fix(wip): Revert to dynamic origin header

theopensystemslab · Jan 15, 2024 · 6bfa4ec · 6bfa4ec
1 parent f34adf1
commit 6bfa4ec
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/api.planx.uk/server.ts b/api.planx.uk/server.ts
@@ -38,11 +38,15 @@ useSwaggerDocs(app);
 
 app.set("trust proxy", 1);
 
+app.use((req, res, next) => {
+  res.header("Access-Control-Allow-Origin", req.headers.origin);
+  next();
+});
+
 app.use(
   cors({
     credentials: true,
     methods: "*",
-    origin: process.env.EDITOR_URL_EXT,
     allowedHeaders: [
       "Accept",
       "Authorization",