fix: use callback function for cors

Dwigoric · Nov 14, 2023 · ca41cbd · ca41cbd
1 parent 716519b
commit ca41cbd
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/src/app.js b/src/app.js
@@ -27,11 +27,15 @@ const app = express()
 
 // Configure CORS
 const whitelist = []
-if (!process.env.FRONTEND_URL) console.warn('FRONTEND_URLS not set, allowing all origins')
+if (!process.env.FRONTEND_URLS) console.warn('FRONTEND_URLS not set, allowing all origins')
 else whitelist.push(...process.env.FRONTEND_URL.split(','))
 app.use(
     cors({
-        origin: (origin) => whitelist.length === 0 || whitelist.includes(origin),
+        origin: (origin, callback) => {
+            whitelist.length === 0 || whitelist.includes(origin)
+                ? callback(null, true)
+                : callback(new Error('Not allowed by CORS'))
+        },
         optionsSuccessStatus: 200
     })
 )