feat: Allow CORS policy to be configured

[korylprince]

This allows the CORS policy to be configured or disabled on an op.Provider via WithCORSOptions or on on.RegisterServer via WithServerCORSOptions. The reason for this feature is library users may want a stricter CORS policy than the default policy currently forced by the library.

This takes care not to break backwards compatibility with any interfaces, functions, or default usage (e.g. the default policy is still applied by default).

Also, this removes the CORS middleware from the intercept function as every upstream use of it already had the CORS middleware applied.

[rdiers]

@korylprince ...Requesting if this can also be back-ported to the v2 implementation as well.

[korylprince]

@radsec PR #485 is the backported version of this.

[muhlemmer]

Thanks! looks great

[codecov]

Codecov Report

Attention: 12 lines in your changes are missing coverage. Please review.

Comparison is base (f014796) 60.29% compared to head (5d7cb2c) 60.20%.

Files	Patch %	Lines
pkg/op/op.go	50.00%	8 Missing ⚠️
pkg/op/server_http.go	60.00%	4 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #484      +/-   ##
==========================================
- Coverage   60.29%   60.20%   -0.10%     
==========================================
  Files          78       78              
  Lines        6753     6775      +22     
==========================================
+ Hits         4072     4079       +7     
- Misses       2385     2399      +14     
- Partials      296      297       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[korylprince]

@muhlemmer thanks for taking a look at this! I pushed a new commit that I think works around this issue nicely. Instead of wrapping the *webServer itself for CORS, keep an internal handler that can either be the router or the CORS-wrapped router, and use that in ServeHTTP.

[muhlemmer]

Perfect, thanks!

[github-actions]

🎉 This PR is included in version 3.3.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

[muhlemmer]

hey @korylprince thanks for the contribution.

If you'd like to have a small gift in return, please send us a mail to hi@zitadel.com. We will send you a form with questions about your address and shirt size.