Radmehr/heala-backend
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

temp: pass all origins for cors

Browse Source
This commit is contained in:
Radmehr
2026-07-24 22:05:39 +03:30
parent 4075fcf5bf
commit e0778547d7
1 changed files with 34 additions and 30 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/main.ts
+34 -30
View File
@@ -37,40 +37,44 @@ async function bootstrap() {
const configService = app.get(ConfigService);
const origins = configService.get<string[]>('app.corsOrigins');
const subdomain = configService.get<string>('app.corsSubdomain');
console.log(subdomain, origins);
app.enableCors({
origin: (origin: string, callback: any) => {
if (!origin) {
// eslint-disable-next-line @typescript-eslint/no-unsafe-return, @typescript-eslint/no-unsafe-call
return callback(null, true);
}
if (origins?.includes(origin)) {
// eslint-disable-next-line @typescript-eslint/no-unsafe-return, @typescript-eslint/no-unsafe-call
return callback(null, true);
}
try {
const hostname = new URL(origin).hostname;
if (hostname === subdomain || hostname.endsWith(`.${subdomain}`)) {
// eslint-disable-next-line @typescript-eslint/no-unsafe-return, @typescript-eslint/no-unsafe-call
return callback(null, true);
}
} catch {
/* empty */
}
// eslint-disable-next-line @typescript-eslint/no-unsafe-call
callback(new Error('Not allowed by CORS'));
},
origin: true,
credentials: true,
});
// TODO: Uncomment
// const origins = configService.get<string[]>('app.corsOrigins');
// const subdomain = configService.get<string>('app.corsSubdomain');
// app.enableCors({
// origin: (origin: string, callback: any) => {
// if (!origin) {
// // eslint-disable-next-line @typescript-eslint/no-unsafe-return, @typescript-eslint/no-unsafe-call
// return callback(null, true);
// }
// if (origins?.includes(origin)) {
// // eslint-disable-next-line @typescript-eslint/no-unsafe-return, @typescript-eslint/no-unsafe-call
// return callback(null, true);
// }
// try {
// const hostname = new URL(origin).hostname;
// if (hostname === subdomain || hostname.endsWith(`.${subdomain}`)) {
// // eslint-disable-next-line @typescript-eslint/no-unsafe-return, @typescript-eslint/no-unsafe-call
// return callback(null, true);
// }
// } catch {
// /* empty */
// }
// // eslint-disable-next-line @typescript-eslint/no-unsafe-call
// callback(new Error('Not allowed by CORS'));
// },
// credentials: true,
// });
app.use(helmet());
const config = new DocumentBuilder()