feat(cors): Allow cross origin verification requests

Author: shrink

main_test.go

@@ -143,3 +143,15 @@ func TestUnknownHandleRedirectsToDestination(t *testing.T) {
 	assert.Equal(t, "https://example.com/register?handle=carol.example.com", url.String())
 
 }
+
+func TestDidEndpointAllowsCrossOriginRequests(t *testing.T) {
+	router, _ := NewTestEnvironment()
+
+	res := httptest.NewRecorder()
+	req, _ := http.NewRequest("GET", "https://alice.example.com/.well-known/atproto-did", nil)
+	router.ServeHTTP(res, req)
+
+	assert.Equal(t, http.StatusOK, res.Code)
+	assert.Equal(t, "did:plc:example001", res.Body.String())
+	assert.Equal(t, "*", res.Header().Get("Access-Control-Allow-Origin"))
+}

router.go

@@ -100,6 +100,7 @@ func VerifyHandle(c *gin.Context) {
 		return
 	}
 
+	c.Header("Access-Control-Allow-Origin", "*")
 	c.String(http.StatusOK, string(result.DecentralizedID))
 }