Allow multiple CORS domain in express js

Question

How do I allow multiple domains for CORS in express in a simplified way.

I have

 cors: {         origin: "www.one.com";     }      app.all('*', function(req, res, next) {             res.header("Access-Control-Allow-Origin", cors.origin);             res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept");             next();         }); 

This works when there is only one domain mentioned in origin

But if I want to have origin as an array of domains and I want to allow CORS for all the domains in the origin array, I would have something like this -

cors: {             origin: ["www.one.com","www.two.com","www.three.com"];         } 

But then the problem is this below code would not work -

app.all('*', function(req, res, next) {                 res.header("Access-Control-Allow-Origin", cors.origin);                 res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept");                 next();             }); 

How do I make res.header take an array of domains via cors.origin ?

Answer 1

I would recommend the cors-module: https://www.npmjs.org/package/cors It does this kind of stuff for you - check the "Configuring CORS w/ Dynamic Origin"-Section