[apps/www/api] Improve security with ACAs

56kcloud · Dec 21, 2023 · 0a59a5d · 0a59a5d
1 parent c04ed16
commit 0a59a5d
Showing 1 changed file with 26 additions and 1 deletion.
diff --git a/apps/www/src/app/api/revalidate/route.ts b/apps/www/src/app/api/revalidate/route.ts
@@ -1,6 +1,31 @@
+import {NextResponse} from 'next/server'
 import {revalidateTag} from 'next/cache'
 
+export async function OPTIONS() {
+  return NextResponse.json(
+    {},
+    {
+      status: 200,
+      headers: {
+        'Access-Control-Allow-Origin': 'https://cms.56k.cloud',
+        'Access-Control-Allow-Methods': 'OPTIONS',
+        'Access-Control-Allow-Headers': 'Content-Type, Authorization'
+      }
+    }
+  )
+}
+
 export async function GET() {
   revalidateTag('strapi')
-  return new Response('Strapi tag revalidated')
+  return new Response(
+    'Strapi tag revalidated',
+    {
+      status: 200,
+      headers: {
+        'Access-Control-Allow-Origin': 'https://cms.56k.cloud',
+        'Access-Control-Allow-Methods': 'GET',
+        'Access-Control-Allow-Headers': 'Content-Type, Authorization'
+      }
+    }
+  )
 }