fix(#1329248): Fix nelmio_cors config and env variable CORS_ALLOW_ORIGIN not corectly configured in compose.yml

Author: botisSmile

api/config/packages/nelmio_cors.yaml

@@ -1,9 +1,11 @@
 nelmio_cors:
     defaults:
+        allow_credentials: true
+        allow_private_network: true
         origin_regex: true
         allow_origin: ['%env(CORS_ALLOW_ORIGIN)%']
         allow_methods: ['GET', 'OPTIONS', 'POST', 'PUT', 'PATCH', 'DELETE']
-        allow_headers: ['Content-Type', 'Authorization', 'Preload', 'Fields']
+        allow_headers: ['Accept', 'Accept-Language', 'Content-Type', 'Authorization', 'Preload', 'Fields', 'User-Agent', 'Priority', 'Pragma', 'Cache-Control']
         expose_headers: ['Link']
         max_age: 3600
     paths:

compose.yml

@@ -82,7 +82,7 @@ services:
       - API_ROUTE_PREFIX=${API_ROUTE_PREFIX:-api}
       - TRUSTED_PROXIES=${TRUSTED_PROXIES:-127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16}
       - TRUSTED_HOSTS=${TRUSTED_HOSTS:-^${SERVER_NAME:-|gally.localhost}|localhost|php$$}
-      - CORS_ALLOW_ORIGIN=^https?://${SERVER_NAME:-gally.localhost}$
+      - CORS_ALLOW_ORIGIN=${CORS_ALLOW_ORIGIN:-^https?://${SERVER_NAME:-gally.localhost}$}
       - GALLY_CATALOG_MEDIA_URL=${GALLY_CATALOG_MEDIA_URL:-https://${SERVER_NAME:-gally.localhost}/media/catalog/product/}
       - DATABASE_URL=postgresql://${POSTGRES_USER:-app}:${POSTGRES_PASSWORD:-!ChangeMe!}@database:5432/${POSTGRES_DB:-app}?serverVersion=${POSTGRES_VERSION:-16}&charset=${POSTGRES_CHARSET:-utf8}
       - ELASTICSEARCH_URL=https://${SEARCH_USER:-admin}:${SEARCH_PASSWORD:-!ChangeMe0!}@${SEARCH_HOST:-search}:9200/