fix: finish prospect workflow safeguards

2026-07-30 23:34:42 +02:00
parent 792814b04e
commit efc9d83c25
3 changed files with 13 additions and 20 deletions
@@ -105,19 +105,12 @@ builder.Services.AddCors(options =>
        }

        if (origins.Any(x => x.Trim() == "*"))
-        {
-            policy.SetIsOriginAllowed(_ => true)
-                .AllowAnyMethod()
-                .AllowAnyHeader()
-                .AllowCredentials();
-        }
-        else
-        {
-            policy.WithOrigins(origins.Select(x => x.Trim()).Where(x => x.Length > 0).ToArray())
-                .AllowAnyMethod()
-                .AllowAnyHeader()
-                .AllowCredentials();
-        }
+            throw new InvalidOperationException("Cors:Origins cannot contain wildcard when credentialed requests are enabled.");
+
+        policy.WithOrigins(origins.Select(x => x.Trim()).Where(x => x.Length > 0).ToArray())
+            .AllowAnyMethod()
+            .AllowAnyHeader()
+            .AllowCredentials();
    });
 });