From fbdc75438a1d0a85551a0b39266b4fe5f5ab0c15 Mon Sep 17 00:00:00 2001
From: Satyam Singh <trueleo@protonmail.com>
Date: Wed, 25 Oct 2023 21:45:27 +0530
Subject: [PATCH] Mirror CORS request and allow credentials

---
 server/src/handlers/livetail.rs | 11 +++++------
 1 file changed, 5 insertions(+), 6 deletions(-)

diff --git a/server/src/handlers/livetail.rs b/server/src/handlers/livetail.rs
index 1100f21fc..e09899fbf 100644
--- a/server/src/handlers/livetail.rs
+++ b/server/src/handlers/livetail.rs
@@ -35,7 +35,7 @@ use arrow_flight::{
     HandshakeResponse, PutResult, SchemaResult, Ticket,
 };
 use tonic_web::GrpcWebLayer;
-use tower_http::cors::{Any, CorsLayer};
+use tower_http::cors::{AllowHeaders, AllowMethods, AllowOrigin, CorsLayer};
 
 use crate::livetail::{Message, LIVETAIL};
 use crate::metadata::STREAM_INFO;
@@ -175,11 +175,10 @@ pub fn server() -> impl Future<Output = Result<(), Box<dyn std::error::Error + S
     let svc = FlightServiceServer::new(service);
 
     let cors = CorsLayer::new()
-        // allow `GET` and `POST` when accessing the resource
-        .allow_methods(Any)
-        .allow_headers(Any)
-        .allow_origin(Any);
-    // allow requests from any origin
+        .allow_methods(AllowMethods::mirror_request())
+        .allow_headers(AllowHeaders::mirror_request())
+        .allow_origin(AllowOrigin::mirror_request())
+        .allow_credentials(true);
 
     Server::builder()
         .accept_http1(true)