feat: Allow cors logic modified

Author: roerohan

sample.env

@@ -5,3 +5,5 @@ DB_USER=c7f
 DB_PASSWORD=c7f
 DB_NAME=c7f
 JWT_SECRET=secret
+ALLOW_CORS=true
+ALLOWED_ORIGINS=http://localhost:3001,http://locahost:5000

src/app.ts

@@ -13,9 +13,15 @@ const app = express();
 app.set('PORT', process.env.PORT || 3000);
 app.use(bodyParser.json());
 
-const { NODE_ENV } = process.env;
-if (NODE_ENV === 'dev') {
-    app.use(cors());
+const { ALLOW_CORS, ALLOWED_ORIGINS } = process.env;
+if (ALLOW_CORS === 'true') {
+    const corsOptions = {
+        origin: ALLOWED_ORIGINS ? ALLOWED_ORIGINS.split(',') : '*',
+    };
+
+    app.use(cors(
+        corsOptions,
+    ));
 }
 
 app.use(appRoutes);