35.19Cross-Origin Resource Sharing (CORS)

The Cross-Origin Resource Sharing (CORS) configuration category includes the following configurable options:

35.19.1Property: CORS Enabled

Property Name	CORS Enabled
Property Key
Property Type	BOOLEAN
Description	Should this endpoint allow the use of CORS? Enable this item only if you understand what it is doing.
Applies to Modules	App Management Tools CDS-Hooks REST Endpoint FHIR Gateway REST Endpoint FHIR REST Endpoint (DSTU2) FHIR REST Endpoint (R3) FHIR REST Endpoint (R4) Hybrid Providers REST Endpoint JSON Admin API Package Registry Endpoint SMART App Host (Deprecated) SMART Outbound Security
Default Value	`false`
Example Property	`module.[MODULE_ID].config.cors.enable = false`

Property Name	CORS Origins
Property Key
Property Type	STRING
Description	A comma-separated list of allowable origins for the CORS filter. For example: `https://example.com, https://try.smilecdr.com:9201`. You may also use the wildcard value `*` to allow CORS for all domains, however this is generally not considered a good practice for production systems serving sensitive data.
Applies to Modules	App Management Tools CDS-Hooks REST Endpoint FHIR Gateway REST Endpoint FHIR REST Endpoint (DSTU2) FHIR REST Endpoint (R3) FHIR REST Endpoint (R4) Hybrid Providers REST Endpoint JSON Admin API Package Registry Endpoint SMART App Host (Deprecated) SMART Outbound Security
Default Value	`*`
Example Property	`module.[MODULE_ID].config.cors.origins = *`