read Access-Control-Allow-Origin from env

This commit is contained in:
Shirtiny 2023-02-11 14:48:50 +00:00
parent 4d7c51831b
commit b7aa9f934c

View File

@ -133,6 +133,7 @@ async function checkVersion() {
*/
async function consturctServer(moduleDefs) {
const app = express()
const { CORS_ALLOW_ORIGIN } = process.env
app.set('trust proxy', true)
/**
@ -142,7 +143,8 @@ async function consturctServer(moduleDefs) {
if (req.path !== '/' && !req.path.includes('.')) {
res.set({
'Access-Control-Allow-Credentials': true,
'Access-Control-Allow-Origin': req.headers.origin || '*',
'Access-Control-Allow-Origin':
CORS_ALLOW_ORIGIN || req.headers.origin || '*',
'Access-Control-Allow-Headers': 'X-Requested-With,Content-Type',
'Access-Control-Allow-Methods': 'PUT,POST,GET,DELETE,OPTIONS',
'Content-Type': 'application/json; charset=utf-8',