fix: EODAG_CORS_ALLOWED_ORIGINS env var usage

CS-SI · Apr 7, 2023 · e859544 · e859544
1 parent 2ebc140
commit e859544
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 3 deletions.
diff --git a/eodag/cli.py b/eodag/cli.py
@@ -622,7 +622,11 @@ def serve_rpc(ctx, host, port, conf):
     server.serve()
 
 
-@eodag.command(help="Start eodag HTTP server")
+@eodag.command(
+    help="Start eodag HTTP server\n\n"
+    "Set EODAG_CORS_ALLOWED_ORIGINS environment variable to configure Cross-Origin Resource Sharing allowed origins as "
+    "comma-separated URLs (e.g. 'http://somewhere,htttp://somewhere.else')."
+)
 @click.option(
     "-f",
     "--config",

diff --git a/eodag/rest/server.py b/eodag/rest/server.py
@@ -157,10 +157,11 @@ def eodag_openapi():
 app.openapi = eodag_openapi
 
 # Cross-Origin Resource Sharing
-origins = ["*"]
+allowed_origins = os.getenv("EODAG_CORS_ALLOWED_ORIGINS")
+allowed_origins_list = allowed_origins.split(",") if allowed_origins else []
 app.add_middleware(
     CORSMiddleware,
-    allow_origins=origins,
+    allow_origins=allowed_origins_list,
     allow_credentials=True,
     allow_methods=["*"],
     allow_headers=["*"],