Patch: Updated CORS Headers

resuminator · Sep 26, 2021 · 17a73e6 · 17a73e6
1 parent 8b0cc04
commit 17a73e6
Showing 1 changed file with 9 additions and 7 deletions.
diff --git a/middleware/allowCors.ts b/middleware/allowCors.ts
@@ -11,19 +11,21 @@ const allowCors =
       };
     }
   ) => {
+    const origin = process.env.NEXT_PUBLIC_R8
+      ? process.env.NEXT_PUBLIC_R8.toString()
+      : "";
+
     res.setHeader("Access-Control-Allow-Credentials", true);
-    res.setHeader("Access-Control-Allow-Origin", "*");
-    // another common pattern
-    // res.setHeader('Access-Control-Allow-Origin', req.headers.origin);
-    res.setHeader(
-      "Access-Control-Allow-Methods",
-      "GET,OPTIONS,PATCH,DELETE,POST,PUT"
-    );
+    res.setHeader("Access-Control-Allow-Origin", origin);
+    res.setHeader("Access-Control-Allow-Methods", "GET,OPTIONS");
     res.setHeader("Access-Control-Allow-Headers", "*");
+
+    //To handle preflight requests
     if (req.method === "OPTIONS") {
       res.status(200).end();
       return;
     }
+
     return await fn(req, res);
   };