minhnhat/cms.uldp.edu.vn
1
0
Fork 0
forked from UKSOURCE/cms.hailearning.edu.vn
Code Pull Requests Activity

Merge branch 'main' of ssh://gits.techvanguard.vn:8822/UKSOURCE/cms.hailearning.edu.vn into develop

Browse Source
This commit is contained in:
Admin
2026-04-11 09:12:08 +00:00
parent ec1b2e2568 b15c4ed525
commit 5197397205
1 changed files with 12 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
server.js
View File

@@ -131,10 +131,19 @@ app.use((req, res, next) => {
app.use((req, res, next) => { app.use((req, res, next) => {
// Allow requests from configured FRONTEND_URL or allow all if not set // Allow requests from configured FRONTEND_URL or allow all if not set
const origin = req.headers.origin; const origin = req.headers.origin;
const allowedOrigin = FRONTEND_URL || "*";
// Support multiple frontend URLs (dev and production)
const allowedOrigins = [
FRONTEND_URL,
"http://dev.hailearning.edu.vn",
"https://www.hailearning.edu.vn",
"http://www.hailearning.edu.vn"
].filter(Boolean); // Remove undefined/empty values
if (allowedOrigin === "*" || origin === allowedOrigin) { const isOriginAllowed = allowedOrigins.includes(origin) || !FRONTEND_URL;
res.setHeader("Access-Control-Allow-Origin", allowedOrigin === "*" ? "*" : origin);
if (isOriginAllowed) {
res.setHeader("Access-Control-Allow-Origin", origin || "*");
res.setHeader("Access-Control-Allow-Methods", "GET,POST,PUT,DELETE,OPTIONS"); res.setHeader("Access-Control-Allow-Methods", "GET,POST,PUT,DELETE,OPTIONS");
res.setHeader("Access-Control-Allow-Headers", "Content-Type, Authorization"); res.setHeader("Access-Control-Allow-Headers", "Content-Type, Authorization");
res.setHeader("Access-Control-Allow-Credentials", "true"); res.setHeader("Access-Control-Allow-Credentials", "true");