setup CORS

Gemfile

@@ -10,6 +10,7 @@ gem "sprockets-rails"
 gem "pg", "~> 1.1"
 
 gem "puma", ">= 5.0"
+gem 'rack-cors'
 gem "sidekiq", "~> 7.2"
 gem "importmap-rails"
 gem "turbo-rails"

Gemfile.lock

@@ -186,6 +186,8 @@ GEM
       nio4r (~> 2.0)
     racc (1.7.3)
     rack (3.0.8)
+    rack-cors (2.0.1)
+      rack (>= 2.0.0)
     rack-session (2.0.0)
       rack (>= 3.0.0)
     rack-test (2.1.0)
@@ -333,6 +335,7 @@ DEPENDENCIES
   passwordless (~> 1.1)
   pg (~> 1.1)
   puma (>= 5.0)
+  rack-cors
   rails (= 7.1.2)
   rspec-rails
   selenium-webdriver

config/initializers/cors.rb

@@ -0,0 +1,12 @@
+Rails.application.config.middleware.insert_before 0, Rack::Cors do
+  allow do
+    origins "http://localhost:8080"
+      "https://staffplan-ui.fermion.dev"
+
+    resource "*",
+             headers: :any,
+             methods: [:get, :post, :put, :patch, :delete, :options, :head],
+             credentials: true,
+             max_age: 86400
+  end
+end