Open
Description
When creating the following stack: bun create better-t-stack@latest better-t-stack --yes --frontend native next --backend next --runtime node --api orpc --database none --orm none --no-auth --addons biome husky turborepo. (Turbopack with nextjs server, nextjs web and RN expo)
In a monorepo multiple apps consume a single api. The CORS middleware on the server should have support for that.
In this stack next web runs on :3001 and RN web on :8081.
I would like to propose the following change:
in apps/server/.env change CORS env to CORS_ORIGINS=http://localhost:3001,http://localhost:8081
Then in the middleware we can get the origin of the request by doing something like this
import { NextRequest, NextResponse } from "next/server";
export function middleware(request: NextRequest) {
const originHeader = request.headers.get("origin");
const res = NextResponse.next();
const allowedOrigins = process.env.CORS_ORIGINS?.split(",") ?? [];
if (originHeader && allowedOrigins.includes(originHeader)) {
res.headers.append("Access-Control-Allow-Origin", originHeader);
}
res.headers.append("Access-Control-Allow-Credentials", "true");
res.headers.append("Access-Control-Allow-Methods", "GET,POST,OPTIONS");
res.headers.append(
"Access-Control-Allow-Headers",
"Content-Type, Authorization"
);
return res;
}
export const config = {
matcher: "/:path*",
};Metadata
Metadata
Assignees
Labels
No labels