From 87e684543ece25cde9827ea488ec21508f4e8fdc Mon Sep 17 00:00:00 2001 From: "josephangelobravo@gmail.com" Date: Tue, 28 Mar 2023 15:05:06 -0700 Subject: [PATCH] change: enable CORS preflight on /api/:type --- src/cobalt.js | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/src/cobalt.js b/src/cobalt.js index 055fc82..4ca68ec 100644 --- a/src/cobalt.js +++ b/src/cobalt.js @@ -27,6 +27,7 @@ const branch = getCurrentBranch(); const app = express(); app.disable('x-powered-by'); +app.use('/api/:type', cors()) if (fs.existsSync('./.env') && process.env.selfURL && process.env.streamSalt && process.env.port) { const apiLimiter = rateLimit({ @@ -80,7 +81,7 @@ if (fs.existsSync('./.env') && process.env.selfURL && process.env.streamSalt && } })); - app.post('/api/json', cors({ origin: process.env.selfURL, optionsSuccessStatus: 200 }), async (req, res) => { + app.post('/api/json', async (req, res) => { try { let ip = sha256(req.header('x-forwarded-for') ? req.header('x-forwarded-for') : req.ip.replace('::ffff:', ''), process.env.streamSalt); let lang = languageCode(req); @@ -104,7 +105,7 @@ if (fs.existsSync('./.env') && process.env.selfURL && process.env.streamSalt && } }); - app.get('/api/:type', cors({ origin: process.env.selfURL, optionsSuccessStatus: 200 }), (req, res) => { + app.get('/api/:type', (req, res) => { try { let ip = sha256(req.header('x-forwarded-for') ? req.header('x-forwarded-for') : req.ip.replace('::ffff:', ''), process.env.streamSalt); switch (req.params.type) {