feat: Configure CORS origin (#673)

decentraland · Apr 17, 2024 · 33243a5 · 33243a5
1 parent f800500
commit 33243a5
Showing 1 changed file with 15 additions and 3 deletions.
diff --git a/src/server.ts b/src/server.ts
@@ -45,7 +45,15 @@ const app = express()
 app.set("x-powered-by", false)
 app.use(withLogs())
 app.use("/api", [
-  withCors(),
+  withCors({
+    corsOrigin: [
+      /^http:\/\/localhost:[0-9]{1,10}$/,
+      /^https:\/\/(.{1,50}\.)?decentraland\.(zone|today|org)$/,
+      "https://mvfw.org",
+      "https://dcl-metrics.com",
+    ],
+    allowedHeaders: "*",
+  }),
   withDDosProtection(),
   withBody(),
   status(),
@@ -69,8 +77,12 @@ app.use("/events", social)
 
 app.use("/events", [
   withCors({
-    cors: "*",
-    corsOrigin: "*",
+    corsOrigin: [
+      /^http:\/\/localhost:[0-9]{1,10}$/,
+      /^https:\/\/(.{1,50}\.)?decentraland\.(zone|today|org)$/,
+      "https://mvfw.org",
+      "https://dcl-metrics.com",
+    ],
     allowedHeaders: "*",
   }),
   gatsby(resolve(__filename, "../../public"), {