From 05d0cd539cfe2b4137d3269fc3cb1b05ed0a6382 Mon Sep 17 00:00:00 2001
From: Tom Butcher <thomasbutcher15@gmail.com>
Date: Sun, 2 Aug 2026 01:27:20 +0100
Subject: [PATCH] Improve CORS error handling in index.js by logging allowed
 origins and the rejected origin. This change enhances debugging capabilities
 by providing clearer context when a request is denied due to CORS policy.

---
 src/index.js | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/index.js b/src/index.js
index 4873988..fdb7a7b 100644
--- a/src/index.js
+++ b/src/index.js
@@ -95,7 +95,8 @@ const corsOptions = {
     if (!origin) return callback(null, true);
     if (allowedOrigins.includes('*')) return callback(null, true);
     if (allowedOrigins.includes(origin)) return callback(null, true);
-    callback(new Error('Not allowed by CORS'));
+    logger.warn(`Allowed origins: ${allowedOrigins.join(', ')}`);
+    callback(new Error(`Not allowed by CORS - ${origin}`));
   },
   credentials: true,
 };