Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Backend - CORS #146

Open
minhngo3818 opened this issue Apr 13, 2023 · 3 comments
Open

Backend - CORS #146

minhngo3818 opened this issue Apr 13, 2023 · 3 comments
Assignees
Labels
API Routing setup routes for api Backend task relates to backend feature-request request a new feature

Comments

@minhngo3818
Copy link
Collaborator

The current backend does not have CORS (Cross-Origin Resources Sharing) which is to ensure where the request is sent. This feature prevents any alien entity to make a request to the server. Other than the known frontend domain, all non-specify cannot make any request to our server. Prevent at a certain level of CSRF attack

For this task:

  • Install cors from npm and apply to backend/app.js
  • Add a frontend origin of this project to the .env file
  • Configure necessary variables of cors (Make sure to add frontend origin variable to Cors)
@minhngo3818 minhngo3818 added Backend task relates to backend feature-request request a new feature API Services call api in frontend to retrieve data from backend labels Apr 13, 2023
@minhngo3818 minhngo3818 added API Routing setup routes for api and removed API Services call api in frontend to retrieve data from backend labels Apr 16, 2023
@goutham03062001
Copy link

Hey is this issue still open?

I would like to work upon this issue.

@minhngo3818
Copy link
Collaborator Author

Of course. Make sure to push separate PR per issue.

@TechLateef
Copy link

hello i will love to work on this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
API Routing setup routes for api Backend task relates to backend feature-request request a new feature
Projects
None yet
Development

No branches or pull requests

3 participants