added CORS header for specific routes

src/Application/Route.php

@@ -8,6 +8,7 @@
 use kissj\Entry\EntryController;
 use kissj\Event\EventController;
 use kissj\Export\ExportController;
+use kissj\Middleware\AddCorsHeaderForAppDomainsMiddleware;
 use kissj\Middleware\AdminPaymentsOnlyMiddleware;
 use kissj\Middleware\AdminsOnlyMiddleware;
 use kissj\Middleware\ApiAuthorizedOnlyMiddleware;
@@ -309,10 +310,12 @@ public function addRoutesInto(App $app): App
 
                 $app->post('/participant/{participantId}', EntryController::class . '::entryParticipantFromWebApp')
                     ->add(ApiAuthorizedOnlyMiddleware::class)
+                    ->add(AddCorsHeaderForAppDomainsMiddleware::class)
                     ->setName('entry-participant-from-web-app');
 
                 $app->post('/troop/{participantId}', EntryController::class . '::entryTroopFromWebApp')
                     ->add(ApiAuthorizedOnlyMiddleware::class)
+                    ->add(AddCorsHeaderForAppDomainsMiddleware::class)
                     ->setName('entry-troop-from-web-app');
             });
 

src/Middleware/AddCorsHeaderForAppDomainsMiddleware.php

@@ -0,0 +1,21 @@
+<?php
+
+declare(strict_types=1);
+
+namespace kissj\Middleware;
+
+use Psr\Http\Message\ResponseInterface as Response;
+use Psr\Http\Message\ServerRequestInterface as Request;
+use Psr\Http\Server\RequestHandlerInterface as ResponseHandler;
+
+class AddCorsHeaderForAppDomainsMiddleware extends BaseMiddleware
+{
+
+    public function process(Request $request, ResponseHandler $handler): Response
+    {
+        $response = $handler->handle($request);
+        $response = $response->withAddedHeader('Access-Control-Allow-Origin', 'https://kissj.skauting.net');
+
+        return $response;
+    }
+}