feat: add configurable transport-independent CORS policy

2026-09-26 19:53:28 +08:00
parent 9fade3bedb
commit 800974cfff
33 changed files with 1645 additions and 23 deletions
--- a/examples/cors/config.yaml
+++ b/examples/cors/config.yaml
@@ -0,0 +1,10 @@
+server:
+  cors:
+    enabled: true
+    allowedOrigins:
+      - "${WEB_ORIGIN:-https://web.example}"
+    allowedMethods: [GET, POST]
+    allowedHeaders: [Authorization, Content-Type]
+    exposedHeaders: [X-Request-ID]
+    allowCredentials: false
+    maxAge: 10m