diff --git a/package.json b/package.json index 21d8f8f..f0d4084 100644 --- a/package.json +++ b/package.json @@ -24,11 +24,12 @@ "smee-client": "^2.0.3", "socket.io": "^4.8.1", "stegcloak": "^1.1.1", - "ws": "^8.18.0" + "ws": "^8.18.0", + "cors": "latest" }, "devDependencies": { "@types/node": "^22.7.4", "ts-node": "^10.9.2", "typescript": "^5.5.4" } -} +} \ No newline at end of file diff --git a/src/modules/slackapp.ts b/src/modules/slackapp.ts index 3758a85..b2c6f7b 100644 --- a/src/modules/slackapp.ts +++ b/src/modules/slackapp.ts @@ -28,14 +28,9 @@ export const app = new App({ path: "/send-private", method: ["POST"], async handler(req, res) { - const headers = { - "Access-Control-Allow-Origin": - "*" /* @dev First, read about security */, - "Access-Control-Allow-Methods": "OPTIONS, POST, GET", - "Access-Control-Max-Age": 2592000, // 30 days - /** add other headers as per requirement */ - }; - + await new Promise((resolve) => { + require ("cors")(req,res,resolve) + }) const authHeader = req.headers["authorization"]; if (authHeader !== process.env.AUTH) { res.writeHead(401).end(); @@ -49,7 +44,7 @@ export const app = new App({ //@ts-ignore if (!req.body || Object.keys(req.body) == 0) { - res.writeHead(400, headers).end(); + res.writeHead(400).end(); return; } try { @@ -60,11 +55,11 @@ export const app = new App({ ...req.body, }) .then((d) => { - res.writeHead(200, headers); + res.writeHead(200); res.end(JSON.stringify(d)); }); } catch (e: any) { - res.writeHead(500, headers); + res.writeHead(500); res.end(e.stack); } }),