How can I add support for Cross-Origin Resource Sharing (CORS) requests in order to fetch assets from Github Enterprise?

[MarcoKouyate]

Select Topic Area

Question

Body

Hello all,

Context

In order to use asset tokens in the Token Studio plugin for Figma, I need to store images in a web server. The plugin can then fetch those assets by using their URL. I'm considering storing those assets in a private repo with our Github Enterprise workspace.

Issue

However, it needs to meet some requirements in order to work with the plugin:

• The assets should not be publicly accessible without auth credentials included in the url
• The host server need to include CORS compliant headers (otherwise the Figma plugin can't fetch the resource)

My questions

• Is it possible to configure a private repo within Github Enterprise in order to fetch assets with CORS complient requests from Figma's domain?
• Is it possible to include an authentification token on the asset's url in order to keep it from being publicly exposed?