From 8fb5d801cf5a285f051a6d33f4fd96fb295aca60 Mon Sep 17 00:00:00 2001
From: JavMB <javiermengual@live.com>
Date: Fri, 15 May 2026 19:52:04 +0200
Subject: [PATCH] fix CORS

---
 DoliMiddlewareApi/Program.cs       | 21 ++++-----------------
 DoliMiddlewareApi/appsettings.json |  8 +++-----
 compose.yaml                       |  1 -
 3 files changed, 7 insertions(+), 23 deletions(-)

diff --git a/DoliMiddlewareApi/Program.cs b/DoliMiddlewareApi/Program.cs
index d9f75b5..1ac8588 100644
--- a/DoliMiddlewareApi/Program.cs
+++ b/DoliMiddlewareApi/Program.cs
@@ -51,27 +51,14 @@ builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
 
 builder.Services.AddAuthorization();
 
-// CORS: Allow all origins in dev, configurable in prod
-var corsOrigins = builder.Configuration["Cors:AllowedOrigins"];
+// CORS: Permitir cualquier origen (demo)
 builder.Services.AddCors(options =>
 {
     options.AddPolicy("AllowVueApp", policy =>
     {
-        if (string.IsNullOrEmpty(corsOrigins))
-        {
-            policy.SetIsOriginAllowed(_ => true)
-                  .AllowAnyMethod()
-                  .AllowAnyHeader()
-                  .AllowCredentials();
-        }
-        else
-        {
-            var origins = corsOrigins.Split(';', StringSplitOptions.RemoveEmptyEntries);
-            policy.WithOrigins(origins)
-                  .AllowAnyMethod()
-                  .AllowAnyHeader()
-                  .AllowCredentials();
-        }
+        policy.AllowAnyOrigin()
+              .AllowAnyMethod()
+              .AllowAnyHeader();
     });
 });
 
diff --git a/DoliMiddlewareApi/appsettings.json b/DoliMiddlewareApi/appsettings.json
index e9f936b..ca0f103 100644
--- a/DoliMiddlewareApi/appsettings.json
+++ b/DoliMiddlewareApi/appsettings.json
@@ -11,14 +11,12 @@
     "ApiUrl": "http://localhost/api/index.php",
     "ApiKey": ""
   },
-  "Cors": {
-    "AllowedOrigins": ""
-  },
   "Jwt": {
     "Secret": "",
     "Issuer": "DoliMiddleware",
     "Audience": "DoliClients"
   },
-  "Notifications":{
+  "Notifications": {
     "WebhookUrl": ""
-}}
+  }
+}
\ No newline at end of file
diff --git a/compose.yaml b/compose.yaml
index 5f7eed2..5e53e29 100644
--- a/compose.yaml
+++ b/compose.yaml
@@ -63,7 +63,6 @@
       - ASPNETCORE_ENVIRONMENT=Production
       - Jwt__Secret=DevDemoSecretKeyForDockerCompose2026Min32Chars!!
       - Dolibarr__ApiUrl=http://dolibarr/api/index.php
-      - Cors__AllowedOrigins=http://localhost:3000;http://localhost:3001;http://localhost:5173;http://localhost:5269
     restart: unless-stopped
 
 volumes: