add cors

.env.example

@@ -6,4 +6,5 @@ DB_PASSWORD=
 DB_NAME=
 REFRESH_TOKEN_SECRET=
 JWKS_URI=
-PRIVATE_KEY=
+PRIVATE_KEY=
+ADMIN_DASHBOARD_URL=

package.json

@@ -24,6 +24,7 @@
         "@types/bcrypt": "^5.0.1",
         "@types/bcryptjs": "^2.4.6",
         "@types/cookie-parser": "^1.4.7",
+        "@types/cors": "^2.8.17",
         "@types/express": "^4.17.21",
         "@types/express-validator": "^3.0.0",
         "@types/http-errors": "^2.0.4",
@@ -57,6 +58,7 @@
     "dependencies": {
         "bcryptjs": "^2.4.3",
         "cookie-parser": "^1.4.6",
+        "cors": "^2.8.5",
         "dotenv": "^16.4.5",
         "express": "^4.19.1",
         "express-jwt": "^7.7.8",

src/app.ts

@@ -1,14 +1,21 @@
 import "reflect-metadata";
-
+import cors from "cors";
 import express, { Request, Response, NextFunction } from "express";
 import cookieParser from "cookie-parser";
 import logger from "./config/logger";
 import { HttpError } from "http-errors";
 import authRouter from "./routes/auth";
 import tenantRouter from "./routes/tenant";
 import userRouter from "./routes/user";
+import { Config } from "./config";
 
 const app = express();
+app.use(
+    cors({
+        origin: [Config.ADMIN_DASHBOARD_URL!],
+        credentials: true,
+    }),
+);
 app.use(express.static("public"));
 app.use(cookieParser());
 app.use(express.json());

src/config/index.ts

@@ -16,6 +16,7 @@ const {
     REFRESH_TOKEN_SECRET,
     JWKS_URI,
     PRIVATE_KEY,
+    ADMIN_DASHBOARD_URL,
 } = process.env;
 
 export const Config = {
@@ -29,4 +30,5 @@ export const Config = {
     REFRESH_TOKEN_SECRET,
     JWKS_URI,
     PRIVATE_KEY,
+    ADMIN_DASHBOARD_URL,
 };