Add cors to API

Gemfile

@@ -111,6 +111,7 @@ gem 'roo' # Spreadsheet interface
 gem 'roo-xls' # Add excel support to roo
 gem 'rubyzip' # Zip the large CSV files before emailing
 gem 'rufus-scheduler' # Cron
+gem 'rack-cors' # API
 
 group :development, :test do
   gem 'rails-controller-testing'

Gemfile.lock

@@ -389,6 +389,8 @@ GEM
     raabro (1.4.0)
     racc (1.8.1)
     rack (3.1.7)
+    rack-cors (2.0.2)
+      rack (>= 2.0.0)
     rack-session (2.0.0)
       rack (>= 3.0.0)
     rack-test (2.1.0)
@@ -694,6 +696,7 @@ DEPENDENCIES
   opensearch-ruby
   paper_trail
   puma (>= 5.0)
+  rack-cors
   rails (~> 7.2.0)
   rails-controller-testing
   rails-reverse-proxy

config/initializers/cors.rb

@@ -0,0 +1,7 @@
+Rails.application.config.middleware.insert_before 0, Rack::Cors do
+  allow do
+    origins '*'
+    resource '/oauth/token', headers: :any, methods: [:post]
+    resource '/api/v1/oni/*', headers: :any, methods: [:get]
+  end
+end