chore: remove CORS from backend API

BoltzExchange · Feb 11, 2025 · 17bfad0 · 17bfad0
1 parent ab91169
commit 17bfad0
Show file tree

Hide file tree

Showing 4 changed files with 1 addition and 27 deletions.
diff --git a/lib/Config.ts b/lib/Config.ts
@@ -125,7 +125,6 @@ type EthereumConfig = RskConfig & {
 type ApiConfig = {
   host: string;
   port: number;
-  cors?: string | string[];
 };
 
 type GrpcConfig = {
@@ -269,7 +268,6 @@ class Config {
       api: {
         host: '127.0.0.1',
         port: 9001,
-        cors: '*',
       },
 
       grpc: {

diff --git a/lib/api/Api.ts b/lib/api/Api.ts
@@ -1,4 +1,3 @@
-import cors from 'cors';
 import express, { Application, NextFunction, Request, Response } from 'express';
 import { ApiConfig } from '../Config';
 import Logger from '../Logger';
@@ -22,17 +21,6 @@ class Api {
     this.app = express();
     this.app.set('trust proxy', 'loopback');
 
-    if (config.cors === undefined || config.cors.length !== 0) {
-      this.app.use(
-        cors({
-          origin: config.cors || '*',
-          methods: 'GET,HEAD,PUT,PATCH,POST,DELETE',
-          preflightContinue: false,
-          optionsSuccessStatus: 204,
-        }),
-      );
-    }
-
     this.app.use(
       express.json({
         verify(req, _, buf: Buffer, encoding: string) {

diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -87,7 +87,6 @@
     "bolt11": "^1.4.1",
     "boltz-core": "^2.2.1",
     "colors": "^1.4.0",
-    "cors": "^2.8.5",
     "ecpair": "^2.1.0",
     "ethers": "^6.13.5",
     "express": "^4.21.2",