move CORS allowance to the REST API router

server.ts

@@ -84,7 +84,8 @@ import { UpdateVideosScheduler } from './server/lib/schedulers/update-videos-sch
 
 // ----------- App -----------
 
-// Enable CORS
+// Enable CORS for develop
+if (isTestInstance()) {
   app.use((req, res, next) => {
     // These routes have already cors
     if (
@@ -100,6 +101,7 @@ app.use((req, res, next) => {
 
     return next()
   })
+}
 
 // For the logger
 app.use(morgan('combined', {

server/controllers/api/index.ts

@@ -8,9 +8,16 @@ import { accountsRouter } from './accounts'
 import { videosRouter } from './videos'
 import { badRequest } from '../../helpers/express-utils'
 import { videoChannelRouter } from './video-channel'
+import * as cors from 'cors'
 
 const apiRouter = express.Router()
 
+apiRouter.use(cors({
+  origin: '*',
+  exposedHeaders: 'Retry-After',
+  credentials: true
+}))
+
 apiRouter.use('/server', serverRouter)
 apiRouter.use('/oauth-clients', oauthClientsRouter)
 apiRouter.use('/config', configRouter)