Update index.js

[desmati]

sending the entire request in originCallback helps to check headers in CustomOrigin function. authorization for example.

[dougwilson]

Hi @desmati only the origin is provided because, per spec, you're only allowed to make the decision based on the Origin header for CORS. If you would like to implement custom logic based on any aspect of the request, you should configure CORS with a function (https://github.com/expressjs/cors#configuring-cors-asynchronously) and then have that function, based on your logic, return an object that defines what the CORS rules are for the request you're given.

Without knowing the specifics of your use-case I'm not able to draw up example code to help you, but if you wanted to provide exactly what you're trying to do, I can take a stab.