Extends support for CORS in CrudApiPlugin to action-level auth (#1199)

waldekmastykarz · web-flow · commit fbe83d139030 · 2025-05-22T07:59:41.000+02:00
diff --git a/dev-proxy-plugins/Mocks/CrudApiPlugin.cs b/dev-proxy-plugins/Mocks/CrudApiPlugin.cs
@@ -218,7 +218,8 @@ private void AddCORSHeaders(Request request, List<HttpHeader> headers)
 
         headers.Add(new HttpHeader("access-control-allow-origin", origin));
 
-        if (_configuration.EntraAuthConfig is not null)
+        if (_configuration.EntraAuthConfig is not null ||
+            _configuration.Actions.Any(a => a.Auth == CrudApiAuthType.Entra))
         {
             headers.Add(new HttpHeader("access-control-allow-headers", "authorization"));
         }

Original file line number	Diff line number	Diff line change
`@@ -218,7 +218,8 @@ private void AddCORSHeaders(Request request, List<HttpHeader> headers)`
`218`	`218`
`219`	`219`	`headers.Add(new HttpHeader("access-control-allow-origin", origin));`
`220`	`220`
`221`		`- if (_configuration.EntraAuthConfig is not null)`
	`221`	`+ if (_configuration.EntraAuthConfig is not null \|\|`
	`222`	`+ _configuration.Actions.Any(a => a.Auth == CrudApiAuthType.Entra))`
`222`	`223`	`{`
`223`	`224`	`headers.Add(new HttpHeader("access-control-allow-headers", "authorization"));`
`224`	`225`	`}`