Function origin_is_allowed

packages/server/src/auth.rs:230–241

(config: &Config, origin: &str)

}

fn origin_is_allowed(config: &Config, origin: &str) -> bool {
    let allowed = [
        format!("http://{}:{}", config.advertise_host, config.http_port),
        format!("http://{}:{}", config.bind_ip, config.http_port),
        format!("http://localhost:{}", config.http_port),
        format!("http://127.0.0.1:{}", config.http_port),
        format!("http://[::1]:{}", config.http_port),
    ];
    allowed.iter().any(|value| value == origin)
        || LAUNCHPAD_ORIGINS.contains(&origin)
        || extra_allowed_origins().any(|value| value == "*" || value == origin)
}

fn origin_is_cors_allowed(config: &Config, origin: &str) -> bool {
    origin == "null" || origin_is_allowed(config, origin)