Add host_authorization setting for dev environment

Sinatra 4.1 ships with a breaking change that [enables host allowlisting middleware][1] in local development, which in turn breaks running Search API through GOV.UK Docker. This adds an explicit `permitted_hosts` setting for the middleware, which includes the `search-api.dev.gov.uk` host used by GOV.UK Docker. [1]: sinatra/sinatra#2053
alphagov · Nov 20, 2024 · 8aa119d · 8aa119d
1 parent ce63f15
commit 8aa119d
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/lib/rummager/config.rb b/lib/rummager/config.rb
@@ -3,6 +3,16 @@
 
 configure :development do
   set :protection, false
+  set :host_authorization, {
+    permitted_hosts: [
+      "search-api.dev.gov.uk",
+      "localhost",
+      ".localhost",
+      ".test",
+      IPAddr.new("0.0.0.0/0"),
+      IPAddr.new("::/0"),
+    ],
+  }
 end
 
 # Enable custom error handling (eg ``error Exception do;...end``)