fix: EODAG_CORS_ALLOWED_ORIGINS env var usage

CS-SI · Apr 18, 2023 · 65c31a3 · 65c31a3
1 parent 03848e7
commit 65c31a3
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 3 deletions.
diff --git a/docker-compose.yml b/docker-compose.yml
@@ -21,6 +21,7 @@ services:
       dockerfile: docker/stac-server.dockerfile
     environment:
       - "EODAG_LOGGING=${EODAG_LOGGING}"
+      - "EODAG_CORS_ALLOWED_ORIGINS=http://127.0.0.1:5001"
     container_name: stac_server
     restart: unless-stopped
     networks:

diff --git a/eodag/cli.py b/eodag/cli.py
@@ -622,7 +622,11 @@ def serve_rpc(ctx, host, port, conf):
     server.serve()
 
 
-@eodag.command(help="Start eodag HTTP server")
+@eodag.command(
+    help="Start eodag HTTP server\n\n"
+    "Set EODAG_CORS_ALLOWED_ORIGINS environment variable to configure Cross-Origin Resource Sharing allowed origins as "
+    "comma-separated URLs (e.g. 'http://somewhere,htttp://somewhere.else')."
+)
 @click.option(
     "-f",
     "--config",

diff --git a/eodag/rest/server.py b/eodag/rest/server.py
@@ -157,10 +157,11 @@ def eodag_openapi():
 app.openapi = eodag_openapi
 
 # Cross-Origin Resource Sharing
-origins = ["*"]
+allowed_origins = os.getenv("EODAG_CORS_ALLOWED_ORIGINS")
+allowed_origins_list = allowed_origins.split(",") if allowed_origins else []
 app.add_middleware(
     CORSMiddleware,
-    allow_origins=origins,
+    allow_origins=allowed_origins_list,
     allow_credentials=True,
     allow_methods=["*"],
     allow_headers=["*"],