project-nomad/admin/tests
cclavin 2703057f37 fix(maps): serve map assets with CORS
origin: ['*'] in config/cors.ts never matches a real Origin header,
since @adonisjs/cors only treats '*' as a wildcard when it's the bare
string, not inside an array. So no Access-Control-Allow-Origin is ever
sent, on any route, blocking any other app from reading NOMAD's map
tiles cross-origin.

Add a middleware scoped to the four map asset path prefixes instead of
widening the global config, which would also expose the write API since
credentials: true is already set there. Registered before @adonisjs/cors
so it can answer OPTIONS preflights on map paths itself; the built-in
middleware ends any preflight it can't match an origin for before this
one would otherwise run.
2026-10-07 18:21:04 -05:00
..
eval feat(AI): add opt-in relevance check for off-topic retrieval 2026-09-29 15:54:41 -07:00
functional feat: auto-generating OpenAPI docs with Scalar UI (#1128) 2026-08-04 03:38:33 +00:00
standalone refactor(drug-reference): make collections JSON the single source for curated data (#1130) 2026-08-04 03:38:35 +00:00
unit fix(maps): serve map assets with CORS 2026-10-07 18:21:04 -05:00
bootstrap.ts feat: initial commit 2025-06-29 15:51:08 -07:00