Take in more than 1 client urls for cors

Author: 1ilit

.env.sample

@@ -1,4 +1,4 @@
-CLIENT_URL=http://localhost:5173
+CLIENT_URLS=http://localhost:5173 # csv of supported client urls
 EMAIL_PASS=very-secret-email-password
 EMAIL_REPORT=[email protected]
 EMAIL_USER=[email protected]

index.js

@@ -5,13 +5,21 @@ const nodemailer = require("nodemailer");
 const bodyparser = require("body-parser");
 const dotenv = require("dotenv").config();
 
-const { PORT, CLIENT_URL, EMAIL_PASS, EMAIL_USER, EMAIL_REPORT } = process.env;
+const { PORT, CLIENT_URLS, EMAIL_PASS, EMAIL_USER, EMAIL_REPORT } = process.env;
+
+const whitelist = CLIENT_URLS.split(",");
 
 app.use(express.json());
 app.use(bodyparser.json());
 app.use(
   cors({
-    origin: [CLIENT_URL],
+    origin: function (origin, callback) {
+      if (whitelist.indexOf(origin) !== -1) {
+        callback(null, true);
+      } else {
+        callback(new Error("Not allowed by CORS"));
+      }
+    },
   })
 );