UPDATE: add all dadosfera domains

UPDATE: test cors domain
UPDATE: cookie path
2026-09-01 20:28:17 +00:00 · 2025-09-16 17:33:19 -03:00 · 2025-09-08 15:22:26 -03:00 · 2025-09-08 10:30:56 -03:00 · 2025-09-08 09:26:47 -03:00 · 2025-09-08 09:25:14 -03:00
2 changed files with 15 additions and 6 deletions
@@ -21,18 +21,27 @@ async function bootstrap() {
  const app = await NestFactory.create(AppModule, {
    logger,
    cors: {
-      origin: '*',
+      origin: [
+        'https://app.stg.dadosfera.ai',
+        'https://app.dadosfera.ai',
+        'https://unimed.dadosfera.ai',
+        'https://boston-scientific.dadosfera.ai',
+        'https://plataforma.dadosfera.ai'
+      ],
      methods: 'GET,HEAD,PUT,PATCH,POST,DELETE',
      preflightContinue: false,
      optionsSuccessStatus: 204,
-      credentials: true
+      credentials: true,
    },
  });
  app.use(helmet());
  app.use(cookieParser(process.env.COOKIE_SECRET));
  if (process.env.ENV === 'prd') {
    app.use('/catalog/register-dataset', json({ limit: '10mb' }));
-    app.use('/catalog/register-dataset', urlencoded({ extended: true, limit: '10mb' }));
+    app.use(
+      '/catalog/register-dataset',
+      urlencoded({ extended: true, limit: '10mb' }),
+    );
  }

  configureSwagger(app);
@@ -573,7 +573,7 @@ export class AuthController {

      this.logger.info('Set Cookie ddf-auth')
      res.cookie('ddf-auth', data.accessToken, {
-        domain: 'stg.dadosfera.ai',
+        domain: '.dadosfera.ai',
        maxAge: exp,
        httpOnly: true,
        secure: true,
@@ -584,7 +584,7 @@ export class AuthController {
    if (data.refreshToken) {
      this.logger.info('Set Cookie ddf-refresh-auth')
      res.cookie('ddf-refresh-auth', data.refreshToken, {
-        domain: 'stg.dadosfera.ai',
+        domain: '.dadosfera.ai',
        maxAge: exp,
        httpOnly: true,
        secure: true,
@@ -595,7 +595,7 @@ export class AuthController {
    if (data.userId) {
      this.logger.info('Set Cookie ddf-refresh-auth')
      res.cookie('ddf-user-id', data.userId, {
-        domain: 'stg.dadosfera.ai',
+        domain: '.dadosfera.ai',
        maxAge: exp,
        httpOnly: true,
        secure: true,
Author	SHA1	Message	Date
marcos-silva-rodrigues	5002d147ad	UPDATE: add all dadosfera domains	2025-09-16 17:33:19 -03:00
marcos-silva-rodrigues	288a796f46	UPDATE: test cors domain	2025-09-08 15:22:26 -03:00
marcos-silva-rodrigues	1ee49ceab8	UPDATE: cookie path	2025-09-08 10:30:56 -03:00
marcos-silva-rodrigues	075ca747df	FIX: ghost commit	2025-09-08 09:26:47 -03:00
marcos-silva-rodrigues	9ead4588c1	UDATE: test cookie domain dadosfera.ai	2025-09-08 09:25:14 -03:00
Marcos Rodrigues Silva	92b64bb362	Merge pull request #374 from dadosfera/hotfix/oracle Hotfix/oracle	2025-09-05 10:25:38 -03:00
Marcos Rodrigues Silva	6780167f2b	Merge pull request #371 from dadosfera/hotfix/oracle FIX: infinite loading when login is incorrect	2025-09-03 16:31:28 -03:00
Marcos Rodrigues Silva	caeaf62a9d	Merge pull request #370 from dadosfera/hotfix/oracle Hotfix/oracle	2025-09-03 12:21:17 -03:00