From 55a31649aee39169ffb28491f35d3cf03d8dcb9a Mon Sep 17 00:00:00 2001
From: Sebastian Pravda <sebastian.pravda@gmail.com>
Date: Wed, 14 Dec 2022 18:31:31 +0100
Subject: [PATCH] feat: CORS in production

---
 api/src/lib.rs | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/api/src/lib.rs b/api/src/lib.rs
index bb0696f..bb1b2d7 100644
--- a/api/src/lib.rs
+++ b/api/src/lib.rs
@@ -47,7 +47,16 @@ impl Fairing for CORS {
 
     #[cfg(not(debug_assertions))]
     async fn on_response<'r>(&self, _request: &'r Request<'_>, response: &mut Response<'r>) {
-        // TODO
+        response.set_header(Header::new(
+            "Access-Control-Allow-Origin",
+            "https://portfolio.ssps.cz", // TODO: UPRAVIT NA PRODUKČNÍ URL!!
+        ));
+        response.set_header(Header::new(
+            "Access-Control-Allow-Methods",
+            "POST, GET, OPTIONS, DELETE",
+        ));
+        response.set_header(Header::new("Access-Control-Allow-Headers", "content-type"));
+        response.set_header(Header::new("Access-Control-Allow-Credentials", "true"));
     }
 }