From edd5503fe8fdc87c2b698e3204aa1eaa796d4bd3 Mon Sep 17 00:00:00 2001 From: Mohamed Boudra Date: Fri, 10 Apr 2026 10:35:48 +0700 Subject: [PATCH] Support wildcard CORS origin via PASEO_CORS_ORIGINS=* --- packages/server/src/server/bootstrap.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/server/src/server/bootstrap.ts b/packages/server/src/server/bootstrap.ts index ada95fea3..e06ac834d 100644 --- a/packages/server/src/server/bootstrap.ts +++ b/packages/server/src/server/bootstrap.ts @@ -254,7 +254,7 @@ export async function createPaseoDaemon( app.use((req, res, next) => { const origin = req.headers.origin; - if (origin && allowedOrigins.has(origin)) { + if (origin && (allowedOrigins.has("*") || allowedOrigins.has(origin))) { res.setHeader("Access-Control-Allow-Origin", origin); res.setHeader("Access-Control-Allow-Methods", "GET, POST, DELETE, OPTIONS"); res.setHeader("Access-Control-Allow-Headers", "Content-Type, Authorization");