Get CORS settings

//native

type Codat = {

	encodedKey: string

}

/**

 * Get CORS settings

 * The *Get CORS settings* endpoint returns the allowed origins (i.e. your domains) you want to allow cross-origin resource sharing ([CORS](https://en.wikipedia.org/wiki/Cross-origin_resource_sharing)) with Codat. 

Enabling CORS with Codat is required by our embeddable UIs (such as [Connections SDK](https://docs.codat.io/auth-flow/optimize/connection-management) and [Link SDK](https://docs.codat.io/auth-flow/authorize-embedded-link)) to access Codat's API endpoints.

 */

export async function main(auth: Codat) {

	const url = new URL(`https://api.codat.io/corsSettings`)

	const response = await fetch(url, {

		method: 'GET',

		headers: {

			Authorization: `Basic ${auth.encodedKey}`

		},

		body: undefined

	})

	if (!response.ok) {

		const text = await response.text()

		throw new Error(`${response.status} ${text}`)

	}

	return await response.json()

}