From 3915592ca0a9f1f48d6aef086a9403086a5c3479 Mon Sep 17 00:00:00 2001
From: Foxix <fenixoffc@gmail.com>
Date: Thu, 10 Jul 2025 22:02:41 +0300
Subject: [PATCH] new fix CORS

---
 src/index.js | 23 +++++++++++++++++------
 1 file changed, 17 insertions(+), 6 deletions(-)

diff --git a/src/index.js b/src/index.js
index f5fadab..fa1f1a1 100644
--- a/src/index.js
+++ b/src/index.js
@@ -104,13 +104,24 @@ const swaggerOptions = {
 const swaggerDocs = swaggerJsdoc(swaggerOptions);
 
 // CORS configuration
+const allowedOrigins = [
+  'http://localhost:3000',
+  'https://neo-movies.vercel.app',
+  'https://neomovies.sofron.ru'
+];
+
 const corsOptions = {
-  origin: [
-    'http://localhost:3000',
-    'https://neo-movies.vercel.app',
-    'https://neomovies.sofron.ru',
-    /\.vercel\.app$/
-  ],
+  origin: function (origin, callback) {
+    // Разрешаем запросы без origin (например, от мобильных приложений или curl)
+    if (!origin) return callback(null, true);
+
+    // Разрешаем, если домен есть в списке или это превью-сборка Vercel
+    if (allowedOrigins.indexOf(origin) !== -1 || /\.vercel\.app$/.test(origin)) {
+      callback(null, true);
+    } else {
+      callback(new Error('Not allowed by CORS'));
+    }
+  },
   methods: ['GET', 'POST', 'PUT', 'DELETE', 'OPTIONS'],
   allowedHeaders: ['Content-Type', 'Authorization'],
   credentials: true,