use vuejs to trigger api call and loosen cors headers

1 files changed, 4 insertions, 3 deletions

diff --git a/cmd/api/main.go b/cmd/api/main.go
index d8834ad..7f94372 100644
--- a/cmd/api/main.go
+++ b/cmd/api/main.go
@@ -18,6 +18,7 @@ func main() {
 	router := http.NewServeMux()
 
 	router.Handle("/api/public", http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		w.Header().Set("Access-Control-Allow-Origin", "*")
 		w.Header().Set("Content-Type", "application/json")
 		w.WriteHeader(http.StatusOK)
 		w.Write([]byte(`{"message":"public"}`))
@@ -26,7 +27,7 @@ func main() {
 	router.Handle("/api/private", middleware.EnsureValidToken()(
 		http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 			w.Header().Set("Access-Control-Allow-Credentials", "true")
-			w.Header().Set("Access-Control-Allow-Origin", "http://localhost:3000")
+			w.Header().Set("Access-Control-Allow-Origin", "*")
 			w.Header().Set("Access-Control-Allow-Headers", "Authorization")
 
 			w.Header().Set("Content-Type", "application/json")
@@ -38,7 +39,7 @@ func main() {
 	router.Handle("/api/private-scoped", middleware.EnsureValidToken()(
 		http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 			w.Header().Set("Access-Control-Allow-Credentials", "true")
-			w.Header().Set("Access-Control-Allow-Origin", "http://localhost:3000")
+			w.Header().Set("Access-Control-Allow-Origin", "*")
 			w.Header().Set("Access-Control-Allow-Headers", "Authorization")
 
 			w.Header().Set("Content-Type", "application/json")
@@ -56,5 +57,5 @@ func main() {
 		}),
 	))
 
-	log.Fatal(http.ListenAndServe("0.0.0.0:3000", router))
+	log.Fatal(http.ListenAndServe("localhost:3000", router))
 }