From 7a9ee00eb5c04a9e6bc63c5eb8086ee1859a8f12 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Y=C3=BBki=20VACHOT?= Date: Wed, 29 Dec 2021 18:05:06 +0100 Subject: [PATCH] Update: Add Access Controls --- server.js | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/server.js b/server.js index 6c55266..b2f220a 100644 --- a/server.js +++ b/server.js @@ -3,6 +3,14 @@ const app = express(); const port = process.env.PORT || 3000; const cors = require('cors'); + +app.use(function(req, res, next) { + res.header("Access-Control-Allow-Origin", 'https://admin-polynotfound.herokuapp.com'); + res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept"); + res.header('Access-Control-Allow-Methods', 'GET,PUT,POST,DELETE'); + next(); +}); + app.use(cors({ origin: 'https://admin-polynotfound.herokuapp.com', credentials: true