feat: enhance CORS configuration for improved security and flexibility

DenilsonRabelo · Jan 3, 2025 · 7df7793 · 7df7793
1 parent 2eee029
commit 7df7793
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 2 deletions.
diff --git a/src/main.ts b/src/main.ts
@@ -3,7 +3,11 @@ import { AppModule } from './app.module';
 
 async function bootstrap() {
   const app = await NestFactory.create(AppModule);
-  app.enableCors();
+  app.enableCors({
+    origin: '*', 
+    methods: 'GET, POST, PUT, DELETE, OPTIONS',
+    allowedHeaders: 'Content-Type, Authorization',
+  });
   await app.listen(3000);
 }
 bootstrap();
diff --git a/vercel.json b/vercel.json
@@ -10,7 +10,12 @@
       {
         "src": "/(.*)",
         "dest": "dist/main.js",
-        "methods": ["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD", "OPTIONS"]
+        "methods": ["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD", "OPTIONS"],
+        "headers": {
+             "Access-Control-Allow-Origin": "*",
+             "Access-Control-Allow-Credentials": "true",
+             "Access-Control-Allow-Headers": "X-CSRF-Token, X-Requested-With, Accept, Accept-Version, Content-Length, Content-MD5, Content-Type, Date, X-Api-Version"
+         }
       }
     ]
   }