From f6d7ddb91ae2cebaae8e45a2adce1aa783fbbcee Mon Sep 17 00:00:00 2001
From: Marco La Rosa <m@lr.id.au>
Date: Mon, 25 Sep 2023 10:54:16 +1000
Subject: [PATCH] configure allowable cors headers

---
 api/index.js | 35 +++++++++++++++++++++++++++++++----
 1 file changed, 31 insertions(+), 4 deletions(-)

diff --git a/api/index.js b/api/index.js
index e6429af..ed8d583 100644
--- a/api/index.js
+++ b/api/index.js
@@ -42,11 +42,38 @@ async function main() {
         process.exit();
     }
 
-    if (process.env.NODE_ENV === "development") {
-        fastify.register(cors, { origin: "*" });
-    }
-    fastify.register(fastifyIO);
+    await fastify.register(cors, {
+        origin: "*",
+        methods: ["OPTIONS", "GET", "HEAD", "PATCH", "POST", "DELETE"],
+        allowedHeaders: [
+            "content-type",
+            "upload-length",
+            "content-length",
+            "upload-offset",
+            "upload-expires",
+            "location",
+            "upload-metadata",
+            "tus-resumable",
+            "tus-version",
+            "tus-max-size",
+            "tus-extension",
+        ],
+        exposedHeaders: [
+            "content-type",
+            "upload-length",
+            "content-length",
+            "upload-offset",
+            "upload-expires",
+            "location",
+            "upload-metadata",
+            "tus-resumable",
+            "tus-version",
+            "tus-max-size",
+            "tus-extension",
+        ],
+    });
     fastify.register(fastifySensible);
+    fastify.register(fastifyIO);
     fastify.register(fastifyCompress);
     fastify.register((fastify, options, done) => {
         fastify.addHook("preHandler", async (req, res) => {