restrict cors domains

ederwms · Oct 3, 2020 · c448256 · c448256
1 parent 4b1b23f
commit c448256
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/src/app.js b/src/app.js
@@ -10,7 +10,12 @@ const routes = require('./routes/v1')
 
 app.use(morgan('dev'))
 
-app.use(cors())
+const corsOptions = {
+  origin: 'https://betheherovue.netlify.app',
+  optionsSuccessStatus: 200
+}
+
+app.use(process.env.NODE_ENV === 'production' ? cors(corsOptions) : cors())
 app.use(express.json())
 app.use(express.urlencoded({ extended: true }))