fix: allow Access-Control-Allow-Origin=* on versions API

jupyterhub · Jan 9, 2025 · 6d4cf4f · 6d4cf4f
1 parent 3b3743b
commit 6d4cf4f
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/binderhub/base.py b/binderhub/base.py
@@ -216,6 +216,13 @@ class VersionHandler(BaseHandler):
     # (e.g. mybinder.org federation when blocking cloud datacenters)
     skip_check_request_ip = True
 
+    def set_default_headers():
+        if 'Access-Control-Allow-Origin' not in self.settings.get("headers", {}):
+            # allow CORS requests to this endpoint by default
+            self.set_header('Access-Control-Allow-Origin', '*')
+
+        super().set_default_headers()
+
     async def get(self):
         self.set_header("Content-type", "application/json")
         r = {