shishantbiswas/MiruroAPI
1
0
Fork 0
mirror of https://github.com/Shineii86/MiruroAPI.git synced 2026-10-22 10:15:10 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix CORS — allow non-browser requests (no Origin header)

Browse Source
This commit is contained in:
Sʜɪɴᴇɪ Nᴏᴜᴢᴇɴ
2026-06-25 10:42:09 +05:30
parent 8297d8f27d
commit 73b510589e
1 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server.js
+7 -3
View File
@@ -91,9 +91,13 @@ app.use((req, res, next) => {
const isProduction = process.env.VERCEL || process.env.NODE_ENV === "production"; const isProduction = process.env.VERCEL || process.env.NODE_ENV === "production";
if (allowedOrigins && allowedOrigins.length > 0) { if (allowedOrigins && allowedOrigins.length > 0) {
if (allowedOrigins.includes("*") || (origin && allowedOrigins.includes(origin))) { if (allowedOrigins.includes("*")) {
res.setHeader("Access-Control-Allow-Origin", origin || "*"); res.setHeader("Access-Control-Allow-Origin", "*");
} else if (isProduction) { } else if (origin && allowedOrigins.includes(origin)) {
res.setHeader("Access-Control-Allow-Origin", origin);
} else if (!origin && !isProduction) {
res.setHeader("Access-Control-Allow-Origin", "*");
} else if (origin) {
return res.status(403).json({ success: false, message: "Origin not allowed" }); return res.status(403).json({ success: false, message: "Origin not allowed" });
} }
} else { } else {