Summary: Add CORS header when none exist from PASTA #15

Context: Duplicate CORS headers from both PASTA->Gatekeeper and NGINX were causing
         a browser error
Change: Remove NGINX CORS header and replace with only from Gatekeeper where testing
        for their presence is possible

Author: servilla

webapp/filter/headers.py

@@ -48,6 +48,12 @@ async def make_request_headers(pasta_token: PastaToken, edi_token: str, request:
 
 
 def make_response_headers(pasta_token: PastaToken, edi_token: str, streaming_response: StreamingResponse) -> StreamingResponse:
+
+    # Inject CORS header if not present from complex CORS request to PASTA
+    cors = streaming_response.headers.get("Access-Control-Allow-Origin")
+    if cors is None:
+        streaming_response.headers["Access-Control-Allow-Origin"] = "*"
+
     token = Token(edi_token)
     auth_token = create_authtoken(Config.PRIVATE_KEY, pasta_token.to_string())
     max_age = None