This commit is contained in:
Yassine 2025-06-26 18:10:01 +01:00 committed by GitHub
commit eface47bf3
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -50,17 +50,21 @@ async function bootstrap() {
const settingService = app.get<SettingService>(SettingService); const settingService = app.get<SettingService>(SettingService);
app.enableCors({ app.enableCors({
origin: async (origin, callback) => { origin: (origin, callback) => {
await settingService if (!origin) {
.getAllowedOrigins()
.then((allowedOrigins) => {
if (!origin || allowedOrigins.includes(origin)) {
callback(null, true); callback(null, true);
} else { } else {
callback(new Error('Not allowed by CORS')); settingService
.getAllowedOrigins()
.then((allowedOrigins) => {
if (allowedOrigins.includes(origin)) {
callback(null, true);
} else {
callback(new Error(`Not allowed by CORS : ${origin}`));
} }
}) })
.catch(callback); .catch(callback);
}
}, },
methods: config.security.cors.methods, methods: config.security.cors.methods,
credentials: config.security.cors.allowCredentials, credentials: config.security.cors.allowCredentials,