[feat] gva: add cors configuration

lib/modules/gva/src/webserver.rs

@@ -18,7 +18,8 @@ use crate::context::GlobalContext;
 use crate::db::BcDbRo;
 use crate::graphql::graphql;
 use crate::schema::create_schema;
-use actix_web::{middleware, web, App, HttpResponse, HttpServer};
+use actix_cors::Cors;
+use actix_web::{http::header, middleware, web, App, HttpResponse, HttpServer};
 #[cfg(not(test))]
 use durs_common_tools::fatal_error;
 use durs_conf::DuRsConf;
@@ -77,6 +78,15 @@ pub fn start_web_server(
     HttpServer::new(move || {
         App::new()
             .data(global_context.clone())
+            .wrap(
+                Cors::new()
+                    .allowed_headers(vec![
+                        header::AUTHORIZATION,
+                        header::ACCEPT,
+                        header::ACCESS_CONTROL_ALLOW_ORIGIN,
+                    ])
+                    .allowed_methods(vec!["GET", "POST", "OPTIONS"]),
+            )
             .wrap(middleware::Logger::default())
             .service(web::resource("/graphql").route(web::post().to_async(graphql)))
             .service(web::resource("/graphiql").route(web::get().to(graphiql)))