Expand description
Axum router wiring. Mounts the §2.1 P2 routes + the WS endpoint.
Functions§
- build_
cors_ layer - Build the audited CORS allowlist layer (HC-05). Exposed so the
integration binary can apply the SAME allowlist to routes merged in
outside
router()(e.g. the ADR-131 BFF gateway), instead of leaving/api/homecore/*and/api/cal/*with no CORS coverage at all. - router
- Build the Axum router with an EXPLICIT CORS allowlist (audit fix
HC-05). The previous
CorsLayer::permissive()setAccess-Control-Allow-Origin: *which lets any webpage make authenticated cross-origin calls once a bearer is leaked.