Skip to main content
Version: v4

cors

id: cors title: CORS​

CORS

Harper supports managing cross-origin HTTP requests. By default, Harper enables CORS for all origins.

Configuration​

CORS is configured under operationsApi.network in harperdb-config.yaml.

Disable CORS​

operationsApi:
  network:
    cors: false

Enable CORS for All Origins (Default)​

operationsApi:
  network:
    cors: true
    corsAccessList: '[null]'

Setting corsAccessList to [null] clears any access list and allows all origins.

Restrict to Specific Origins​

operationsApi:
  network:
    cors: true
    corsAccessList: 'https://harpersystems.dev,https://products.harpersystems.dev'

corsAccessList accepts a comma-separated list of allowed origins. It is only applied when cors is true.

Configuration Options​

OptionTypeDefaultDescription
corsbooleantrueEnable or disable CORS.
corsAccessListstring[null] (all origins)Comma-separated list of allowed origins. Only used when cors is true. Set to [null] to allow all origins.

Notes​

  • Changes to CORS settings require a restart. Use harper restart or the restart operation via the Operations API.
  • For HTTP server CORS configuration (custom application endpoints), see HTTP Configuration.