const enableCORS = (request, response) => {
const origin = request.headers.get("origin") || "";
const isAllowedOrigin =
origin === "http://localhost:3000" ||
origin.endsWith(".example.com");
if (isAllowedOrigin) {
for (const [key, value] of Object.entries({
"Access-Control-Allow-Origin": origin,
"Access-Control-Allow-Methods": "POST, DELETE, GET, OPTIONS",
"Access-Control-Allow-Headers": "*",
})) {
response.headers.append(key, value);
}
}
return response;
};
const enableCORS = (request, response) => {
const origin = request.headers.get("origin") || "";
const isAllowedOrigin =
origin === "http://localhost:3000" ||
origin.endsWith(".example.com");
if (isAllowedOrigin) {
for (const [key, value] of Object.entries({
"Access-Control-Allow-Origin": origin,
"Access-Control-Allow-Methods": "POST, DELETE, GET, OPTIONS",
"Access-Control-Allow-Headers": "*",
})) {
response.headers.append(key, value);
}
}
return response;
};