add CORS config to api gw

guardian · Mar 18, 2024 · 9211648 · 9211648
1 parent 8799751
commit 9211648
Showing 1 changed file with 14 additions and 6 deletions.
diff --git a/cdk/lib/gateway.ts b/cdk/lib/gateway.ts
@@ -1,12 +1,12 @@
 import {Construct} from "constructs";
-import type {GuStack, GuStackProps} from "@guardian/cdk/lib/constructs/core";
-import {HttpApi, VpcLink} from "aws-cdk-lib/aws-apigatewayv2"
-import {HttpAlbIntegration, HttpUrlIntegration} from "aws-cdk-lib/aws-apigatewayv2-integrations";
-import {IApplicationLoadBalancer, IListener} from "aws-cdk-lib/aws-elasticloadbalancingv2";
-import {ISecurityGroup, IVpc, Peer, Port, SecurityGroup, SubnetSelection} from "aws-cdk-lib/aws-ec2";
+import type {GuStack} from "@guardian/cdk/lib/constructs/core";
+import {CorsHttpMethod, HttpApi, VpcLink} from "aws-cdk-lib/aws-apigatewayv2"
+import {HttpAlbIntegration} from "aws-cdk-lib/aws-apigatewayv2-integrations";
+import {IApplicationLoadBalancer} from "aws-cdk-lib/aws-elasticloadbalancingv2";
+import {ISecurityGroup, IVpc, Peer, Port, SubnetSelection} from "aws-cdk-lib/aws-ec2";
 import {GuSecurityGroup} from "@guardian/cdk/lib/constructs/ec2";
-import {CfnUsagePlan, UsagePlan} from "aws-cdk-lib/aws-apigateway";
 import {IApplicationListener} from "aws-cdk-lib/aws-elasticloadbalancingv2/lib/alb/application-listener";
+import {Duration} from "aws-cdk-lib";
 
 interface HttpGatewayProps {
     stage: "CODE"|"PROD";
@@ -15,6 +15,7 @@ interface HttpGatewayProps {
     backendListener: IApplicationListener;
     backendLbIncomingSg: ISecurityGroup;
     lbDomainName: string;
+    deployedUrl: string;
     subnets: SubnetSelection;
     vpc: IVpc;
 }
@@ -50,6 +51,13 @@ export class HttpGateway extends Construct {
                 vpcLink,
                 secureServerName: props.lbDomainName,
             }),
+            corsPreflight: {
+                allowOrigins: ['http://localhost:8081', props.deployedUrl],
+                allowMethods: [CorsHttpMethod.POST, CorsHttpMethod.GET, CorsHttpMethod.OPTIONS],
+                allowHeaders: ['content-type', 'x-api-key'],
+                maxAge: Duration.minutes(5),
+                allowCredentials: true
+            },
             createDefaultStage: true,
         });
         //