Changed the way the headers are set

server/src/config.ts

@@ -8,9 +8,7 @@ export const keys = {
     public: '/etc/ssl/localcerts/cert.pem',
 };
 
-export const headers = {
-    'Access-Control-Allow-Origin': '*',
-};
+export const allowedOrigins = [ "*" ];
 
 export const environment = (env.NODE_ENV ?? 'development') as ('development' | 'staging' | 'production');
 

server/src/headers.ts

 
 import { NextFunction, Request, Response } from 'express';
 
-import { headers } from './config';
+import { allowedOrigins } from './config';
 
-export function addDefaultHeaders(_req: Request, res: Response, next: NextFunction) {
-    let header : keyof typeof headers;
-    for (header in headers) {
-        res.header(header, headers[header]);
+export function addDefaultHeaders(req: Request, res: Response, next: NextFunction) {
+    const origin = req.header('Origin');
+    if (allowedOrigins.includes('*') || origin && allowedOrigins.includes(origin)) {
+        res.header('Access-Control-Allow-Origin', origin);
     }
     next();
 }