Merge commit '9db5dc61e6aafc621058e5c8583bee9e5d4d6067' into local

.env

@@ -2,7 +2,7 @@ W8A1C=98420b966d0798f84b8eadc2d36d0f3740377285695857f62e0ff08509cdf3676ff2632764
 P3UQ5=1d66650cb3bbe70d1426db09bdad22a326a1e3202598d9c92a7d43432b60a2b1cd835b13bd0aafb4497af0f494b3d0f78d4882fc5d50e05d10d19431a7ebc41b4d38bd92bda412e7f5a6ee52695a695e96b0b2aa29464437098e4377406a789652b69a92
 SRU51=3d3eb3d842f4e595048f1806ca815f8092e29fb6b98a30dff0b8241ad0e6c273
 
-MYDSY=8022f28ca4a1c4668fd7818346d2370a27dfc4ae5a483ded2ba2c697e3d2f1a789945b2a592221f9fc7d7967df84405cae735bc06d0fa3488e65014fa5bdd239e134544f3dd3e16fad915aec1009571e5f6bfc0437427c4f73df226a811cb25489863b4015af90eb6ade3583d2fd63b414f8e15f5f1e07c0eb7a5514461286bc
+MYDSY=f62d8ed506f6cdfaf3a7fbc7fe1b55c5676362ce5f3404e8ad73f4c79088aa125f16b4b1e1a63612999e13e7ec5cc5c305959678c99c423e1f9295c581f2f5653f794866d50f5b11a2325ef9a4fa1cad3d9960ad41a080ab8090636cb6168594e59b383ccd5db4a958ae8bb5878c51c237951bd76bcdd2e4e9bbbdc8174003130ccceae8944b33d727929386a4c8ab5c
 XNX1Q=3f551be0c7519b3765a033014ddb9fc041fb2118679b46ca59db24e33c42964d6b4e311108ff1db25580feaf8dd6b63098e58b980a78bd25f3a685370a834653cc2e1c26dd0e504a76fa4490cd054f3c3eefb0b2ccc044abbe3898173de93b5084ffd2f03bcb78d23da04587737bdd0e7e0fcafd04f7784c50e59f4fd013f3f671351be3
 TEKQU=72372a5ec47568b3e9743691dd37a8854840e688bd0b653274e9652913c5021404cb31178efc06b48947d35ef9a58f0b73bd79236b732215d0d7cef7fa5a2d14e12bee126627525080197bd889c8c9f1279a9a99c53d9da2b8d8aadbe435a30180cfc311cc843000d20cd69820476fa0e6dce2057fb32c1d1f1ea301c892ed1f3bfb301b
 CBGTB=d69969375fb168a7d6cc35e27a5cc982896c1c0ab35d875fd54dc13b1226bb4e962994e8af5b02dc8c2d91eab09b26d06c37ff7aca82813883f98a568a733f3587f857d417bbbcbc292e88e2b706c1e79253ba7c4d300b8081c7ae5c1a5087f6f1b06020b79a3e91903bbe8946c5086643b683a287

app.js

@@ -12,14 +12,22 @@ require('./config/db')()
 
 app.use(logger('dev'))
 app.use(express.json())
-app.use(cors())
+app.use(
+  cors({
+    origin: process.env.CORS_ORIGIN || '*',
+    credentials: true,
+  })
+)
 
 app.use(express.urlencoded({ extended: false }))
 app.use(cookieParser(process.env.SRU51))
 // app.use(csrf( ['GET', 'HEAD', 'OPTIONS'], ['/v1/auth/login', /\/v1\/auto\//i, /v2/i]))
 
 app.use(express.static(path.join(__dirname, 'public')))
-app.use((req, res, next) => {req.data = {}; return next()})
+app.use((req, res, next) => {
+  req.data = {}
+  return next()
+})
 
 // routes
 app.use('/', require('./routes'))