From a543d1fde32da3ba53e27eeb3333852da7adb86b Mon Sep 17 00:00:00 2001
From: Agusti Fernandez Pardo <git@agusti.me>
Date: Fri, 15 Apr 2022 17:29:03 +0200
Subject: [PATCH 1/2] disable middleware for cors

---
 pages/api/docs.ts | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/pages/api/docs.ts b/pages/api/docs.ts
index e4f721bb8f..34ad0d7c5e 100644
--- a/pages/api/docs.ts
+++ b/pages/api/docs.ts
@@ -2,7 +2,6 @@ import jsonSchema from "@/json-schema/json-schema.json";
 import pjson from "@/package.json";
 import { withSwagger } from "next-swagger-doc";
 
-import { withCors } from "@lib/helpers/withCors";
 import { withCorsMiddleware } from "@lib/helpers/withCorsMiddleware";
 
 const swaggerHandler = withSwagger({
@@ -19,4 +18,4 @@ const swaggerHandler = withSwagger({
   tags: ["users", "teams", "memeberships"],
   sort: true,
 });
-export default withCorsMiddleware()(swaggerHandler());
+export default swaggerHandler();

From 02855ef0202c51a93d61e2c9ac5d95ef1b1a1f6c Mon Sep 17 00:00:00 2001
From: Agusti Fernandez Pardo <git@agusti.me>
Date: Fri, 15 Apr 2022 17:35:05 +0200
Subject: [PATCH 2/2] disable cors

---
 next.config.js | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/next.config.js b/next.config.js
index acf9c9830c..fa5bc84e10 100644
--- a/next.config.js
+++ b/next.config.js
@@ -10,6 +10,24 @@ const withTM = require("next-transpile-modules")([
 // use something like withPlugins([withTM], {}) if more plugins added later.
 
 module.exports = withTM({
+  async headers() {
+    return [
+      {
+        // matching all API routes
+        source: "/api/:path*",
+        headers: [
+          { key: "Access-Control-Allow-Credentials", value: "true" },
+          { key: "Access-Control-Allow-Origin", value: "*" },
+          { key: "Access-Control-Allow-Methods", value: "GET,OPTIONS,PATCH,DELETE,POST,PUT" },
+          {
+            key: "Access-Control-Allow-Headers",
+            value:
+              "X-CSRF-Token, X-Requested-With, Accept, Accept-Version, Content-Length, Content-MD5, Content-Type, Date, X-Api-Version, Content-Type, api_key, Authorization",
+          },
+        ],
+      },
+    ];
+  },
   async rewrites() {
     return [
       // This redirects requests recieved at / the root to the /api/ folder.