fix: use cors whitelist as-is

Dwigoric · Nov 14, 2023 · a05a12c · a05a12c
1 parent 483865e
commit a05a12c
Showing 1 changed file with 1 addition and 5 deletions.
diff --git a/src/app.js b/src/app.js
@@ -31,11 +31,7 @@ if (!process.env.FRONTEND_URLS) console.warn('FRONTEND_URLS not set, allowing al
 else whitelist.push(...process.env.FRONTEND_URLS.split(','))
 app.use(
     cors({
-        origin: (origin, callback) => {
-            whitelist.length === 0 || whitelist.includes(origin)
-                ? callback(null, true)
-                : callback(new Error('Not allowed by CORS'))
-        },
+        origin: whitelist.length === 0 ? true : whitelist,
         optionsSuccessStatus: 200
     })
 )