aljaz/btcpayserver
1
0
Fork 0
mirror of https://github.com/aljazceru/btcpayserver.git synced 2025-12-17 22:14:26 +01:00
Code Issues Packages Projects Releases Wiki Activity

Bypass MVC for replying to CORS requests if Bitpay API

Browse Source
This commit is contained in:
nicolas.dorier
2019-02-02 15:19:22 +09:00
parent 66bb702aca
commit 098e07988c
3 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
BTCPayServer/Controllers/AccessTokenController.cs
View File

@@ -14,8 +14,7 @@ using System.Threading.Tasks;
namespace BTCPayServer.Controllers namespace BTCPayServer.Controllers
{ {
[Authorize(AuthenticationSchemes = Security.Policies.BitpayAuthentication)] [Authorize(AuthenticationSchemes = Security.Policies.BitpayAuthentication)]
[BitpayAPIConstraint(true)] [BitpayAPIConstraint()]
[EnableCors(CorsPolicies.All)]
public class AccessTokenController : Controller public class AccessTokenController : Controller
{ {
TokenRepository _TokenRepository; TokenRepository _TokenRepository;

1
BTCPayServer/Controllers/InvoiceController.API.cs
View File

@@ -13,7 +13,6 @@ using NBitpayClient;
namespace BTCPayServer.Controllers namespace BTCPayServer.Controllers
{ {
[BitpayAPIConstraint] [BitpayAPIConstraint]
[EnableCors(CorsPolicies.All)]
[Authorize(Policies.CanCreateInvoice.Key, AuthenticationSchemes = Policies.BitpayAuthentication)] [Authorize(Policies.CanCreateInvoice.Key, AuthenticationSchemes = Policies.BitpayAuthentication)]
public class InvoiceControllerAPI : Controller public class InvoiceControllerAPI : Controller
{ {

5
BTCPayServer/Hosting/BTCpayMiddleware.cs
View File

@@ -38,6 +38,11 @@ namespace BTCPayServer.Hosting
{ {
var bitpayAuth = GetBitpayAuth(httpContext, out bool isBitpayAuth); var bitpayAuth = GetBitpayAuth(httpContext, out bool isBitpayAuth);
var isBitpayAPI = IsBitpayAPI(httpContext, isBitpayAuth); var isBitpayAPI = IsBitpayAPI(httpContext, isBitpayAuth);
if (isBitpayAPI && httpContext.Request.Method == "OPTIONS")
{
httpContext.Response.StatusCode = 200;
return; // We bypass MVC completely
}
httpContext.SetIsBitpayAPI(isBitpayAPI); httpContext.SetIsBitpayAPI(isBitpayAPI);
if (isBitpayAPI) if (isBitpayAPI)
{ {