CorsAccessControl

Cross-Origin Resource Sharing (CORS) configuration for API access control.

type CorsAccessControl {
  allowHeaders: [String!]
  allowMethods: [HttpMethod!]
  allowOrigins: [String!]
  allowCredentials: Boolean
  maxAge: Int
}

Fields

CorsAccessControl.allowHeaders ● [String!] list scalar miscellaneous {#allow-headers}

Default CORS headers which are Authorization, X-Api-Key and Content-type.

CorsAccessControl.allowMethods ● [HttpMethod!] list enum platform {#allow-methods}

The supported HTTP methods.

CorsAccessControl.allowOrigins ● [String!] list scalar miscellaneous {#allow-origins}

The supported CORS Origins. It defaults to *.

CorsAccessControl.allowCredentials ● Boolean scalar miscellaneous {#allow-credentials}

Indicates whether to allow authentication credentials from the origin.

CorsAccessControl.maxAge ● Int scalar miscellaneous {#max-age}

Indicates the length of time results of a request can be cached.

Fields​

Fields