Update: Move Cors to Routes

This commit is contained in:
Yûki VACHOT 2021-12-29 18:51:56 +01:00
parent 3db7bfd7af
commit c6e02cf797
3 changed files with 20 additions and 21 deletions

View file

@ -5,8 +5,7 @@ const allowList = [
'http://127.0.0.1:4200', 'http://127.0.0.1:4200',
'http://127.0.0.1:4201', 'http://127.0.0.1:4201',
'https://admin-polynotfound.herokuapp.com', 'https://admin-polynotfound.herokuapp.com',
'https://polynotfound.herokuapp.com', 'https://polynotfound.herokuapp.com'
]; ];
const corsOptionsDelegate = function(req, callback) { const corsOptionsDelegate = function(req, callback) {
@ -14,7 +13,7 @@ const corsOptionsDelegate = function(req, callback) {
let corsOptions; let corsOptions;
if (allowList.indexOf(req.header('Origin')) !== -1) { if (allowList.indexOf(req.header('Origin')) !== -1) {
corsOptions = { corsOptions = {
origin: false, origin: true,
credentials: true credentials: true
} }
} else { } else {

View file

@ -1,43 +1,43 @@
const users = require("../controllers/user.controller"); const users = require("../controllers/user.controller");
//const {cors, options} = require("../config/cors.config"); const {cors, options} = require("../config/cors.config");
module.exports = app => { module.exports = app => {
let router = require("express").Router(); let router = require("express").Router();
// Authenticate a User // Authenticate a User
router.post("/user/auth", users.auth); router.post("/user/auth", cors(options), users.auth);
// Logout a User // Logout a User
router.delete("/user/logout", users.logout); router.delete("/user/logout", cors(options), users.logout);
// Request password reset with email // Request password reset with email
router.post("/user/resetPass", users.resetPass); router.post("/user/resetPass", cors(options), users.resetPass);
// Create and Save a new User // Create and Save a new User
router.post("/user/create", users.create); router.post("/user/create", cors(options), users.create);
// Retrieve all Users if admin // Retrieve all Users if admin
router.get("/user/findAll", users.findAll); router.get("/user/findAll", cors(options), users.findAll);
// Find single User from id if admin or session id // Find single User from id if admin or session id
router.get("/user/findOne/:id", users.findOne); router.get("/user/findOne/:id", cors(options), users.findOne);
// Update a User from id if admin or session id // Update a User from id if admin or session id
router.put("/user/update/:id", users.update); router.put("/user/update/:id", cors(options), users.update);
// Delete a User from id if admin or session id // Delete a User from id if admin or session id
router.delete("/user/delete/:id", users.delete); router.delete("/user/delete/:id", cors(options), users.delete);
// Delete all Users if superAdmin // Delete all Users if superAdmin
router.delete("/user/deleteAll", users.deleteAll); router.delete("/user/deleteAll", cors(options), users.deleteAll);
// Get all Roles depending on the User session id // Get all Roles depending on the User session id
router.get("/user/roles", users.roles); router.get("/user/roles", cors(options), users.roles);
// Get 1 or multiple ad adapted to the User session id // Get 1 or multiple ad adapted to the User session id
router.get("/user/ad", users.ad); router.get("/user/ad", cors(options), users.ad);
// Get History // Get History
router.get("/user/history", users.history); router.get("/user/history", cors(options), users.history);
app.use('/api', router); app.use('/api', router);
}; };

View file

@ -2,11 +2,11 @@ const express = require('express');
const app = express(); const app = express();
const port = process.env.PORT || 3000; const port = process.env.PORT || 3000;
const cors = require('cors'); //const cors = require('cors');
app.use(cors({ //app.use(cors({
origin: 'https://admin-polynotfound.herokuapp.com', // origin: 'https://admin-polynotfound.herokuapp.com',
credentials: true // credentials: true
})); //}));
const cookieParser = require('cookie-parser'); const cookieParser = require('cookie-parser');
app.use(cookieParser()); app.use(cookieParser());