From f3cde45f330d0d969261066b2b92aeb05fff30db Mon Sep 17 00:00:00 2001
From: Brandon Thomas <echelon@gmail.com>
Date: Sun, 6 Oct 2024 12:00:07 -0400
Subject: [PATCH] storyteller render cors

---
 .../lib/actix_cors_configs/src/configs/mod.rs |  5 +-
 .../src/configs/storyteller_render.rs         | 61 +++++++++++++++++++
 crates/lib/actix_cors_configs/src/cors.rs     |  4 +-
 3 files changed, 67 insertions(+), 3 deletions(-)
 create mode 100644 crates/lib/actix_cors_configs/src/configs/storyteller_render.rs

diff --git a/crates/lib/actix_cors_configs/src/configs/mod.rs b/crates/lib/actix_cors_configs/src/configs/mod.rs
index ab0878b97f..d4b7c82ce0 100644
--- a/crates/lib/actix_cors_configs/src/configs/mod.rs
+++ b/crates/lib/actix_cors_configs/src/configs/mod.rs
@@ -2,5 +2,6 @@ pub (crate) mod development_only;
 pub (crate) mod fakeyou;
 pub (crate) mod legacy;
 pub (crate) mod storyteller;
-pub (crate) mod storyteller_studio;
-pub (crate) mod storyteller_board;
\ No newline at end of file
+pub (crate) mod storyteller_board;
+pub (crate) mod storyteller_render;
+pub (crate) mod storyteller_studio;
\ No newline at end of file
diff --git a/crates/lib/actix_cors_configs/src/configs/storyteller_render.rs b/crates/lib/actix_cors_configs/src/configs/storyteller_render.rs
new file mode 100644
index 0000000000..4062b1fa9a
--- /dev/null
+++ b/crates/lib/actix_cors_configs/src/configs/storyteller_render.rs
@@ -0,0 +1,61 @@
+use actix_cors::Cors;
+
+use crate::util::netlify_branch_domain_matches::netlify_branch_domain_matches;
+
+pub fn add_storyteller_render(cors: Cors, _is_production: bool) -> Cors {
+  cors
+      // Hypothetical domains
+      .allowed_origin("https://render.storyteller.ai")
+      // Netlify project
+      .allowed_origin_fn(|origin, _req_head| {
+        netlify_branch_domain_matches(origin, "storyteller-render.netlify.app")
+      })
+}
+
+#[cfg(test)]
+mod tests {
+  use reusable_types::server_environment::ServerEnvironment;
+
+  use crate::cors::build_cors_config;
+  use crate::testing::assert_origin_invalid;
+  use crate::testing::assert_origin_ok;
+
+  mod domains {
+    use super::*;
+
+    #[actix_rt::test]
+    async fn board_dot_storyteller() {
+      let production_cors = build_cors_config(ServerEnvironment::Production);
+      assert_origin_ok(&production_cors, "https://render.storyteller.ai").await;
+    }
+  }
+
+  mod netlify {
+    use super::*;
+
+    #[actix_rt::test]
+    async fn netlify_main() {
+      let production_cors = build_cors_config(ServerEnvironment::Production);
+      assert_origin_ok(&production_cors, "https://storyteller-render.netlify.app").await;
+    }
+
+    #[actix_rt::test]
+    async fn netlify_branch_deploy() {
+      let production_cors = build_cors_config(ServerEnvironment::Production);
+      assert_origin_ok(&production_cors, "https://test--storyteller-render.netlify.app").await;
+    }
+
+    #[actix_rt::test]
+    async fn netlify_deploy_preview() {
+      let production_cors = build_cors_config(ServerEnvironment::Production);
+      assert_origin_ok(&production_cors, "https://deploy-preview-123--storyteller-render.netlify.app").await;
+    }
+
+    #[actix_rt::test]
+    async fn invalid_netlify_preview_deploy() {
+      let production_cors = build_cors_config(ServerEnvironment::Production);
+      assert_origin_invalid(&production_cors, "https://storyteller-render--unrelated.netlify.app").await;
+      assert_origin_invalid(&production_cors, "https://deploy-preview-123--unrelated.netlify.app").await;
+    }
+  }
+}
diff --git a/crates/lib/actix_cors_configs/src/cors.rs b/crates/lib/actix_cors_configs/src/cors.rs
index 541892f92a..e48425a232 100644
--- a/crates/lib/actix_cors_configs/src/cors.rs
+++ b/crates/lib/actix_cors_configs/src/cors.rs
@@ -5,10 +5,11 @@ use reusable_types::server_environment::ServerEnvironment;
 
 use crate::configs::development_only::add_development_only;
 use crate::configs::fakeyou::{add_fakeyou, add_fakeyou_dev_proxy};
-use crate::configs::storyteller_studio::add_storyteller_studio;
 use crate::configs::legacy::{add_legacy_storyteller_stream, add_legacy_trumped, add_legacy_vocodes, add_power_stream};
 use crate::configs::storyteller::{add_storyteller, add_storyteller_dev_proxy};
 use crate::configs::storyteller_board::add_storyteller_board;
+use crate::configs::storyteller_render::add_storyteller_render;
+use crate::configs::storyteller_studio::add_storyteller_studio;
 
 /// Return cors config for FakeYou / Vocodes / OBS / local development
 pub fn build_cors_config(server_environment: ServerEnvironment) -> Cors {
@@ -37,6 +38,7 @@ fn do_build_cors_config(is_production: bool) -> Cors {
   cors = add_storyteller_dev_proxy(cors, is_production);
   cors = add_storyteller_studio(cors, is_production);
   cors = add_storyteller_board(cors, is_production);
+  cors = add_storyteller_render(cors, is_production);
 
   // Legacy
   cors = add_legacy_trumped(cors, is_production);