Add CORS headers and remove all-urls from manifest

colinpannikkat · Nov 24, 2024 · aff9835 · aff9835
1 parent dea883b
commit aff9835
Show file tree

Hide file tree

Showing 6 changed files with 16 additions and 12 deletions.
diff --git a/dist/manifest.json b/dist/manifest.json
@@ -8,13 +8,11 @@
 
         "default_title": "GetTheDamClass"
     },
-    "host_permissions": ["<all_urls>"],
+    "host_permissions": ["*://*.oregonstate.edu/*, https://api.getthedamclass.sarvesh.me/*"],
     "permissions" : [
-        "webRequest",
         "scripting",
         "activeTab",
-        "storage",
-        "notifications"
+        "storage"
     ],
     "background": {
         "service_worker": "src/background.js",

diff --git a/dist/src/index.js b/dist/src/index.js
diff --git a/dist/src/popup.js b/dist/src/popup.js
diff --git a/manifest.json b/manifest.json
@@ -8,13 +8,11 @@
 
         "default_title": "GetTheDamClass"
     },
-    "host_permissions": ["<all_urls>"],
+    "host_permissions": ["*://*.oregonstate.edu/*, https://api.getthedamclass.sarvesh.me/*"],
     "permissions" : [
-        "webRequest",
         "scripting",
         "activeTab",
-        "storage",
-        "notifications"
+        "storage"
     ],
     "background": {
         "service_worker": "src/background.js",

diff --git a/src/components/signupform.tsx b/src/components/signupform.tsx
@@ -20,7 +20,11 @@ function SignupForm() {
         fetch("https://api.getthedamclass.sarvesh.me/signup", {
             method: "POST",
             headers: {
-                "Content-Type": "application/json"
+                "Content-Type": "application/json",
+                'Access-Control-Allow-Credentials' : 'true',
+                'Access-Control-Allow-Origin':'*',
+                'Access-Control-Allow-Methods':'POST',
+                'Access-Control-Allow-Headers':'application/json',
             },
             body: JSON.stringify(payload)
         })

diff --git a/src/helpers.ts b/src/helpers.ts
@@ -97,6 +97,10 @@ async function getCourseList(): Promise<Course[]> {
         method: "POST",
         headers: {
             "Content-Type": "application/json",
+            'Access-Control-Allow-Credentials' : 'true',
+            'Access-Control-Allow-Origin':'*',
+            'Access-Control-Allow-Methods':'POST',
+            'Access-Control-Allow-Headers':'application/json',
         },
         body: JSON.stringify(payload)
     })
@@ -109,7 +113,7 @@ async function getCourseList(): Promise<Course[]> {
         return response.json();
     })
     .then(data => {
-        console.log("Get sub list was successful:", data);
+        console.log("Get course list was successful:", data);
         cl = data.subs;
         return
     })