mirror of
https://github.com/hexastack/hexabot
synced 2025-06-26 18:27:28 +00:00
Merge 3790621907
into d2c3ecf2f8
This commit is contained in:
commit
eface47bf3
@ -50,17 +50,21 @@ async function bootstrap() {
|
||||
|
||||
const settingService = app.get<SettingService>(SettingService);
|
||||
app.enableCors({
|
||||
origin: async (origin, callback) => {
|
||||
await settingService
|
||||
.getAllowedOrigins()
|
||||
.then((allowedOrigins) => {
|
||||
if (!origin || allowedOrigins.includes(origin)) {
|
||||
callback(null, true);
|
||||
} else {
|
||||
callback(new Error('Not allowed by CORS'));
|
||||
}
|
||||
})
|
||||
.catch(callback);
|
||||
origin: (origin, callback) => {
|
||||
if (!origin) {
|
||||
callback(null, true);
|
||||
} else {
|
||||
settingService
|
||||
.getAllowedOrigins()
|
||||
.then((allowedOrigins) => {
|
||||
if (allowedOrigins.includes(origin)) {
|
||||
callback(null, true);
|
||||
} else {
|
||||
callback(new Error(`Not allowed by CORS : ${origin}`));
|
||||
}
|
||||
})
|
||||
.catch(callback);
|
||||
}
|
||||
},
|
||||
methods: config.security.cors.methods,
|
||||
credentials: config.security.cors.allowCredentials,
|
||||
|
Loading…
Reference in New Issue
Block a user