MAT-6729: Modifying CORS check to it's specific to our servers, GET &…

… PUT
MeasureAuthoringTool · Apr 11, 2024 · 455b489 · 455b489
1 parent 61fed16
commit 455b489
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 2 deletions.
diff --git a/src/auth/auth.guard.ts b/src/auth/auth.guard.ts
@@ -26,7 +26,6 @@ export class AuthGuard implements CanActivate {
       throw new UnauthorizedException('Token not present');
     }
     try {
-      console.log('Token', token);
       const oktaToken = await oktaJwtVerifier.verifyAccessToken(
         token,
         'api://default',

diff --git a/src/main.ts b/src/main.ts
@@ -2,7 +2,17 @@ import { NestFactory } from '@nestjs/core';
 import { ExportModule } from './export.module';
 
 export async function bootstrap() {
-  const app = await NestFactory.create(ExportModule, { cors: true });
+  const app = await NestFactory.create(ExportModule);
+  app.enableCors({
+    origin: [
+      'http://localhost:9000',
+      'https://dev-madie.hcqis.org',
+      'https://test-madie.hcqis.org',
+      'https://impl-madie.hcqis.org',
+      'https://madie.cms.gov',
+    ],
+    methods: ['GET', 'PUT'],
+  });
   await app.listen(3000);
 }
 bootstrap();