backend-plus 2.5.0-betha.3 → 2.5.2-betha.4

package/lib/backend-plus.d.ts

@@ -395,6 +395,7 @@ export interface AppConfigServer
         "kill-9": string                   // a way to kill from URL with a token
         bitacoraSchema: string
         bitacoraTableName: string 
+        allowedHosts:string[]              //API allowed hosts
     }
 export interface AppConfigDb 
     {

package/lib/backend-plus.js

@@ -30,6 +30,7 @@ var locatePath = require('@upgraded/locate-path');
 var jsYaml = require('js-yaml');
 var nodemailer = require('nodemailer');
 var os = require('os');
+const cors = require('cors');
 
 var likeAr = require('like-ar');
 
@@ -902,6 +903,18 @@ AppBackend.prototype.start = function start(opts){
     }).then(async function(){
         mainApp = express();
         //mainApp.use(cookieParser());
+        const whitelist = ['localhost'].concat(be.config.server.allowedHosts||[]); // Agrega aquí los orígenes de tus aplicaciones
+        const corsOptions = {
+            origin: function (origin, callback) {
+                if (whitelist.some((element)=>origin?.includes(element)) || !origin){
+                    callback(null, true);
+                }else{
+                    callback(new Error('Not allowed by CORS'));
+                }
+            },
+            credentials: true
+        };
+        mainApp.use(cors(corsOptions));
         mainApp.use(bodyParser.urlencoded({extended:true, limit: '50mb'}));
         mainApp.use(function(req,res,next){
             if((req.headers['content-type']||'').match(/^multipart\/form-data/)){

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "backend-plus",
   "description": "Backend for the anti Pareto rule",
-  "version": "2.5.0-betha.3",
+  "version": "2.5.2-betha.4",
   "author": "Codenautas <codenautas@googlegroups.com>",
   "license": "MIT",
   "repository": "codenautas/backend-plus",
@@ -39,6 +39,7 @@
     "castellano": "^0.1.4",
     "connect-pg-simple": "^10.0.0",
     "cookie-parser": "^1.4.7",
+    "cors": "^2.8.5",
     "dialog-promise": "^0.10.1",
     "discrepances": "^0.2.8",
     "express": "^5.1.0",