backend-plus 2.5.2-betha.16 → 2.5.2-betha.18

package/lib/backend-plus.d.ts

@@ -396,7 +396,8 @@ export interface AppConfigServer
         "kill-9": string                   // a way to kill from URL with a token
         bitacoraSchema: string
         bitacoraTableName: string 
-        allowedHosts:string[]              //API allowed hosts
+        useCors: boolean                   //habilita Cross-Origin Resource Sharing
+        allowedHosts:string[]              //determina API allowed hosts (necesita habilitar useCors)
     }
 export interface AppConfigDb 
     {

package/lib/backend-plus.js

@@ -913,18 +913,23 @@ AppBackend.prototype.start = function start(opts){
     }).then(async function(){
         mainApp = express();
         //mainApp.use(cookieParser());
-        const whitelist = ['localhost'].concat(be.config.server.allowedHosts||[]); // Agrega aquí los orígenes de tus aplicaciones
-        const corsOptions = {
-            origin: function (origin, callback) {
-                if (whitelist.some((element)=>origin?.includes(element)) || !origin){
-                    callback(null, true);
-                }else{
-                    callback(new Error('Not allowed by CORS'));
-                }
-            },
-            credentials: true
-        };
-        mainApp.use(cors(corsOptions));
+        if(be.config.server.allowedHosts){
+            if(!Array.isArray(be.config.server.allowedHosts)){
+                throw Error('allowedHosts must be an Array')
+            }
+            const whitelist = ['localhost'].concat(be.config.server.allowedHosts);
+            const corsOptions = {
+                origin: function (origin, callback) {
+                    if (whitelist.some((element)=>origin?.includes(element)) || !origin){
+                        callback(null, true);
+                    }else{
+                        callback(new Error('Not allowed by CORS'));
+                    }
+                },
+                credentials: true
+            };
+            mainApp.use(cors(corsOptions));
+        }
         mainApp.use(bodyParser.urlencoded({extended:true, limit: '50mb'}));
         mainApp.use(function(req,res,next){
             if((req.headers['content-type']||'').match(/^multipart\/form-data/)){

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "backend-plus",
   "description": "Backend for the anti Pareto rule",
-  "version": "2.5.2-betha.16",
+  "version": "2.5.2-betha.18",
   "author": "Codenautas <codenautas@googlegroups.com>",
   "license": "MIT",
   "repository": "codenautas/backend-plus",