feat(cors): enable cors for specific origin based on env (#855)

.github/workflows/deploy-to-production.yml

@@ -68,6 +68,7 @@ jobs:
           echo DATABASE_NAME="${{ secrets.PRODUCTION_DATABASE_NAME }}" >> env/.env.production
           echo DATABASE_USERNAME="${{ secrets.PRODUCTION_DATABASE_USERNAME }}" >> env/.env.production
           echo DATABASE_PASSWORD="${{ secrets.PRODUCTION_DATABASE_PASSWORD }}" >> env/.env.production
+          echo CORS_ORIGIN="${{ secrets.PRODUCTION_CORS_ORIGIN }}" >> env/.env.production
           cat env/.env.production
 
       - name: Build app ✨

README.md

@@ -254,6 +254,7 @@ Environment variables are :
 |   `DATABASE_NAME`   |          MongoDB database name          |    ✅     |       ❌       |              Can't be empty string               |
 | `DATABASE_USERNAME` |          MongoDB database user          |    ✅     |       ❌       |              Can't be empty string               |
 | `DATABASE_PASSWORD` |        MongoDB database password        |    ✅     |       ❌       |              Can't be empty string               |
+|    `CORS_ORIGIN`    |           CORS allowed origin           |    ❌     |      `*`      |          If set, can't be empty string           |
 
 
 ## <a name="code-analysis-and-consistency">☑️ Code analysis and consistency</a>

env/.env.development

@@ -3,4 +3,5 @@ DATABASE_HOST=127.0.0.1
 DATABASE_PORT=27017
 DATABASE_NAME=werewolves-assistant
 DATABASE_USERNAME=dev
-DATABASE_PASSWORD=speed_burger_is_the_best
+DATABASE_PASSWORD=speed_burger_is_the_best
+CORS_ORIGIN="http://localhost:3000"

env/.env.example

@@ -5,4 +5,5 @@ DATABASE_HOST=locahost
 DATABASE_PORT=port
 DATABASE_NAME=name
 DATABASE_USERNAME=username
-DATABASE_PASSWORD=password
+DATABASE_PASSWORD=password
+CORS_ORIGIN="*"

src/modules/config/env/types/env.type.ts

@@ -40,6 +40,11 @@ class EnvironmentVariables {
   @IsString()
   @IsNotEmpty()
   public DATABASE_PASSWORD: string;
+
+  @IsOptional()
+  @IsString()
+  @IsNotEmpty()
+  public CORS_ORIGIN: string = "*";
 }
 
 export { EnvironmentVariables };

src/server/server.ts

@@ -14,6 +14,7 @@ import { AppModule } from "@/app.module";
 
 async function bootstrap(): Promise<NestFastifyApplication> {
   const app = await NestFactory.create<NestFastifyApplication>(AppModule, new FastifyAdapter(FASTIFY_SERVER_DEFAULT_OPTIONS));
+  app.enableCors({ origin: process.env.CORS_ORIGIN ?? "*" });
   app.useGlobalPipes(new ValidationPipe(DEFAULT_VALIDATION_PIPE_OPTIONS));
   const documentationPath = "docs";
   createSwaggerDocument(documentationPath, app);