Do not add cors headers in production mode

This commit is contained in:
Jan Oberhauser 2019-09-20 13:06:06 +02:00
parent 0f67177bf6
commit a5344a0998

View file

@ -204,6 +204,7 @@ class App {
//support application/x-www-form-urlencoded post data //support application/x-www-form-urlencoded post data
this.app.use(bodyParser.urlencoded({ extended: false })); this.app.use(bodyParser.urlencoded({ extended: false }));
if (process.env['NODE_ENV'] !== 'production') {
this.app.use((req: express.Request, res: express.Response, next: express.NextFunction) => { this.app.use((req: express.Request, res: express.Response, next: express.NextFunction) => {
// Allow access also from frontend when developing // Allow access also from frontend when developing
res.header('Access-Control-Allow-Origin', 'http://localhost:8080'); res.header('Access-Control-Allow-Origin', 'http://localhost:8080');
@ -211,6 +212,7 @@ class App {
res.header('Access-Control-Allow-Headers', 'Origin, X-Requested-With, Content-Type, Accept, sessionid'); res.header('Access-Control-Allow-Headers', 'Origin, X-Requested-With, Content-Type, Accept, sessionid');
next(); next();
}); });
}
this.app.use((req: express.Request, res: express.Response, next: express.NextFunction) => { this.app.use((req: express.Request, res: express.Response, next: express.NextFunction) => {