Adding CORS

Leandro Ferreira · Leandro Ferreira · commit 13857cd5ecf2 · 2025-11-06T15:26:47.000+01:00
diff --git a/backend/gateway/build.gradle.kts b/backend/gateway/build.gradle.kts
@@ -24,6 +24,8 @@ dependencies {
 
     implementation(project(":common:endpoints"))
 
+    implementation(libs.ktor.server.cors)
+
     implementation(libs.ktor.server.websocket)
     implementation(libs.ktor.server.cio)
     implementation(libs.logback.classic)
diff --git a/backend/gateway/src/main/kotlin/io/writeopia/api/geteway/Application.kt b/backend/gateway/src/main/kotlin/io/writeopia/api/geteway/Application.kt
@@ -1,8 +1,12 @@
 package io.writeopia.api.geteway
 
+import io.ktor.http.HttpHeaders
+import io.ktor.http.HttpMethod
 import io.ktor.server.application.Application
+import io.ktor.server.application.install
 import io.ktor.server.cio.CIO
 import io.ktor.server.engine.embeddedServer
+import io.ktor.server.plugins.cors.routing.CORS
 import io.writeopia.api.core.auth.utils.installAuth
 import io.writeopia.plugins.configureEditorSockets
 import io.writeopia.sql.WriteopiaDbBackend
@@ -24,9 +28,20 @@ fun Application.module(
     adminKey: String? = System.getenv("ADMIN_KEY")
 ) {
     println("debug: $debugMode")
+    installCORS()
     installAuth()
     configureRouting(writeopiaDb, useAi, debugMode = debugMode, adminKey = adminKey)
     configureSerialization()
     configureEditorSockets()
     configureHTTP()
 }
+
+fun Application.installCORS() {
+    install(CORS) {
+        allowHost("writeopia.io", schemes = listOf("https"))
+        allowHeader(HttpHeaders.ContentType)
+        allowHeader("X-Admin-KEY")
+        allowMethod(HttpMethod.Post)
+        allowMethod(HttpMethod.Options)
+    }
+}
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
@@ -61,6 +61,7 @@ kotlin-coroutines-reactor = { module = "org.jetbrains.kotlinx:kotlinx-coroutines
 kotlinx-coroutines-android = { module = "org.jetbrains.kotlinx:kotlinx-coroutines-android", version.ref = "kotlinxCoroutines" }
 ktor-server-auth = { module = "io.ktor:ktor-server-auth" }
 ktor-server-auth-jwt = { module = "io.ktor:ktor-server-auth-jwt" }
+ktor-server-cors = { module = "io.ktor:ktor-server-cors", version.ref = "ktor" }
 ktor-server-swagger = { module = "io.ktor:ktor-server-swagger" }
 material = { group = "com.google.android.material", name = "material", version.ref = "material" }
 kotlinx-coroutines-swing = { module = "org.jetbrains.kotlinx:kotlinx-coroutines-swing", version.ref = "kotlinxCoroutinesSwing" }
