[AC-1971] Add SwaggerUI to CORS policy (bitwarden#3583)

* Allow SwaggerUI authorize requests if in development
peckercode · Dec 19, 2023 · af7811b · af7811b
1 parent c2d36cb
commit af7811b
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/src/Identity/Startup.cs b/src/Identity/Startup.cs
@@ -213,7 +213,11 @@ public void Configure(
         app.UseRouting();
 
         // Add Cors
-        app.UseCors(policy => policy.SetIsOriginAllowed(o => CoreHelpers.IsCorsOriginAllowed(o, globalSettings))
+        app.UseCors(policy => policy.SetIsOriginAllowed(o =>
+                CoreHelpers.IsCorsOriginAllowed(o, globalSettings) ||
+
+                // If development - allow requests from the Swagger UI so it can authorize
+                (Environment.IsDevelopment() && o == globalSettings.BaseServiceUri.Api))
             .AllowAnyMethod().AllowAnyHeader().AllowCredentials());
 
         // Add current context