CORS

[ghost]

Since the application may be accessed from a web page that is hosted on a different host/ port, the CORS headers have to be set accordingly.

Note that the custom headers also need to be supported. See DigitalGreenCertificateResource.java. The configuration should be done using environment variables via the application.properties file. One should be able to specify the host/ port from where the backend should be reached.

Quarkus already supports setting the values through the application.properties. The settings should be as restrictive as possible without affecting the applications functionality.

This issue has been mentioned before by @richard-infai .