From 6570bbf752a97f25bc197866c5071b60a91f7024 Mon Sep 17 00:00:00 2001 From: maulanasdqn Date: Fri, 10 Apr 2026 16:04:48 +0700 Subject: [PATCH] fix: add all frontend origins to default CORS allowed list Added backoffice, hackathon, qr, and infra subdomains to the default CORS_ALLOWED_ORIGINS. Previously only gacha, imphnen.dev, and dimentorin were allowed, causing Network Error on other apps. Co-Authored-By: Claude Opus 4.6 (1M context) --- imphnen-libs/src/environment/mod.rs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/imphnen-libs/src/environment/mod.rs b/imphnen-libs/src/environment/mod.rs index 51d3060..10a80cf 100644 --- a/imphnen-libs/src/environment/mod.rs +++ b/imphnen-libs/src/environment/mod.rs @@ -200,7 +200,7 @@ pub static ENV: Lazy = Lazy::new(|| { cdn_url: get_env_with_warning("CDN_URL", "https://cdn.asepharyana.tech"), cors_allowed_origins: get_env_with_warning( "CORS_ALLOWED_ORIGINS", - "https://gacha.imphnen.dev,https://imphnen.dev,https://dimentorin.imphnen.dev", + "https://gacha.imphnen.dev,https://imphnen.dev,https://dimentorin.imphnen.dev,https://backoffice.imphnen.dev,https://hackathon.imphnen.dev,https://qr.imphnen.dev,https://infra.imphnen.dev", ) .split(',') .map(|s| s.trim().to_string())