fix: cors settings for POST

src/server/index.ts

@@ -11,11 +11,6 @@ const app = express();
 // serve che client files
 app.use(express.static("./dist/client"));
 
-// activate cors, but only if in dev mode (in prodution, the client is served by the same server)
-if (process.env.TS_NODE_DEV) {
-  app.use(cors());
-}
-
 // enable body parser to parse json and urlencoded data
 app.use(bodyParser.urlencoded({ extended: false }));
 app.use(bodyParser.json());

src/server/post-message.ts

@@ -1,12 +1,18 @@
 import type { Express } from "express";
 import multer from "multer";
-import cors from "cors";
+import cors, { type CorsOptions } from "cors";
 import { addEntry } from "./db";
 
 const upload = multer();
 
+const postCorsOptions: CorsOptions = {
+  origin: (process.env.HTTP_POST_ALLOWED_ORIGINS || "*").split(","),
+  methods: ["POST"],
+};
+
 export function registerPostMessage(app: Express) {
-  app.post("/", cors(), (req, res) => {
+  app.options("/", cors(postCorsOptions));
+  app.post("/", cors(postCorsOptions), (req, res) => {
     console.log("\nReceived logging message:");
     const metadata: [string, string][] = [];
     let gameName: string = "";