[Feat] CORS with credentials support

Enabled CORS with the front-end client. References #17 and #21.
fanton-dev · Oct 23, 2021 · ef5d92b · ef5d92b
1 parent ab0c86b
commit ef5d92b
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/server/src/main.ts b/server/src/main.ts
@@ -14,6 +14,15 @@ async function bootstrap() {
   const app = await NestFactory.create(AppModule);
   const sessionRepository = getRepository(Session);
 
+  app.enableCors({
+    credentials: true,
+    origin: (origin, callback) => {
+      if (origin === configObject.client.root) {
+        return callback(null, true);
+      }
+      callback(new Error('Not allowed by CORS.'));
+    },
+  });
   app.use(
     session({
       ...configObject.session,