From ec7ec6240c4280eb8209c2682ad2b3ad18151b02 Mon Sep 17 00:00:00 2001 From: Admin Date: Fri, 25 Sep 2026 23:47:01 +0000 Subject: [PATCH] fix: allow desktop app release checks --- apps/api/src/server.ts | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/apps/api/src/server.ts b/apps/api/src/server.ts index ff8cae5..4218a2b 100644 --- a/apps/api/src/server.ts +++ b/apps/api/src/server.ts @@ -38,9 +38,15 @@ app.use((_req, res, next) => { res.setHeader('Referrer-Policy', 'strict-origin-when-cross-origin') next() }) +const desktopOrigins = new Set([ + 'tauri://localhost', + 'http://tauri.localhost', + 'https://tauri.localhost', +]) + app.use(cors({ origin(origin, callback) { - if (!origin || origin === config.webOrigin) callback(null, true) + if (!origin || origin === config.webOrigin || desktopOrigins.has(origin)) callback(null, true) else callback(new Error('cors_origin_rejected')) }, credentials: false,