feat: Additional httpOnly token for enhanced security in browsers

2024-09-01 09:31:04 +02:00
parent d4043c9726
commit 50519f1bcd
18 changed files with 171 additions and 48 deletions
@@ -23,6 +23,8 @@ const url = require('url');

 const { customLogger } = require('../../utils/logger');

+const parsedBasedUrl = new url.URL(process.env.BASE_URL);
+
 module.exports = {
  /**
   *
@@ -131,9 +133,10 @@ module.exports = {
     */

    cors: {
-      // allowOrigins: [
-      //   'https://example.com',
-      // ],
+      allRoutes: false,
+      allowOrigins: '*',
+      allowRequestHeaders: 'content-type',
+      allowCredentials: false,
    },
  },

@@ -218,7 +221,7 @@ module.exports = {
     *
     */

-    onlyAllowOrigins: [new url.URL(process.env.BASE_URL).origin],
+    onlyAllowOrigins: [parsedBasedUrl.origin],

    /**
     *