🛂 Config for å tillate spørringer fra mikrofrontend

navikt · Feb 15, 2024 · a44dc12 · a44dc12
2 parents ecd4c79 + 8d2c048
commit a44dc12
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/pages/api/soknader/soknaderInnsending.ts b/pages/api/soknader/soknaderInnsending.ts
@@ -1,9 +1,25 @@
 import { beskyttetApi, getAccessTokenFromRequest } from '@navikt/aap-felles-utils';
 import { getSøknaderInnsending } from 'pages/api/soknader/soknader';
 
+const allowedOrigins = [
+  'https://www.intern.dev.nav.no',
+  'https://aap-mine-aap.intern.dev.nav.no',
+  'https://www.nav.no',
+];
+
 const handler = beskyttetApi(async (req, res) => {
   const accessToken = getAccessTokenFromRequest(req);
   const søknader = await getSøknaderInnsending(accessToken);
+  if (req.headers.origin) {
+    res.setHeader('Access-Control-Allow-Credentials', 'true');
+    res.setHeader('Access-Control-Allow-Origin', allowedOrigins.includes(req.headers.origin) ? req.headers.origin : '');
+    res.setHeader('Access-Control-Allow-Methods', 'GET,OPTIONS,PATCH,DELETE,POST,PUT');
+    res.setHeader(
+      'Access-Control-Allow-Headers',
+      'X-CSRF-Token, X-Requested-With, Accept, Accept-Version, Content-Length, Content-MD5, Content-Type, Date, X-Api-Version'
+    );
+  }
+
   res.status(200).json(søknader);
 });