meienberger/runtipi
1
1
Fork 0
mirror of https://github.com/meienberger/runtipi.git synced 2024-10-04 23:58:15 +03:00
Code Issues Projects Releases Wiki Activity

Apply cors at the Apollo level

Browse Source
This commit is contained in:
Nicolas Meienberger 2022-07-20 22:15:38 +02:00
parent bc31b51631
commit 7c646c9ec5
1 changed files with 17 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

35
packages/system-api/src/server.ts
View File

@ -15,27 +15,27 @@ import datasource from './config/datasource';
import appsService from './modules/apps/apps.service';
import { runUpdates } from './core/updates/run';
const corsOptions = {
credentials: true,
origin: function (origin: any, callback: any) {
// disallow requests with no origin
if (!origin) return callback(new Error('Not allowed by CORS'), false);
if (config.CLIENT_URLS.includes(origin)) {
return callback(null, true);
}
const message = "The CORS policy for this origin doesn't allow access from the particular origin.";
return callback(new Error(message), false);
},
};
const main = async () => {
try {
const app = express();
const port = 3001;
app.use(
cors({
credentials: true,
origin: function (origin, callback) {
// disallow requests with no origin
if (!origin) return callback(new Error('Not allowed by CORS'), false);
if (config.CLIENT_URLS.includes(origin)) {
return callback(null, true);
}
const message = "The CORS policy for this origin doesn't allow access from the particular origin.";
return callback(new Error(message), false);
},
}),
);
app.use(cors(corsOptions));
app.use(getSessionMiddleware());
await datasource.initialize();
@ -59,7 +59,7 @@ const main = async () => {
});
await apolloServer.start();
apolloServer.applyMiddleware({ app });
apolloServer.applyMiddleware({ app, cors: corsOptions });
// Run migrations
await runUpdates();
@ -67,7 +67,6 @@ const main = async () => {
httpServer.listen(port, () => {
// Start apps
appsService.startAllApps();
logger.info(`Server running on port ${port}`);
});
} catch (error) {