added cors middlewares to allow the webclient without hacky proxys

Resolves #252

deployment/charts/backend/files/envoy.yaml

@@ -28,9 +28,9 @@ static_resources:
                     cors:
                       allow_origin_string_match:
                         - prefix: "*"
-                      allow_methods: GET, PUT, DELETE, POST, OPTIONS
-                      allow_headers: keep-alive,user-agent,cache-control,content-type,content-transfer-encoding,custom-header-1,x-accept-content-transfer-encoding,x-accept-response-streaming,x-user-agent,x-grpc-web,grpc-timeout
-                      max_age: "1728000"
+                      allow_methods: GET, DELETE, POST
+                      allow_headers: "*"
+                      max_age: "86400"
                       expose_headers: custom-header-1,grpc-status,grpc-message
               http_filters:
                 - name: envoy.grpc_web

deployment/charts/backend/templates/networking/cors-middleware.yaml

@@ -0,0 +1,20 @@
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: cors
+  labels:
+    app.kubernetes.io/part-of: tum-campus-app
+  namespace: {{ $.Values.namespace }}
+spec:
+  headers:
+    accessControlAllowMethods:
+      - GET
+      - DELETE
+      - POST
+    accessControlAllowHeaders:
+      - "*"
+    accessControlAllowOriginList:
+      - "https://api.tum.app"
+      - "https://web.tum.app"
+    accessControlMaxAge: 86400
+    addVaryHeader: true

deployment/charts/backend/templates/networking/ingress.yaml

@@ -16,16 +16,22 @@ spec:
           port: 80
     - kind: Rule
       match: Host(`{{ join "`) || Host(`" $.Values.urls.v2 }}`)
+      middlewares:
+        - name: cors
       services:
         - name: backend-v2-svc
           port: 50051
     - kind: Rule
       match: Host(`{{ join "`) || Host(`" $.Values.urls.v2WebGrpc }}`)
+      middlewares:
+        - name: cors
       services:
         - name: backend-v2-svc
           port: 8081
     - kind: Rule
       match: (Host(`{{ join "`) || Host(`" $.Values.urls.v2 }}`)) && Headers(`Content-Type`, `application/grpc`)
+      middlewares:
+        - name: cors
       services:
         - name: backend-v2-svc
           port: 50051