handle cors preflight without auth (#111)

bcgov · Apr 10, 2024 · 7d0a59a · 7d0a59a
1 parent 2630f97
commit 7d0a59a
Showing 1 changed file with 9 additions and 2 deletions.
diff --git a/notify-api/src/notify_api/resources/v2/safe_list.py b/notify-api/src/notify_api/resources/v2/safe_list.py
@@ -25,7 +25,7 @@
 bp = Blueprint("SAFE_LIST", __name__, url_prefix="/safe_list")
 
 
-@bp.route("/", methods=["POST", "OPTIONS"])
+@bp.route("/", methods=["POST"])
 @jwt.requires_auth
 @jwt.has_one_of_roles([Role.SYSTEM.value, Role.STAFF.value])
 @validate()
@@ -40,7 +40,14 @@ def safe_list(body: SafeListRequest):  # pylint: disable=unused-argument
     return {}, HTTPStatus.OK
 
 
-@bp.route("/", methods=["GET", "OPTIONS"])
+@bp.route("/", methods=["OPTIONS"])
+@validate()
+def get_safe_list_preflight():
+    """Handle safe list cors preflight."""
+    return {}, HTTPStatus.OK
+
+
+@bp.route("/", methods=["GET"])
 @jwt.requires_auth
 @jwt.has_one_of_roles([Role.SYSTEM.value, Role.STAFF.value])
 @validate()