dunglas/mercure

Support cors_origins Wildcard domain

f1amy opened this issue · 2 comments

Our application is multi-tenant, we're handling users from a dynamic number of subdomains.

We would like to setup authorization for Mercure subscribers, but it seems that it not possible with current configuration.

We've tried: cors_origins https://*.example.com, but Access-Control-Allow-Origin header is not appearing in responses from Mercure.

What can we do to fix this issue?

It looks like using GET parameter authorization will work if we can't currently setup dynamic CORS origins

I'd love to see this feature implemented! I have quite a few subdomains on several sites and it's getting to be a long list ^^