[DPTM-2] Dev env (#27)

* ar(fix) [DPTM-2]: Ensure autonomous Dev environment * ar(fix) [DPTM-2]: Ensure autonomous Dev environment * ar(fix) [DPTM-2]: Ensure autonomous Dev environment
dreampipcom · Aug 8, 2024 · 0fa9159 · 0fa9159
1 parent 6f2912b
commit 0fa9159
Showing 1 changed file with 12 additions and 1 deletion.
diff --git a/src/middleware.ts b/src/middleware.ts
@@ -16,8 +16,14 @@ export const config = {
   matcher: ['/api/:path*'],
 };
 
+const allowedOrigins = {
+  [`${process.env.MAIN_URL}`]: process.env.MAIN_URL,
+  [`${process.env.NEXUS_HOST}`]: process.env.NEXUS_HOST,
+  [`${process.env.API_HOST}`]: process.env.API_HOST,
+};
+
 const headers: Record<string, any> = {
-  'Access-Control-Allow-Origin': process.env.MAIN_URL || 'https://www.dreampip.com',
+  'Access-Control-Allow-Origin': `${process.env.MAIN_URL}` || 'https://www.dreampip.com',
   'Cache-Control': 'maxage=0, s-maxage=300, stale-while-revalidate=300',
   // DEV-DEBUG:
   // 'content-type': 'application/json',
@@ -27,6 +33,11 @@ const headers: Record<string, any> = {
 };
 
 export default async function middleware(request: NextRequest) {
+  const origin = request.headers.get('x-forwarded-host') || '';
+  if (origin !== process.env.MAIN_URL) {
+    headers['Access-Control-Allow-Origin'] = allowedOrigins[origin] || 'https://www.dreampip.com';
+  }
+
   // You could alternatively limit based on user ID or similar
   const response = next();
   const ip = ipAddress(request) || '127.0.0.1';