CorsAccessControl

Cross-Origin Resource Sharing (CORS) configuration for API access control.

type CorsAccessControl {
  allowHeaders: [String!]
  allowMethods: [HttpMethod!]
  allowOrigins: [String!]
  allowCredentials: Boolean
  maxAge: Int
}

Fields

CorsAccessControl.allowHeaders ● [String!] list scalar miscellaneous

Default CORS headers which are Authorization, X-Api-Key and Content-type.

CorsAccessControl.allowMethods ● [HttpMethod!] list enum catalog-service

The supported HTTP methods.

CorsAccessControl.allowOrigins ● [String!] list scalar miscellaneous

The supported CORS Origins. It defaults to *.

CorsAccessControl.allowCredentials ● Boolean scalar miscellaneous

Indicates whether to allow authentication credentials from the origin.

CorsAccessControl.maxAge ● Int scalar miscellaneous

Indicates the length of time results of a request can be cached.