[FIX TRTL-387] Fix mobile authent : add cors to cas conf

deployment/environments/group_vars/all/vitamui_vars.yml

@@ -168,6 +168,7 @@ vitamui:
       root_log_level: "ERROR"
       vitamui_level: "INFO"
     reset_password_url: /extras/resetPassword?username={username}&firstname={firstname}&lastname={lastname}&language={language}&ttl=1day
+    cors.enabled: false
   security_internal:
     host: "vitamui-security-internal.service.consul"
     vitamui_component: "security-internal"

deployment/roles/vitamui/templates/cas-server/application.yml.j2

@@ -198,3 +198,12 @@ logging:
     fr.gouv.vitamui.cas: DEBUG
     org.elasticsearch.metrics: DEBUG
     fr.gouv.vitamui.commons: DEBUG
+
+{% if vitamui.cas_server.cors.enabled|lower == "true" %}
+# Cas CORS (necessary for mobile app)
+cas.httpWebRequest.cors.enabled: true
+cas.httpWebRequest.cors.allowCredentials: false
+cas.httpWebRequest.cors.allowOrigins: ['*']
+cas.httpWebRequest.cors.allowMethods: ['*']
+cas.httpWebRequest.cors.allowHeaders: ['*']
+{% endif %}
\ No newline at end of file