feat: ensure access-control-allow-origin matches public url

2024-12-03 21:40:36 +05:30
parent accd0332a3
commit b97df3522a
1 changed files with 1 additions and 1 deletions
--- a/server/src/server.ts
+++ b/server/src/server.ts
@@ -92,7 +92,7 @@ app.get('/', function (req, res) {

 // Add CORS headers
 app.use((req, res, next) => {
-  res.header('Access-Control-Allow-Origin', '*');
+  res.header('Access-Control-Allow-Origin', process.env.PUBLIC_URL || 'http://localhost:5173');
  res.header('Access-Control-Allow-Methods', 'GET,PUT,POST,DELETE,OPTIONS');
  res.header('Access-Control-Allow-Headers', 'Content-Type, Authorization');
  if (req.method === 'OPTIONS') {