This commit is contained in:
rgrgogu
2026-05-12 12:46:59 +08:00
parent d3ff140688
commit 06c4286c4a
+6 -1
View File
@@ -47,8 +47,13 @@ const PORT = process.env.PORT || 3000;
// ──────────────────────────────────────────────────────────────────────────────
app.set('trust proxy', 1); // Required for rate-limiter behind proxies/load balancers
const allowedOrigins = (process.env.ALLOWED_ORIGINS || process.env.APP_URL || '*').split(',');
app.use(cors({
origin: process.env.APP_URL || '*',
origin: (origin, callback) => {
if (!origin || allowedOrigins.includes(origin)) return callback(null, true);
callback(new Error(`CORS: origin ${origin} not allowed`));
},
credentials: true,
}));