From 5e96134d06b1194ec7659969ddd245dffd57dd38 Mon Sep 17 00:00:00 2001
From: hnccox-yard <hugo.cox@yard.nl>
Date: Tue, 25 Nov 2025 16:49:10 +0100
Subject: [PATCH] fix: add CORS headers to REST API responses

---
 openpub-base.php | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/openpub-base.php b/openpub-base.php
index 3130e68..b40e360 100644
--- a/openpub-base.php
+++ b/openpub-base.php
@@ -50,4 +50,12 @@
         do_action('owc/openpub-base/plugin', $plugin);
     });
 
+    add_action('rest_pre_serve_request', function ($served, $result, $request, $server) {
+        if (isset($_SERVER['HTTP_ORIGIN'])) {
+            header('Access-Control-Allow-Origin: ' . $_SERVER['HTTP_ORIGIN']);
+            header('Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS');
+            header('Access-Control-Allow-Headers: Content-Type, Authorization');
+        }
+        return $served;
+    }, 10, 4);
 }, 10);