mirror of
https://github.com/hexastack/hexabot
synced 2025-06-26 18:27:28 +00:00
Merge 3790621907
into d2c3ecf2f8
This commit is contained in:
commit
eface47bf3
@ -50,17 +50,21 @@ async function bootstrap() {
|
|||||||
|
|
||||||
const settingService = app.get<SettingService>(SettingService);
|
const settingService = app.get<SettingService>(SettingService);
|
||||||
app.enableCors({
|
app.enableCors({
|
||||||
origin: async (origin, callback) => {
|
origin: (origin, callback) => {
|
||||||
await settingService
|
if (!origin) {
|
||||||
.getAllowedOrigins()
|
callback(null, true);
|
||||||
.then((allowedOrigins) => {
|
} else {
|
||||||
if (!origin || allowedOrigins.includes(origin)) {
|
settingService
|
||||||
callback(null, true);
|
.getAllowedOrigins()
|
||||||
} else {
|
.then((allowedOrigins) => {
|
||||||
callback(new Error('Not allowed by CORS'));
|
if (allowedOrigins.includes(origin)) {
|
||||||
}
|
callback(null, true);
|
||||||
})
|
} else {
|
||||||
.catch(callback);
|
callback(new Error(`Not allowed by CORS : ${origin}`));
|
||||||
|
}
|
||||||
|
})
|
||||||
|
.catch(callback);
|
||||||
|
}
|
||||||
},
|
},
|
||||||
methods: config.security.cors.methods,
|
methods: config.security.cors.methods,
|
||||||
credentials: config.security.cors.allowCredentials,
|
credentials: config.security.cors.allowCredentials,
|
||||||
|
Loading…
Reference in New Issue
Block a user