From a418855d8b0587c09490b5bb115e02fc01d482bc Mon Sep 17 00:00:00 2001
From: okjodom <okjodom@gmail.com>
Date: Wed, 27 Nov 2024 16:23:35 +0300
Subject: [PATCH] chore: remove strict origin checks

---
 apps/api/src/main.ts | 10 ++--------
 1 file changed, 2 insertions(+), 8 deletions(-)

diff --git a/apps/api/src/main.ts b/apps/api/src/main.ts
index 1d77f8e..9f928a3 100644
--- a/apps/api/src/main.ts
+++ b/apps/api/src/main.ts
@@ -69,14 +69,8 @@ function setupCORS(app: INestApplication) {
 
   app.enableCors({
     origin: (origin, callback) => {
-      if (!origin) {
-        callback(new Error('CORS error null origin'), origin);
-      }
-      if (allowedOrigins.indexOf(origin) !== -1) {
-        callback(new Error('Blocked by CORS'), origin);
-      } else {
-        callback(null, origin);
-      }
+      // TODO: Strict CORS origin check in production
+      callback(null, origin);
     },
     methods: 'GET,POST,PUT,PATCH,DELETE,OPTIONS',
     credentials: true,