feat: add configurable cors origin via env var

betagouv · Oct 31, 2023 · 60d9079 · 60d9079
1 parent a8c2ad1
commit 60d9079
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/src/config/index.ts b/src/config/index.ts
@@ -49,6 +49,9 @@ export default {
   CHATWOOT_ID: process.env.CHATWOOT_ID,
   CHATWOOT_IGNORE_EMAILS: process.env.CHATWOOT_IGNORE_EMAILS || [],
   CHATWOOT_BADGE_ID: process.env.CHATWOOT_BADGE_ID,
+  CORS_ORIGIN: process.env.CORS_ORIGIN
+    ? process.env.CORS_ORIGIN.split(',')
+    : ['https://espace-membre.incubateur.net'],
   domain: process.env.SECRETARIAT_DOMAIN || 'beta.gouv.fr',
   DS_TOKEN: process.env.DS_TOKEN,
   DS_DEMARCHE_NUMBER: process.env.DS_DEMARCHE_NUMBER

diff --git a/src/index.ts b/src/index.ts
@@ -54,7 +54,7 @@ import {
 } from './controllers/startupController/getStartupInfoCreate';
 export const app = express();
 const corsOptions = {
-  origin: ['http://localhost:8100', 'http://localhost:3001'],
+  origin: config.CORS_ORIGIN,
   credentials: true,
   methods: 'POST, PUT, OPTIONS, DELETE, GET',
   allowedHeaders: 'X-Requested-With, Content-Type',