feat: set smockr secret as default allowed headers

kitabisa · Apr 9, 2024 · ff155d5 · ff155d5
1 parent 91a9dda
commit ff155d5
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/server.ts b/server.ts
@@ -10,7 +10,9 @@ const port = process.env.PORT || 8080
 const corsOptions = cors({
   origin: process.env.ALLOWED_ORIGIN,
   methods: process.env.ALLOWED_METHODS,
-  allowedHeaders: process.env.ALLOWED_HEADERS || '*',
+  allowedHeaders: process.env.ALLOWED_HEADERS
+    ? `X-Smockr-Secret,${process.env.ALLOWED_HEADERS}`
+    : '*',
   optionsSuccessStatus: 200 // some legacy browsers (IE11, various SmartTVs) choke on 204
 })