updated cors

Author: Javedmv

api-gateway/src/middleware/security.ts

@@ -11,9 +11,17 @@ export const applySecurityMiddleware = (app: Application) => {
         crossOriginResourcePolicy: { policy: "cross-origin" },
     }));
 
+    const allowedOrigins = ["https://v-learning-client-5r8j.vercel.app"];
+
     // Configure CORS properly
     app.use(cors({
-        origin: true,
+        origin: (origin, callback) => {
+            if (!origin || allowedOrigins.includes(origin)) {
+                callback(null, true);
+            } else {
+                callback(new Error("Not allowed by CORS"));
+            }
+        },
         methods: ["GET", "POST", "HEAD", "PUT", "PATCH", "DELETE", "OPTIONS"],
         credentials: true,
         allowedHeaders: ['Content-Type', 'Authorization', 'Cookie', 'Range', 'Accept', 'X-Requested-With', 'X-Forwarded-For'],
@@ -28,5 +36,5 @@ export const applySecurityMiddleware = (app: Application) => {
         legacyHeaders: false,
     });
 
-    // app.use(limiter);
+    app.use(limiter);
 };

manifest/deployments/auth.yaml

@@ -24,7 +24,7 @@ spec:
 apiVersion: v1
 kind: Service
 metadata:
-  name: vlearning-auth-service
+  name: vlearning-auth-service3
 spec:
   selector:
     app: vlearning-auth-service

manifest/ingress-controller.yaml

@@ -10,24 +10,24 @@ spec:
     - host: welearning.online
       http:
         paths:
-          - path: /api/payments/webhook
+          - path: /
             pathType: Prefix
             backend:
               service:
-                name: vlearning-payment-srv
+                name: vlearning-api-gateway
                 port:
-                  number: 3004
-          - path: /socket.io
+                  number: 3000
+          - path: /payments/webhook
             pathType: Prefix
             backend:
               service:
-                name: vlearning-chat-service
+                name: vlearning-payment-srv
                 port:
-                  number: 3005
-          - path: /
+                  number: 3004
+          - path: /socket.io
             pathType: Prefix
             backend:
               service:
-                name: vlearning-api-gateway
+                name: vlearning-chat-service
                 port:
-                  number: 3000
+                  number: 3005