chore: configure cors for webapp

CHANGELOG.md

@@ -20,6 +20,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Feat: update api to collaboratively revert a dlc-channel
 - Feat: Allow continuing from an offered dlc channel state (offered, settle offered and collab close offered)
 - Feat: add a new project `webapp`. Eventually this will have the same functionality as our app (and more) and can be run on a self-hosted server
+- Chore: In Webapp API allow requests from any origin (CORS)
 
 ## [1.7.4] - 2023-12-20
 

webapp/Cargo.toml

@@ -21,6 +21,6 @@ serde_json = "1"
 time = "0.3"
 tokio = { version = "1", features = ["macros", "rt-multi-thread"] }
 tower = { version = "0.4", features = ["util"] }
-tower-http = { version = "0.5", features = ["fs", "trace"] }
+tower-http = { version = "0.5", features = ["fs", "trace", "cors"] }
 tracing = "0.1.37"
 tracing-subscriber = { version = "0.3", features = ["env-filter"] }

webapp/src/main.rs

@@ -22,11 +22,13 @@ use axum::response::Response;
 use axum::routing::get;
 use axum::routing::post;
 use axum::Router;
+use bitcoin::Network;
 use rust_embed::RustEmbed;
 use std::net::SocketAddr;
 use std::sync::Arc;
 use std::time::Duration;
 use tower_http::classify::ServerErrorsFailureClass;
+use tower_http::cors::CorsLayer;
 use tower_http::trace::TraceLayer;
 use tracing::level_filters::LevelFilter;
 use tracing::Span;
@@ -80,13 +82,13 @@ async fn main() -> Result<()> {
     let (rx, tx) = AppSubscribers::new().await;
     native::event::subscribe(tx);
 
-    serve(using_serve_dir(Arc::new(rx)), 3001).await?;
+    serve(using_serve_dir(Arc::new(rx), network), 3001).await?;
 
     Ok(())
 }
 
-fn using_serve_dir(subscribers: Arc<AppSubscribers>) -> Router {
-    Router::new()
+fn using_serve_dir(subscribers: Arc<AppSubscribers>, network: Network) -> Router {
+    let router = Router::new()
         .route("/", get(index_handler))
         .route("/api/version", get(version))
         .route("/api/balance", get(get_balance))
@@ -116,7 +118,16 @@ fn using_serve_dir(subscribers: Arc<AppSubscribers>) -> Router {
                     },
                 ),
         )
-        .with_state(subscribers)
+        .with_state(subscribers);
+
+    if matches!(
+        network,
+        Network::Regtest | Network::Signet | Network::Testnet
+    ) {
+        router.layer(CorsLayer::permissive())
+    } else {
+        router
+    }
 }
 
 // We use static route matchers ("/" and "/index.html") to serve our home