fix(api): update enableCors logic

This commit is contained in:
yassinedorbozgithub 2025-06-24 11:21:51 +01:00
parent 69c508dfe8
commit 3790621907

View File

@ -50,17 +50,21 @@ async function bootstrap() {
const settingService = app.get<SettingService>(SettingService); const settingService = app.get<SettingService>(SettingService);
app.enableCors({ app.enableCors({
origin: async (origin, callback) => { origin: (origin, callback) => {
await settingService if (!origin) {
.getAllowedOrigins() callback(null, true);
.then((allowedOrigins) => { } else {
if (!origin || allowedOrigins.includes(origin)) { settingService
callback(null, true); .getAllowedOrigins()
} else { .then((allowedOrigins) => {
callback(new Error('Not allowed by CORS')); if (allowedOrigins.includes(origin)) {
} callback(null, true);
}) } else {
.catch(callback); callback(new Error(`Not allowed by CORS : ${origin}`));
}
})
.catch(callback);
}
}, },
methods: config.security.cors.methods, methods: config.security.cors.methods,
credentials: config.security.cors.allowCredentials, credentials: config.security.cors.allowCredentials,