Add CORs headers to rss feeds

[kookster]

user request:

I am a long time listener of Darknet Diaries and I found PRX through the podcast.

I was wondering if PRX can look into enabling Cross Site Resource Sharing on the episodes it hosts. This would allow developers to build feature rich custom podcast players on the web without needing to go iOS or Android native.

I did check, and other hosts like megaphone do set the headers to enable this.

[kookster]

also look at DTR audio urls for CORs headers

[cavis]

Fixed this in DTR with https://github.com/PRX/dovetail-router.prx.org/pull/393.

We should also tackle the dovetail-cdn and feed-cdn. What else do we need? Add OPTIONS to the CloudFront methods, and maybe something like this CorsConfiguration on the S3 bucket?

[kookster]

My understanding is we need this on the public facing endpoints, so that would be the feeds and the enclosure audio urls

so that would be f.prxu.org, publicfeeds.net, and dovetail-cdn.prxu.org for s3 backed CF distributions.

So that would be adding CORs headers and OPTIONS response support

[kookster]

Oh, and for custom domains using CF, I would say we do not update all of the existing ones, but do update the template moving forward, and on DD https://podcast.darknetdiaries.com/

[farski]

• publicfeeds.net/f/…
  • GET test
  • OPTIONS test
• dovetail.prxu.org/_/…
  • GET
  • OPTIONS
• dovetail-cdn.prxu.org/…
  • GET test
  • OPTIONS
• f.prxu.org/…
  • GET test
  • OPTIONS test
• https://podcast.darknetdiaries.com/
  • GET
  • OPTIONS