mirror of
https://github.com/Dvorinka/Trackeep.git
synced 2026-06-03 20:12:58 +00:00
Tomas Dvorak
954a1a1080
- Replace Redis with DragonflyDB for better performance and memory efficiency - Remove redundant environment variables (POSTGRES_*, ENCRYPTION_KEY, OAUTH_SERVICE_URL) - Consolidate database configuration to use single DB_* variables - Use JWT_SECRET for both JWT tokens and encryption - Remove PORT variable redundancy, use BACKEND_PORT consistently - Clean up docker-compose configurations for dev/prod consistency - Add DragonflyDB configuration with optimized memory usage - Remove redis.conf as it's no longer needed - Update health checks to use Redis-compatible CLI for DragonflyDB - Add missing VITE_API_URL to production frontend - Fix GitHub Actions to use correct go.sum path - Clean up development directories and unused files
56 lines
1.3 KiB
Go
56 lines
1.3 KiB
Go
package middleware
|
|
|
|
import (
|
|
"net/http"
|
|
"os"
|
|
"strings"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
)
|
|
|
|
func CORSMiddleware() gin.HandlerFunc {
|
|
return func(c *gin.Context) {
|
|
allowedOrigins := os.Getenv("CORS_ALLOWED_ORIGINS")
|
|
ginMode := os.Getenv("GIN_MODE")
|
|
|
|
if allowedOrigins == "" {
|
|
if ginMode == "release" {
|
|
c.JSON(http.StatusForbidden, gin.H{
|
|
"error": "CORS not configured for production",
|
|
"message": "Please set CORS_ALLOWED_ORIGINS environment variable",
|
|
})
|
|
c.Abort()
|
|
return
|
|
} else {
|
|
allowedOrigins = "http://localhost:5173,http://localhost:3000,http://localhost:8080"
|
|
}
|
|
}
|
|
|
|
origin := c.Request.Header.Get("Origin")
|
|
|
|
// Always set CORS headers
|
|
if allowedOrigins == "*" {
|
|
c.Header("Access-Control-Allow-Origin", "*")
|
|
} else {
|
|
for _, allowedOrigin := range strings.Split(allowedOrigins, ",") {
|
|
if strings.TrimSpace(allowedOrigin) == origin {
|
|
c.Header("Access-Control-Allow-Origin", origin)
|
|
break
|
|
}
|
|
}
|
|
}
|
|
|
|
c.Header("Access-Control-Allow-Methods", "GET, POST, PUT, DELETE, OPTIONS")
|
|
c.Header("Access-Control-Allow-Headers", "Content-Type, Authorization, X-Requested-With")
|
|
c.Header("Access-Control-Allow-Credentials", "true")
|
|
c.Header("Access-Control-Max-Age", "86400")
|
|
|
|
if c.Request.Method == "OPTIONS" {
|
|
c.AbortWithStatus(204)
|
|
return
|
|
}
|
|
|
|
c.Next()
|
|
}
|
|
}
|