feat(cors): Allow cross origin verification requests (#26)

Author: shrink

.github/workflows/format.yaml

@@ -11,7 +11,9 @@ jobs:
       - uses: actions/setup-go@v4
         with:
           go-version-file: "go.mod"
-      - uses: golangci/golangci-lint-action@v3
+      - uses: golangci/golangci-lint-action@v8
+        with:
+          version: v2.4.0
   tidy:
     name: Tidy go modules
     runs-on: ubuntu-latest

.gitignore

@@ -1 +1,2 @@
 handles-server
+bin/

Taskfile.dist.yaml

@@ -27,13 +27,13 @@ tasks:
       - golang-ci
     cmds:
       - go fmt .
-      - golangci-lint run
+      - ./bin/golangci-lint run
       - go mod tidy
 
   golang-ci:
     status:
-      - golangci-lint version && exit 0
+      - ./bin/golangci-lint version && exit 0
     cmds:
       - >
-        curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh |
-        sh -s -- -b $(go env GOPATH)/bin v1.53.3
+        curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | 
+        sh -s v2.4.0

config.go

@@ -6,7 +6,7 @@ import (
 	"os"
 	"reflect"
 
-	"github.com/caarlos0/env/v11"
+	env "github.com/caarlos0/env/v11"
 	"github.com/jackc/pgx/v5/pgxpool"
 	"github.com/jackc/pgx/v5/tracelog"
 	pgxslog "github.com/mcosta74/pgx-slog"

main_test.go

@@ -143,3 +143,15 @@ func TestUnknownHandleRedirectsToDestination(t *testing.T) {
 	assert.Equal(t, "https://example.com/register?handle=carol.example.com", url.String())
 
 }
+
+func TestDidEndpointAllowsCrossOriginRequests(t *testing.T) {
+	router, _ := NewTestEnvironment()
+
+	res := httptest.NewRecorder()
+	req, _ := http.NewRequest("GET", "https://alice.example.com/.well-known/atproto-did", nil)
+	router.ServeHTTP(res, req)
+
+	assert.Equal(t, http.StatusOK, res.Code)
+	assert.Equal(t, "did:plc:example001", res.Body.String())
+	assert.Equal(t, "*", res.Header().Get("Access-Control-Allow-Origin"))
+}

pg.go

@@ -5,7 +5,7 @@ import (
 	"errors"
 	"fmt"
 
-	"github.com/jackc/pgx/v5"
+	pgx "github.com/jackc/pgx/v5"
 	"github.com/jackc/pgx/v5/pgxpool"
 )
 

router.go

@@ -100,6 +100,7 @@ func VerifyHandle(c *gin.Context) {
 		return
 	}
 
+	c.Header("Access-Control-Allow-Origin", "*")
 	c.String(http.StatusOK, string(result.DecentralizedID))
 }