diff options
Diffstat (limited to 'src/api/cors.rs')
| -rw-r--r-- | src/api/cors.rs | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/api/cors.rs b/src/api/cors.rs index 313d331..2d5fdc3 100644 --- a/src/api/cors.rs +++ b/src/api/cors.rs @@ -1,5 +1,6 @@ //! Pages of other origins reading this node: the dashboards of other members, which a -//! page subscribes to for their own links (`/admin/dashboard/links/own`), refreshing its +//! page subscribes to for their own links and traffic (`/admin/dashboard/links/own`, +//! `/admin/dashboard/traffic/own/events`), refreshing its //! token on any node (`/auth/refresh`, `/auth/whoami`). Only those endpoints, only for //! the origins of the dashboards the member list names and those of `--cors-origins`, //! and without credentials: a page sends its token itself (`Authorization: Bearer`), @@ -21,6 +22,7 @@ fn open(path: &str) -> bool { path, "/admin/dashboard/links/own" | "/admin/dashboard/links/own/events" + | "/admin/dashboard/traffic/own/events" | "/auth/refresh" | "/auth/whoami" ) |