Skip to content

Document and test production CORS allowlist#63

Open
Errordog2 wants to merge 1 commit into
Zcorehub:mainfrom
Errordog2:codex/cors-allowlist-49
Open

Document and test production CORS allowlist#63
Errordog2 wants to merge 1 commit into
Zcorehub:mainfrom
Errordog2:codex/cors-allowlist-49

Conversation

@Errordog2

@Errordog2 Errordog2 commented Jun 19, 2026

Copy link
Copy Markdown

Summary

  • document the production CORS_ORIGINS value expected for Vercel deployments
  • expand coverage for the existing CORS helper to verify trimming, empty-entry filtering, allowed browser origins, rejected unknown origins, and no-Origin server-to-server calls

Closes #49

Validation

  • npm test -- src/config/__tests__/cors.config.test.ts (6 tests)
  • npm test (13 files / 54 tests)
  • npm run build
  • git diff --check -- Server/src/config/__tests__/cors.config.test.ts Docs/vercel-deploy.md

@Errordog2
Errordog2 force-pushed the codex/cors-allowlist-49 branch from 57f1856 to 4436fca Compare June 19, 2026 22:55
@Errordog2 Errordog2 changed the title Add production CORS allowlist Document and test production CORS allowlist Jun 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Production CORS allowlist for API origins

1 participant