From fc4e3648835205662836935b4bed006354db06ba Mon Sep 17 00:00:00 2001
From: Jacob Casper <dev@jacobcasper.com>
Date: Fri, 17 Apr 2020 16:33:30 -0500
Subject: [PATCH] Send CORS Header for app

---
 backend/env/env.go              | 16 +++++++++++++---
 backend/routes/artist/artist.go |  5 +++++
 backend/routes/genre/genre.go   |  2 ++
 3 files changed, 20 insertions(+), 3 deletions(-)

diff --git a/backend/env/env.go b/backend/env/env.go
index 9efbf2e..4a6d524 100644
--- a/backend/env/env.go
+++ b/backend/env/env.go
@@ -7,8 +7,9 @@ import (
 )
 
 type Env struct {
-	Db *db.DB
-	C  *spotify.Client
+	Db         *db.DB
+	C          *spotify.Client
+	CorsOrigin string
 }
 
 func New() (*Env, error) {
@@ -21,5 +22,14 @@ func New() (*Env, error) {
 	if err != nil {
 		return nil, err
 	}
-	return &Env{Db: db, C: client}, nil
+	return &Env{
+			Db:         db,
+			C:          client,
+			CorsOrigin: "http://brackets.jacobcasper.com",
+		},
+		nil
+}
+
+func (e *Env) Local() {
+	e.CorsOrigin = "*"
 }
diff --git a/backend/routes/artist/artist.go b/backend/routes/artist/artist.go
index 5a584e3..32e90cc 100644
--- a/backend/routes/artist/artist.go
+++ b/backend/routes/artist/artist.go
@@ -18,6 +18,8 @@ func Index(env *env.Env) routes.Handler {
 			return
 		}
 
+		w.Header().Set("Access-Control-Allow-Origin", env.CorsOrigin)
+		w.Header().Set("Vary", "Origin")
 		w.Header().Set("Content-Type", "application/json")
 
 		artistId := r.FormValue("id")
@@ -162,7 +164,10 @@ func ByGenre(env *env.Env) routes.Handler {
 			return
 		}
 
+		w.Header().Set("Access-Control-Allow-Origin", env.CorsOrigin)
+		w.Header().Set("Vary", "Origin")
 		w.Header().Set("Content-Type", "application/json")
+
 		genreName := r.FormValue("genre_name")
 		if genreName != "" {
 			rows, err := env.Db.Db.Query(`
diff --git a/backend/routes/genre/genre.go b/backend/routes/genre/genre.go
index 06dfa8e..89a4deb 100644
--- a/backend/routes/genre/genre.go
+++ b/backend/routes/genre/genre.go
@@ -16,6 +16,8 @@ func Index(env *env.Env) routes.Handler {
 			return
 		}
 
+		w.Header().Set("Access-Control-Allow-Origin", env.CorsOrigin)
+		w.Header().Set("Vary", "Origin")
 		w.Header().Set("Content-Type", "application/json")
 
 		genreName := r.FormValue("name")
-- 
2.20.1