This commit is contained in:
Yassine 2025-06-26 18:10:01 +01:00 committed by GitHub
commit eface47bf3
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -50,17 +50,21 @@ async function bootstrap() {
const settingService = app.get<SettingService>(SettingService); const settingService = app.get<SettingService>(SettingService);
app.enableCors({ app.enableCors({
origin: async (origin, callback) => { origin: (origin, callback) => {
await settingService if (!origin) {
.getAllowedOrigins() callback(null, true);
.then((allowedOrigins) => { } else {
if (!origin || allowedOrigins.includes(origin)) { settingService
callback(null, true); .getAllowedOrigins()
} else { .then((allowedOrigins) => {
callback(new Error('Not allowed by CORS')); if (allowedOrigins.includes(origin)) {
} callback(null, true);
}) } else {
.catch(callback); callback(new Error(`Not allowed by CORS : ${origin}`));
}
})
.catch(callback);
}
}, },
methods: config.security.cors.methods, methods: config.security.cors.methods,
credentials: config.security.cors.allowCredentials, credentials: config.security.cors.allowCredentials,