Merge pull request #130 from OktopUSP/cors_by_env

Get cors allowed origins from env file [ close #116 ]

backend/services/controller/.env

@@ -9,4 +9,5 @@ BROKER_USERNAME=""
 BROKER_PASSWORD=""
 BROKER_CLIENTID=""
 BROKER_QOS=""
-REST_API_PORT=""
+REST_API_PORT=""
+REST_API_CORS="" # addresses must be separated by commas example: "http://localhost:3000,http://myapp.com"

backend/services/controller/internal/api/cors/cors.go

@@ -3,13 +3,16 @@ package cors
 import (
 	"github.com/rs/cors"
 	"net/http"
+	"os"
+	"strings"
+	"fmt"
 )
 
 func GetCorsConfig() cors.Cors {
+	allowedOrigins := getCorsEnvConfig()
+	fmt.Println(allowedOrigins)
 	return *cors.New(cors.Options{
-		AllowedOrigins: []string{
+		AllowedOrigins: allowedOrigins,
-			"http://localhost:3000",
-		},
 		AllowedMethods: []string{
 			http.MethodGet,
 			http.MethodPost,
@@ -25,3 +28,11 @@ func GetCorsConfig() cors.Cors {
 		},
 	})
 }
+
+func getCorsEnvConfig() []string {
+	val, _ := os.LookupEnv("REST_API_CORS")
+	if val == "" {
+		return []string{"*"}
+	}
+	return strings.Split(val, ",")
+}

backend/services/socketio/.env

@@ -0,0 +1,2 @@
+CORS_ALLOWED_ORIGINS=""
+# addresses must be separated by commas example: "http://localhost:3000,http://myapp.com"

backend/services/socketio/.gitignore

@@ -1 +1,2 @@
-node_modules/
+node_modules/
+.env.local

backend/services/socketio/package.json

@@ -13,6 +13,7 @@
   "dependencies": {
     "@koa/cors": "^4.0.0",
     "cors": "^2.8.5",
+    "dotenv": "^16.3.1",
     "express": "^4.18.2",
     "koa": "^2.14.2",
     "socket.io": "^4.6.2"

backend/services/socketio/server.js

@@ -1,13 +1,24 @@
+const dotenv = require('dotenv')
+dotenv.config();
+dotenv.config({ path: `.env.local`, override: true });
 const express = require('express');
 const app = express();
 const PORT = 5000;
 
 const http = require('http').Server(app);
 const cors = require('cors');
+var allowedOrigins;
+let allowedOriginsFromEnv = process.env.CORS_ALLOWED_ORIGINS.split(',')
+if (allowedOriginsFromEnv.length > 1) {
+  allowedOrigins = allowedOriginsFromEnv
+}else{
+  allowedOrigins = "*"
+}
+console.log("allowedOrigins:",allowedOrigins)
 
 const io = require('socket.io')(http, {
     cors: {
-        origin: "http://localhost:3000"
+        origin: allowedOrigins
     }
 });