From 627de41ccaf0afe8b392a0f8359287f1bfb08f3d Mon Sep 17 00:00:00 2001
From: Tom Butcher <thomasbutcher15@gmail.com>
Date: Sun, 2 Aug 2026 01:18:05 +0100
Subject: [PATCH] Refactor CORS origin handling in index.js to support multiple
 origins using a Set for uniqueness. Log allowed origins during server
 initialization for better visibility and debugging.

---
 src/index.js | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/src/index.js b/src/index.js
index 38e4437..4873988 100644
--- a/src/index.js
+++ b/src/index.js
@@ -81,9 +81,15 @@ logger.level = config.server.logLevel;
 
 app.use(log4js.connectLogger(logger, { level: 'trace' }));
 
-const allowedOrigins =
-  config.server.corsOrigins ||
-  [config.app.urlClient, config.app.urlElectronClient].filter(Boolean);
+const allowedOrigins = [
+  ...new Set(
+    [
+      ...(config.server.corsOrigins || []),
+      config.app.urlClient,
+      config.app.urlElectronClient,
+    ].filter(Boolean)
+  ),
+];
 const corsOptions = {
   origin: function (origin, callback) {
     if (!origin) return callback(null, true);
@@ -120,6 +126,7 @@ async function initializeApp() {
 
     // Start server
     app.listen(PORT, () => logger.info(`Server listening to port ${PORT}`));
+    logger.info(`Allowed origins: ${allowedOrigins.join(', ')}`);
   } catch (err) {
     logger.error('Failed to initialize application:', err);
     process.exit(1);