Skip to content

chore(host): point default CORS allow-list at the React client origins#1324

Open
marcelo-maciel wants to merge 1 commit into
fullstackhero:mainfrom
marcelo-maciel:chore/cors-allowedorigins-react
Open

chore(host): point default CORS allow-list at the React client origins#1324
marcelo-maciel wants to merge 1 commit into
fullstackhero:mainfrom
marcelo-maciel:chore/cors-allowedorigins-react

Conversation

@marcelo-maciel

Copy link
Copy Markdown
Contributor

What

CorsOptions.AllowedOrigins in appsettings.json listed https://localhost:4200 (Angular's default dev port) and https://localhost:7140, neither of which any client in this repo uses.

The two front-ends the kit actually ships and runs (via the Aspire AppHost) are:

  • clients/adminhttp://localhost:5173
  • clients/dashboardhttp://localhost:5174

This replaces the stale entries with the real React dev origins so the default configuration matches the apps out of the box.

Note

This touches the same AllowedOrigins block as #1323 (per-request front-end origin resolution), which adds :5173/:5174 on top of the existing entries. Whichever merges first, the other will need a trivial rebase of this one array. Happy to sequence them however you prefer.

`CorsOptions.AllowedOrigins` still listed `https://localhost:4200` (Angular)
and `https://localhost:7140`, neither of which any shipped client uses. The
two front-ends this kit runs are `clients/admin` (http://localhost:5173) and
`clients/dashboard` (http://localhost:5174). List those instead so the default
dev config actually matches the apps.
@chatgpt-codex-connector

Copy link
Copy Markdown

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant