Merge pull request #267 from GSA/fix-allowed-domains

Fix allowed domains

Author: Froilan Irizarry

config/index.js

@@ -127,7 +127,13 @@ function getConfig(env='development') {
       : `0.0.0.0:${config.PORT}`;
   config.SWAGGER_DOCUMENT = getSwaggerConf(config.isProd, apiUrl);
 
-  config.ALLOWED_DOMAINS = config.isProd ? ['https://api.data.gov'] : ['*'];
+  config.ALLOWED_DOMAINS = [
+    `http://localhost:${config.PORT}`,
+    `http://127.0.0.1:${config.PORT}`
+  ];
+
+  config.ALLOWED_DOMAINS.push(config.isProd ? 'https://api.data.gov' : '*');
+
   return config;
 }
 

manifest-staging.yml

@@ -12,7 +12,7 @@ applications:
     ES_HEAP_SIZE: 10g
     CF_STAGING_TIMEOUT: 15
     CF_STARTUP_TIMEOUT: 15
-    NODE_ENV: production
+    NODE_ENV: staging
     NEW_RELIC_APP_NAME: code-api-staging
     ELASTICSEARCH_SERVICE_NAME: code_gov_elasticsearch
   services: