From 78b643a945626889c716c863c8edbad68c7fee98 Mon Sep 17 00:00:00 2001 From: Jason Woltje Date: Fri, 27 Feb 2026 12:07:51 +0000 Subject: [PATCH] fix(api): use getTrustedOrigins() for WebSocket CORS (#549) Co-authored-by: Jason Woltje Co-committed-by: Jason Woltje --- apps/api/src/websocket/websocket.gateway.ts | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/apps/api/src/websocket/websocket.gateway.ts b/apps/api/src/websocket/websocket.gateway.ts index 1439c95..f5b385c 100644 --- a/apps/api/src/websocket/websocket.gateway.ts +++ b/apps/api/src/websocket/websocket.gateway.ts @@ -7,6 +7,7 @@ import { import { Logger } from "@nestjs/common"; import { Server, Socket } from "socket.io"; import { AuthService } from "../auth/auth.service"; +import { getTrustedOrigins } from "../auth/auth.config"; import { PrismaService } from "../prisma/prisma.service"; interface AuthenticatedSocket extends Socket { @@ -77,7 +78,7 @@ interface StepOutputData { */ @WSGateway({ cors: { - origin: process.env.WEB_URL ?? "http://localhost:3000", + origin: getTrustedOrigins(), credentials: true, }, })