fix: add all frontend origins to default CORS allowed list

Added backoffice, hackathon, qr, and infra subdomains to the default
CORS_ALLOWED_ORIGINS. Previously only gacha, imphnen.dev, and
dimentorin were allowed, causing Network Error on other apps.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
maulanasdqn
2026-04-10 16:04:48 +07:00
co-authored by Claude Opus 4.6
parent 5667a0d608
commit 6570bbf752
+1 -1
View File
@@ -200,7 +200,7 @@ pub static ENV: Lazy<Env> = Lazy::new(|| {
cdn_url: get_env_with_warning("CDN_URL", "https://cdn.asepharyana.tech"),
cors_allowed_origins: get_env_with_warning(
"CORS_ALLOWED_ORIGINS",
"https://gacha.imphnen.dev,https://imphnen.dev,https://dimentorin.imphnen.dev",
"https://gacha.imphnen.dev,https://imphnen.dev,https://dimentorin.imphnen.dev,https://backoffice.imphnen.dev,https://hackathon.imphnen.dev,https://qr.imphnen.dev,https://infra.imphnen.dev",
)
.split(',')
.map(|s| s.trim().to_string())