shishantbiswas/AniKotoAPI
1
0
Fork 0
mirror of https://github.com/Shineii86/AniKotoAPI.git synced 2026-10-22 02:45:10 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: CORS header missing when ALLOWED_ORIGINS env not set

Browse Source 
Browser blocks cross-origin requests from AniKotoWeb because
Access-Control-Allow-Origin was never set when ALLOWED_ORIGINS
was undefined on Vercel. Changed condition to allow all origins
when env var is not configured.
This commit is contained in:
Sʜɪɴᴇɪ Nᴏᴜᴢᴇɴ
2026-06-09 11:05:16 +05:30
parent 7d621e2e37
commit 30feda703a
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server.js
+1 -1
View File
@@ -46,7 +46,7 @@ const allowedOrigins = process.env.ALLOWED_ORIGINS?.split(",");
// NOTE: Single unified CORS middleware — handles all origin validation // NOTE: Single unified CORS middleware — handles all origin validation
app.use((req, res, next) => { app.use((req, res, next) => {
const origin = req.headers.origin; const origin = req.headers.origin;
if (allowedOrigins && (allowedOrigins.includes("*") || (origin && allowedOrigins.includes(origin)))) { if (!allowedOrigins || allowedOrigins.includes("*") || (origin && allowedOrigins.includes(origin))) {
res.setHeader("Access-Control-Allow-Origin", origin || "*"); res.setHeader("Access-Control-Allow-Origin", origin || "*");
} }
res.setHeader("Access-Control-Allow-Methods", "GET"); res.setHeader("Access-Control-Allow-Methods", "GET");