fix: Add production domains to CORS whitelist
Added production domains to CORS configuration: - https://maternal.noru1.ro (production frontend) - https://maternal-api.noru1.ro (production API/GraphQL playground) This ensures the frontend can communicate with the backend API in production. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
@@ -42,9 +42,11 @@ async function bootstrap() {
|
||||
|
||||
// Strict CORS configuration
|
||||
const allowedOrigins = process.env.CORS_ORIGIN?.split(',').map((o) => o.trim()) || [
|
||||
'http://localhost:19000', // Expo dev
|
||||
'http://localhost:3001', // Next.js dev (legacy)
|
||||
'http://localhost:3030', // Next.js dev (current)
|
||||
'http://localhost:19000', // Expo dev
|
||||
'http://localhost:3001', // Next.js dev (legacy)
|
||||
'http://localhost:3030', // Next.js dev (current)
|
||||
'https://maternal.noru1.ro', // Production frontend
|
||||
'https://maternal-api.noru1.ro', // Production API (for GraphQL playground)
|
||||
];
|
||||
|
||||
app.enableCors({
|
||||
|
||||
Reference in New Issue
Block a user