Allow CORS for API calls (#48)

CrestApps · Feb 13, 2025 · 6fbb1c6 · 6fbb1c6
1 parent e7ad542
commit 6fbb1c6
Show file tree

Hide file tree

Showing 5 changed files with 29 additions and 0 deletions.
diff --git a/src/Core/CrestApps.OrchardCore.AI.Core/AIConstants.cs b/src/Core/CrestApps.OrchardCore.AI.Core/AIConstants.cs
@@ -13,6 +13,8 @@ public static class AIConstants
 
     public const string CollectionName = "AI";
 
+    public const string AllowAllOriginsHeadersMethodsPolicyName = "AllowAllOriginsHeadersMethods";
+
     public static class SystemMessages
     {
         public const string UseMarkdownSyntax = "- Provide a response using Markdown syntax.";

diff --git a/src/Modules/CrestApps.OrchardCore.AI/Endpoints/Api/ApiAIChatSessionEndpoint.cs b/src/Modules/CrestApps.OrchardCore.AI/Endpoints/Api/ApiAIChatSessionEndpoint.cs
@@ -1,3 +1,4 @@
+using CrestApps.OrchardCore.AI.Core;
 using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Builder;
 using Microsoft.AspNetCore.Routing;
@@ -10,6 +11,7 @@ public static IEndpointRouteBuilder AddApiAIChatSessionEndpoint(this IEndpointRo
     {
         _ = builder.MapGet("api/ai/chat/session", AIChatSessionEndpoint.HandleAsync)
             .DisableAntiforgery()
+            .RequireCors(AIConstants.AllowAllOriginsHeadersMethodsPolicyName)
             .RequireAuthorization(new AuthorizeAttribute { AuthenticationSchemes = "Api" });
 
         return builder;

diff --git a/src/Modules/CrestApps.OrchardCore.AI/Endpoints/Api/ApiAICompletionEndpoint.cs b/src/Modules/CrestApps.OrchardCore.AI/Endpoints/Api/ApiAICompletionEndpoint.cs
@@ -1,3 +1,4 @@
+using CrestApps.OrchardCore.AI.Core;
 using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Builder;
 using Microsoft.AspNetCore.Routing;
@@ -10,6 +11,7 @@ public static IEndpointRouteBuilder AddApiAICompletionEndpoint<T>(this IEndpoint
     {
         _ = builder.MapPost("api/ai/completion/chat", AICompletionEndpoint.HandleAsync<T>)
             .DisableAntiforgery()
+            .RequireCors(AIConstants.AllowAllOriginsHeadersMethodsPolicyName)
             .RequireAuthorization(new AuthorizeAttribute { AuthenticationSchemes = "Api" });
 
         return builder;

diff --git a/src/Modules/CrestApps.OrchardCore.AI/Endpoints/Api/ApiAIUtilityCompletionEndpoint.cs b/src/Modules/CrestApps.OrchardCore.AI/Endpoints/Api/ApiAIUtilityCompletionEndpoint.cs
@@ -1,3 +1,4 @@
+using CrestApps.OrchardCore.AI.Core;
 using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Builder;
 using Microsoft.AspNetCore.Routing;
@@ -10,6 +11,7 @@ public static IEndpointRouteBuilder AddApiAIUtilityCompletionEndpoint<T>(this IE
     {
         _ = builder.MapPost("api/ai/completion/utility", AIUtilityCompletionEndpoint.HandleAsync<T>)
             .DisableAntiforgery()
+            .RequireCors(AIConstants.AllowAllOriginsHeadersMethodsPolicyName)
             .RequireAuthorization(new AuthorizeAttribute { AuthenticationSchemes = "Api" });
 
         return builder;

diff --git a/src/Modules/CrestApps.OrchardCore.AI/Startup.cs b/src/Modules/CrestApps.OrchardCore.AI/Startup.cs
@@ -23,6 +23,7 @@
 using Microsoft.AspNetCore.Routing;
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Options;
+using OrchardCore;
 using OrchardCore.ContentManagement;
 using OrchardCore.ContentManagement.Display.ContentDisplay;
 using OrchardCore.Data;
@@ -136,8 +137,28 @@ public override void Configure(IApplicationBuilder app, IEndpointRouteBuilder ro
 [Feature(AIConstants.Feature.ChatApi)]
 public sealed class ApiChatStartup : StartupBase
 {
+    public override int Order
+        => OrchardCoreConstants.ConfigureOrder.Cors;
+
+    public override void ConfigureServices(IServiceCollection services)
+    {
+        services.AddCors(options =>
+        {
+            options.AddPolicy(AIConstants.AllowAllOriginsHeadersMethodsPolicyName,
+                builder =>
+                {
+                    builder
+                        .AllowAnyOrigin()
+                        .AllowAnyHeader()
+                        .AllowAnyMethod();
+                });
+        });
+    }
+
     public override void Configure(IApplicationBuilder app, IEndpointRouteBuilder routes, IServiceProvider serviceProvider)
     {
+        app.UseCors();
+
         routes
             .AddApiAIChatSessionEndpoint()
             .AddApiAIUtilityCompletionEndpoint<ApiChatStartup>()