(airavata-custos) 11/15: Parameterize portal origin in the CORS allowlist

[la...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

lahirujayathilake pushed a commit to branch auth-endpoints
in repository https://gitbox.apache.org/repos/asf/airavata-custos.git

commit 7a2623d0191dbffa9de9ba198ecf8d4bd7882893
Author: lahiruj <la...@gmail.com>
AuthorDate: Tue Jun 16 22:09:54 2026 -0400

    Parameterize portal origin in the CORS allowlist
    
    Co-Authored-By: Claude Opus 4.7 <no...@anthropic.com>
---
 config/custos.yaml         | 2 +-
 config/custos.yaml.example | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/config/custos.yaml b/config/custos.yaml
index 7e0b7ab84..5ae769950 100644
--- a/config/custos.yaml
+++ b/config/custos.yaml
@@ -9,7 +9,7 @@ core:
   cors:
     allowed_origins:
       - "http://localhost:3000"
-      - "https://portal.dev.nexus.cybershuttle.org"
+      - "${CUSTOS_PORTAL_ORIGIN}"
   log_level: "info"
 
 connectors:
diff --git a/config/custos.yaml.example b/config/custos.yaml.example
index 01174db69..26749adc8 100644
--- a/config/custos.yaml.example
+++ b/config/custos.yaml.example
@@ -16,6 +16,7 @@ core:
   cors:
     allowed_origins:                # browser callers; empty list disables CORS
       - "http://localhost:3000"
+      - "${CUSTOS_PORTAL_ORIGIN}"   # deployed portal URL, set per environment
   log_level: "info"
 
 connectors: