Merge pull request #13 from windingtree/feat/cors

feat: add allow localhost in cors

.env.example

@@ -13,3 +13,4 @@ CLIENT_JWT={jwt}
 SIMARD_JWT={jwt}
 SIMARD_ORG_ID={id}
 SUMARD_URL={url}
+ALLOW_LOCALHOST_UI=false

src/config.ts

@@ -37,7 +37,11 @@ export const mongoDBUrl = String(process.env.MONGODB_URL);
 export const DBName = String(process.env.DB_NAME);
 export const derbySoftProxyUrl = String(process.env.DERBYSOFT_PROXY_URL);
 export const clientJwt = String(process.env.CLIENT_JWT);
+export const clientUrl = String(process.env.CLIENT_URL);
 export const simardJwt = String(process.env.SIMARD_JWT);
 export const simardOrgId = String(process.env.SIMARD_ORG_ID);
 export const simardUrl = String(process.env.SUMARD_URL);
 export const defaultRadius = 2000; //in meters
+export const allowLocalhostUI = Boolean(
+  process.env.ALLOW_LOCALHOST_UI === 'true'
+);

src/services/ServerService.ts

@@ -7,7 +7,7 @@ import morgan from 'morgan';
 import router from '../router/index';
 import { Express } from 'express-serve-static-core';
 import errorMiddleware from '../middlewares/ErrorMiddleware';
-import { debugEnabled } from '../config';
+import { allowLocalhostUI, clientUrl, debugEnabled } from '../config';
 import responseTime from 'response-time';
 import { MetricsService } from './MetricsService';
 import * as openApiValidator from 'express-openapi-validator';
@@ -33,8 +33,14 @@ export default class ServerService {
     this.app.use(cookieParser());
 
     // CORS
+    let origins;
+    if (allowLocalhostUI) {
+      origins = [clientUrl, 'http://localhost:3000'];
+    } else {
+      origins = clientUrl;
+    }
     const corsOptions = {
-      origin: process.env.CLIENT_URL, // @todo Add handling of origins array
+      origin: origins,
       optionsSuccessStatus: 200,
       methods: 'GET,PUT,POST,DELETE,PATCH,OPTIONS',
       allowedHeaders: