import{logger as e}from"../logger/index.mjs";const t=[process.env.WEBSITE_URL,process.env.APP_URL,process.env.SHOWCASE_URL],n={origin:(n,r)=>{if(!n){r(null,!0);return}if(t.includes(n)){r(null,!0);return}e.info(`non whitelisted origin`,n),r(null,n)},allowedHeaders:[`authorization`,`Content-Type`,`credentials`,`cache-control`,`Access-Control-Allow-Origin`,`private-state-token-redemption`,`private-state-token-issuance`,`browsing-topics`],exposedHeaders:[``],methods:[`GET`,`HEAD`,`PUT`,`PATCH`,`POST`,`DELETE`],credentials:!0};export{n as corsOptions};
//# sourceMappingURL=cors.mjs.map