feat: 🎸 add cors options to widgetServer configuration

Author: mjancarik

Diff for: package-lock.json

@@ -47,6 +47,7 @@
   "dependencies": {
     "@esmj/emitter": "^0.4.1",
     "@esmj/observable": "^0.1.1",
+    "@types/cors": "^2.8.17",
     "chalk": "^5.3.0",
     "commander": "^12.0.0",
     "compression": "^1.7.4",

Diff for: packages/cli/package.json

@@ -255,6 +255,16 @@ emitter.on(
       buildFolder: path.resolve(cliConfig.projectFolder, cliConfig.buildFolder),
       clusters: cliConfig.command === COMMAND_NAME.DEV ? 0 : 3,
       ...merkurConfig.widgetServer,
+      cors: {
+        options: {
+          origin: [
+            new RegExp('^https?://localhost(:[0-9]+)?$'),
+            new RegExp('^https?://127\\.0\\.0\\.1(:[0-9]+)?$'),
+          ],
+          methods: ['GET', 'HEAD', 'PUT', 'PATCH', 'POST', 'DELETE', 'OPTIONS'],
+          ...merkurConfig.widgetServer?.cors?.options,
+        },
+      },
     };
 
     const { origin, host, protocol } = merkurConfig.widgetServer;

Diff for: packages/cli/src/merkurConfig.mjs

@@ -1,5 +1,6 @@
 import type { BuildOptions } from 'esbuild';
 import type { Request, Response } from '@types/express';
+import type { CorsOptions } from '@types/cors';
 
 export interface CLIConfig {
   environment: string;
@@ -68,6 +69,9 @@ export interface WidgetServer {
   staticPath: string;
   buildFolder: string;
   clusters: number;
+  cors: {
+    options: CorsOptions;
+  };
 }
 
 export interface Constant {

Diff for: packages/cli/types.d.ts

@@ -8,7 +8,7 @@ const morgan = require('morgan');
 const { resolveConfig } = require('@merkur/cli/server');
 
 const {
-  merkurConfig: { widgetServer, devServer },
+  merkurConfig: { widgetServer },
 } = resolveConfig();
 
 const {
@@ -40,12 +40,7 @@ app
       crossOriginEmbedderPolicy: false,
     }),
   )
-  .use(
-    cors({
-      origin: devServer.origin,
-      optionsSuccessStatus: 200, // some legacy browsers (IE11, various SmartTVs) choke on 204
-    }),
-  )
+  .use(cors(widgetServer.cors.options))
   .use(compression())
   .use(widgetServer.staticPath, express.static(widgetServer.staticFolder))
   .use(