Always add CORS headers

EBISPOT · Dec 5, 2024 · 8388527 · 8388527
1 parent 7dde027
commit 8388527
Showing 1 changed file with 5 additions and 5 deletions.
diff --git a/backend/src/main/java/uk/ac/ebi/spot/ols/config/CrossOriginResourceSharingFilter.java b/backend/src/main/java/uk/ac/ebi/spot/ols/config/CrossOriginResourceSharingFilter.java
@@ -32,18 +32,18 @@ public void doFilter(ServletRequest request, ServletResponse response, FilterCha
         HttpServletRequest httpRequest = (HttpServletRequest) request;
         HttpServletResponse httpResponse = (HttpServletResponse) response;
 
+        // Alwasy add CORS headers. add CORS "pre-flight" request headers
+        httpResponse.addHeader("Access-Control-Allow-Origin", "*");
+        httpResponse.addHeader("Access-Control-Allow-Headers", "*");
+        httpResponse.addHeader("Access-Control-Allow-Methods", "GET");
+        httpResponse.addHeader("Access-Control-Max-Age", "3600");
 
         // is this a CORS request?
         if (httpRequest.getHeader("Origin") != null) {
             String origin = httpRequest.getHeader("Origin");
             String requestURI = httpRequest.getRequestURI();
             getLog().trace("Possible cross-origin request received from '" + origin + "' to IRI: " +
                                    "'" + requestURI + "'.  Enabling CORS.");
-
-            // add CORS "pre-flight" request headers
-            httpResponse.addHeader("Access-Control-Allow-Origin", "*");
-            httpResponse.addHeader("Access-Control-Allow-Headers", "*");
-            httpResponse.addHeader("Access-Control-Allow-Methods", "GET");
         }
 
         chain.doFilter(request, response);