feat: configure cors for apiClient for different domains usecase

NamesMT · Jun 6, 2024 · b8288c0 · b8288c0
1 parent c72c07f
commit b8288c0
Show file tree

Hide file tree

Showing 4 changed files with 19 additions and 5 deletions.
diff --git a/apps/backend/.env b/apps/backend/.env
@@ -1,3 +1,5 @@
+# FRONTEND_URL=https://YOUR_FRONTEND_URL
+
 # KINDE_DOMAIN=https://<YOUR_SUBDOMAIN>.kinde.com
 # KINDE_CLIENT_ID=<YOUR_CLIENT_ID>
 # KINDE_CLIENT_SECRET=<YOUR_CLIENT_SECRET>

diff --git a/apps/backend/.env.local b/apps/backend/.env.local
@@ -1,3 +1,11 @@
 NODE_ENV=development
 APP_DEV_host=127.0.0.1
 APP_DEV_port=3301
+
+FRONTEND_URL=https://127.0.0.1:3300
+
+# KINDE_DOMAIN=https://<YOUR_SUBDOMAIN>.kinde.com
+# KINDE_CLIENT_ID=<YOUR_CLIENT_ID>
+# KINDE_CLIENT_SECRET=<YOUR_CLIENT_SECRET>
+# KINDE_REDIRECT_URI=http://localhost:3000/callback
+# KINDE_LOGOUT_REDIRECT_URI=https://<YOUR_SUBDOMAIN>.kinde.com/logged-out
diff --git a/apps/backend/src/index.ts b/apps/backend/src/index.ts
@@ -1,7 +1,7 @@
 import { handle } from '@namesmt/hono-adapter-aws-lambda'
 import { Hono } from 'hono'
 import { cors } from 'hono/cors'
-import { isDevelopment } from 'std-env'
+import { env, isDevelopment } from 'std-env'
 
 import type { HonoEnv } from './types'
 import { devAdapter, tryServeApp } from './dev'
@@ -15,7 +15,9 @@ if (isDevelopment)
 
 export const app = _app
   // CORS middleware
-  .use(cors())
+  .use(cors({
+    origin: ['127.0.0.1', new URL(env.FRONTEND_URL!).hostname],
+  }))
 
   // Session management middleware
   .use(sessionMiddleware())

diff --git a/apps/frontend/app/plugins/rpcApi.ts b/apps/frontend/app/plugins/rpcApi.ts
@@ -13,9 +13,11 @@ export default defineNuxtPlugin({
     const callProxy = enableProxy === 'auto'
       ? urlBackend.hostname === url.hostname
       : enableProxy
-    const apiClient = hc<typeof app>(callProxy
-      ? `https://${url.host}`
-      : backendUrl,
+    const apiClient = hc<typeof app>(
+      callProxy
+        ? `https://${url.host}`
+        : backendUrl,
+      { init: { credentials: 'include' } },
     )
 
     return {