Allow * in array of origin

[RealPeha]

I added origin via env variable like so:

app.enableCors({
    origin: configService.get<string>('CORS_ORIGIN')!.split(','),
});

This allowed you to specify multiple domains separated by commas
But I didn’t understand why it didn’t work if I wrote CORS_ORIGIN: *

After looking at the source code i saw that there is no check for * in the array of origins

So I think that no matter if I write like this * or so [*] the result should be the same

[dougwilson]

Thank you. We likely need to wait to land this until we are spinning up a new major version of this module. See #185

[douglasnaphas]

I don't think that origin: ['*'] should mean reflect back the requesting origin when origin: '*' means send a header of Access-Control-Allow-Origin: *. I have some more thoughts here.

[dougwilson]

I'm closing this for now due to the great issues @douglasnaphas raised in #185 (comment)