fix: allow desktop app release checks

2026-09-25 23:47:01 +00:00 · 2026-09-25 23:47:01 +00:00 · ec7ec6240c
commit ec7ec6240c
parent 6d65c3c1d5
1 changed files with 7 additions and 1 deletions
--- a/apps/api/src/server.ts
+++ b/apps/api/src/server.ts
@ -38,9 +38,15 @@ app.use((_req, res, next) => {
  res.setHeader('Referrer-Policy', 'strict-origin-when-cross-origin')
  next()
 })
+const desktopOrigins = new Set([
+  'tauri://localhost',
+  'http://tauri.localhost',
+  'https://tauri.localhost',
+])
+
 app.use(cors({
  origin(origin, callback) {
-    if (!origin || origin === config.webOrigin) callback(null, true)
+    if (!origin || origin === config.webOrigin || desktopOrigins.has(origin)) callback(null, true)
    else callback(new Error('cors_origin_rejected'))
  },
  credentials: false,