feat: add cors configuration list to express

.env.example

@@ -1,6 +1,7 @@
 # server
 PORT=8888
 LOG_LEVEL=info
+CORS=http://0.0.0.0:4000
 
 # redis
 REDIS=redis://localhost:6379

README.md

@@ -20,6 +20,7 @@ copy [.env.example](./.env.example) to `.env` and fill in the following variable
 |:--|:--|
 | PORT | Port number of the server |
 | LOG_LEVEL | Log level of the server |
+| CORS | Allow origin url for CORS |
 | REDIS | Redis connection string |
 | GOOGLE_APPLICATION_CREDENTIALS | Path to the Google Cloud credential file |
 | ID | Google Analytics View ID |

package.json

@@ -10,6 +10,7 @@
   "license": "ISC",
   "devDependencies": {
     "@eslint/js": "^9.9.0",
+    "@types/cors": "^2.8.17",
     "@types/eslint__js": "^8.42.3",
     "@types/express": "^4.17.21",
     "@types/node": "^22.4.0",
@@ -30,6 +31,7 @@
   },
   "dependencies": {
     "@google-analytics/data": "^4.8.0",
+    "cors": "^2.8.5",
     "express": "^4.19.2",
     "ioredis": "^5.4.1"
   }

src/config/config.ts

@@ -5,6 +5,7 @@ dotenv.config();
 type ServerConfig = {
   port: number;
   logLevel: string;
+  cors: string[];
   redis: string;
   credentialPath: string;
   reportId: string;
@@ -15,9 +16,13 @@ type ServerConfig = {
 const config = ReadConfig();
 
 function ReadConfig(): ServerConfig {
+  const corsList = process.env.CORS || "";
+  const cors = corsList.split(",").map((item) => item.trim());
+
   return {
     port: Number(process.env.PORT) || 8888,
     logLevel: process.env.LOG_LEVEL || "info",
+    cors: cors,
     redis: process.env.REDIS || "",
     credentialPath: process.env.GOOGLE_APPLICATION_CREDENTIALS || "",
     reportId: process.env.ID || "",

src/server.ts

@@ -1,5 +1,6 @@
 import express from "express";
 import dotenv from "dotenv";
+import cors from "cors";
 
 import ViewRoutes from "./routes/views";
 import { interceptor } from "./middleware/interceptor";
@@ -10,6 +11,11 @@ dotenv.config();
 
 const app = express();
 
+app.use(
+  cors({
+    origin: config.cors
+  })
+);
 app.use(interceptor.LogRequest.bind(interceptor));
 app.use(interceptor.ErrorHandle.bind(interceptor));
 app.use("/views", ViewRoutes);