nhyatt/bitwarden
1
0
Fork 0
mirror of https://github.com/bitwarden/server.git synced 2025-06-30 15:42:48 -05:00
Code Activity

set cors policies to only allow web vault origin (#787)

Browse Source 
* set cors policy to only allow web vault

* vault cors policy service
This commit is contained in:
Kyle Spearrin
2020-06-23 18:47:53 -04:00
committed by GitHub
parent 2daca941f3
commit cf70a5e480
6 changed files with 24 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
src/Core/IdentityServer/AllowAllCorsPolicyService.cs
View File

@ -1,13 +0,0 @@
using IdentityServer4.Services;
using System.Threading.Tasks;
namespace Bit.Core.IdentityServer
{
public class AllowAllCorsPolicyService : ICorsPolicyService
{
public Task<bool> IsOriginAllowedAsync(string origin)
{
return Task.FromResult(true);
}
}
}

20
src/Core/IdentityServer/VaultCorsPolicyService.cs Normal file
View File

@ -0,0 +1,20 @@
using IdentityServer4.Services;
using System.Threading.Tasks;
namespace Bit.Core.IdentityServer
{
public class VaultCorsPolicyService : ICorsPolicyService
{
private readonly GlobalSettings _globalSettings;
public VaultCorsPolicyService(GlobalSettings globalSettings)
{
_globalSettings = globalSettings;
}
public Task<bool> IsOriginAllowedAsync(string origin)
{
return Task.FromResult(origin == _globalSettings.BaseServiceUri.Vault);
}
}
}

2
src/Core/Utilities/ServiceCollectionExtensions.cs
View File

@ -382,7 +382,7 @@ namespace Bit.Core.Utilities
}
services.AddTransient<ClientStore>();
services.AddTransient<ICorsPolicyService, AllowAllCorsPolicyService>();
services.AddTransient<ICorsPolicyService, VaultCorsPolicyService>();
services.AddScoped<IResourceOwnerPasswordValidator, ResourceOwnerPasswordValidator>();
services.AddScoped<IProfileService, ProfileService>();
services.AddSingleton<IPersistedGrantStore, PersistedGrantStore>();