Set arbitrary headers for APIG (will enable CORS)

Currently I can define a resource like this:

@app.route('/scalars', methods=['GET', 'OPTIONS']) def scalars(): return { 'mau': 27048, 'wau: 7003 }'

The OPTIONS will help me with enabling CORS in APIG But I’m still missing the ‘Access-Control-Allow-Origin’ header, so I enable it manually in the console after each deploy.

One approach would be to configure headers in the method. Another would be to call the “Enable CORS” magic button in APIG.

WDYT?

[dmulter]

The CORS support is nice, but I see that the cors=True wasn’t made part of Chalice instantiation. I have lots of routes and it would be nicer if I could just turn it on for everything. Not sure what others think.

[chrisgilmerproj]

I like the above. One thing that I’d want is to ensure that the CORS headers are on all the response codes, not just 200. Otherwise I’ll still have to go in and update 400, 403, 404, etc.