chore: remove strict origin checks

bitsacco · Nov 27, 2024 · a418855 · a418855
1 parent e7758d7
commit a418855
Showing 1 changed file with 2 additions and 8 deletions.
diff --git a/apps/api/src/main.ts b/apps/api/src/main.ts
@@ -69,14 +69,8 @@ function setupCORS(app: INestApplication) {
 
   app.enableCors({
     origin: (origin, callback) => {
-      if (!origin) {
-        callback(new Error('CORS error null origin'), origin);
-      }
-      if (allowedOrigins.indexOf(origin) !== -1) {
-        callback(new Error('Blocked by CORS'), origin);
-      } else {
-        callback(null, origin);
-      }
+      // TODO: Strict CORS origin check in production
+      callback(null, origin);
     },
     methods: 'GET,POST,PUT,PATCH,DELETE,OPTIONS',
     credentials: true,