfTqgB7IzYqNo0QOgxdRYrhHsOA4ANHo4j8=