fix: Duplicated CORS headers

2025-11-01 16:40:08 -05:00
parent dd19b2b990
commit d0385bd2c9
6 changed files with 25 additions and 51 deletions
--- a/src/backend/database/database.ts
+++ b/src/backend/database/database.ts
@@ -60,19 +60,15 @@ app.use(
        "http://127.0.0.1:3000",
      ];

-      if (origin.startsWith("https://")) {
-        return callback(null, true);
-      }
-
-      if (origin.startsWith("http://")) {
-        return callback(null, true);
-      }
-
      if (allowedOrigins.includes(origin)) {
        return callback(null, true);
      }

-      callback(new Error("Not allowed by CORS"));
+      if (origin.startsWith("https://")) {
+        return callback(null, true);
+      }
+
+      callback(null, true);
    },
    credentials: true,
    methods: ["GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"],