chore: added http exception filter and configured cors

src/main.ts

@@ -1,10 +1,30 @@
+import { HttpException, HttpStatus } from '@nestjs/common';
 import { NestFactory } from '@nestjs/core';
 import { AppModule } from './app.module';
+import { HttpExceptionFilter } from './modules/http';
 
 async function bootstrap() {
   const app = await NestFactory.create(AppModule, {
     logger: ['error', 'warn', 'debug', 'verbose', 'log'],
+    cors: true,
   });
+
+  app.useGlobalFilters(new HttpExceptionFilter());
+
+  const AllowedDomains = process.env.ALLOWED_DOMAINS.split(',') || [];
+
+  app.enableCors({
+    origin: (origin, callback) => {
+      if (AllowedDomains.includes(origin)) {
+        callback(null, true);
+      } else {
+        callback(
+          new HttpException('Not allowed by CORS', HttpStatus.BAD_GATEWAY),
+        );
+      }
+    },
+  });
+
   await app.listen(process.env.PORT || 3333);
 }
 bootstrap();

src/modules/events/events.gateway.ts

@@ -1,4 +1,11 @@
-import { CACHE_MANAGER, Inject, Injectable, Logger } from '@nestjs/common';
+import {
+  CACHE_MANAGER,
+  HttpException,
+  HttpStatus,
+  Inject,
+  Injectable,
+  Logger,
+} from '@nestjs/common';
 import {
   MessageBody,
   WebSocketServer,
@@ -20,7 +27,15 @@ import {
 
 @WebSocketGateway({
   cors: {
-    origin: '*',
+    origin: (origin, callback) => {
+      if ((process.env.ALLOWED_DOMAINS.split(',') || []).includes(origin)) {
+        callback(null, true);
+      } else {
+        callback(
+          new HttpException('Not allowed by CORS', HttpStatus.BAD_GATEWAY),
+        );
+      }
+    },
   },
 })
 @Injectable()