dashboard: own links over the API, and CORS

GET /admin/dashboard/links/own and its event stream: a node's own links,
as LINKS_REPLY carried them, for other members' dashboards with a
token. CORS for the members' dashboard origins and --cors-origins,
without credentials.

Auth plan M3.

1 files changed, 3 insertions, 0 deletions

diff --git a/src/node.rs b/src/node.rs
index c3be694..9b14447 100644
--- a/src/node.rs
+++ b/src/node.rs
@@ -69,6 +69,8 @@ pub(crate) struct NodeConfig {
     /// `--token-lifetime`, `--session-lifetime`.
     pub(crate) token_lifetime: Duration,
     pub(crate) session_lifetime: Duration,
+    /// `--cors-origins`.
+    pub(crate) cors_origins: Vec<String>,
     pub(crate) files: Arc<Files>,
     pub(crate) state_file: Option<Arc<StateFile>>,
     pub(crate) document_file: Option<Arc<DocumentFile>>,
@@ -152,6 +154,7 @@ impl Node {
             node_key: config.node_key,
             token_lifetime: config.token_lifetime,
             session_lifetime: config.session_lifetime,
+            cors_origins: Arc::new(config.cors_origins),
             state_file: config.state_file,
             document_file: config.document_file,
             files: config.files,