Merge pull request #29 from EjembiEmmanuel/main

fix: fix qraphql CORS error

src/app.module.ts

@@ -9,14 +9,22 @@ import { PrismaModule } from './prisma/prisma.module';
 import { SharedIndexerModule } from './shared-indexer/shared-indexer.module';
 import { TokenGiverIndexerModule } from './token-giver-indexer/token-giver-indexer.module';
 import { ResolversModule } from './resolvers/resolvers.module';
-
 @Module({
   imports: [
     ConfigModule.forRoot({ isGlobal: true }),
     GraphQLModule.forRoot<ApolloDriverConfig>({
       driver: ApolloDriver,
       autoSchemaFile: true,
       resolvers: { JSON: GraphQLJSON },
+      csrfPrevention: {
+        requestHeaders: [
+          'Accept',
+          'Authorization',
+          'Content-Type',
+          'X-Requested-With',
+          'apollo-require-preflight',
+        ],
+      },
     }),
     PrismaModule,
     SharedIndexerModule,

src/main.ts

@@ -1,25 +1,22 @@
 import { NestFactory } from '@nestjs/core';
 import { AppModule } from './app.module';
-import { CorsOptions } from '@nestjs/common/interfaces/external/cors-options.interface';
 
 async function bootstrap() {
   const app = await NestFactory.create(AppModule);
 
-  const corsOptions: CorsOptions = {
+  app.enableCors({
     origin: '*',
-    methods: ['GET', 'HEAD', 'PUT', 'PATCH', 'POST', 'DELETE', 'OPTIONS'],
+    credentials: true,
     allowedHeaders: [
       'Accept',
+      'Authorization',
       'Content-Type',
       'X-Requested-With',
-      'Authorization',
-      'x-apollo-operation-name',
       'apollo-require-preflight',
     ],
-    credentials: true,
-  };
+    methods: ['GET', 'PUT', 'POST', 'DELETE', 'OPTIONS'],
+  });
 
-  app.enableCors(corsOptions);
   await app.listen(process.env.PORT ?? 3000);
 }
 bootstrap();