Multiple origins in options

[adammw]

Hi,
Could multiple origins be supported in a later version of Socket.IO-node so we may specify either an array of origins or a comma separated list of origins?

Thanks.

[mikekhristo]

What was the verdict on this?

[Gut6]

I've had the same problem. There is nothing about that in docs but it's already available in socket.io.
It should be a list with spacebars.
Example:
io.set('origins', 'http://domain.com:* http://domain.org:* http://domain.net:* http://domain.gov:*');

Those :* are important. Without it, it will not work.

[LordMajestros]

The :* is for specifying ports and yes it won't work without it.

[rakusai]

@Gut6 FYI, your sample code cause security issues.

io.set('origins', 'http://domain.com:* http://domain.org:* http://domain.net:* http://domain.gov:*');

will be processed at here

socket.io/lib/index.js

Line 87 in e0b2cb0

~this._origins.indexOf(parts.hostname + ':*') ||

so omain.com, main.com, ain.com will be passed.

You must use array instead of string, like this:
io.set('origins', ['domain.com:*', 'domain.org:*', 'domain.net:*', 'domain.gov:*']);

[rvanbaalen]

This won't work in the latest version of socket.io.

You can now pass the array of allowed origins in the io server config like this:

const io = require("socket.io")(httpServer, {
    cors: {
        origin: ['http://localhost:*', 'http://anotherdomain.com:*'],
    },
});

[yuvalkabeli]

This won't work in the latest version of socket.io.

You can now pass the array of allowed origins in the io server config like this:

const io = require("socket.io")(httpServer, {
    cors: {
        origin: ['http://localhost:*', 'http://anotherdomain.com:*'],
    },
});

real good help for me even a year later, thanks!

[ezraimanuel]

This won't work in the latest version of socket.io.
You can now pass the array of allowed origins in the io server config like this:

const io = require("socket.io")(httpServer, {
    cors: {
        origin: ['http://localhost:*', 'http://anotherdomain.com:*'],
    },
});

real good help for me even a year later, thanks!

yeppp... the same. many thanks!

[taffil]

This won't work in the latest version of socket.io.

You can now pass the array of allowed origins in the io server config like this:

const io = require("socket.io")(httpServer, {
    cors: {
        origin: ['http://localhost:*', 'http://anotherdomain.com:*'],
    },
});

This is my code, and wont work on live or dev server

const io = require("socket.io")(http, {
    cors: {
        origin: [
            "https://www.domain.com:*",
            "https://www.dev-domain.com:*",
        ],
        methods: ["GET", "POST"],
    },
});

[darrachequesne]

@taffil this should be:

const io = require("socket.io")(http, {
    cors: {
        origin: [
            "https://www.domain.com",
            "https://www.dev-domain.com",
        ],
        methods: ["GET", "POST"],
    },
});

The extra ̀:* is not taken in account.

Reference: https://socket.io/docs/v4/server-options/#cors