542c27bb51
fix: ensure HttpCode annotations for specific endpoints in users and groups controllers refactor: enhance person handling logic in groups service for better e2e test support fix: improve CORS configuration for handling additional origins feat: add @Public decorator to app controller's root endpoint refactor: modify projects controller to return JSON responses for check-access endpoint
64 lines
2.3 KiB
TypeScript
64 lines
2.3 KiB
TypeScript
import { NestFactory } from '@nestjs/core';
|
|
import { ValidationPipe } from '@nestjs/common';
|
|
import { ConfigService } from '@nestjs/config';
|
|
import { AppModule } from './app.module';
|
|
|
|
async function bootstrap() {
|
|
const app = await NestFactory.create(AppModule);
|
|
const configService = app.get(ConfigService);
|
|
|
|
// Configuration globale des pipes de validation
|
|
app.useGlobalPipes(
|
|
new ValidationPipe({
|
|
whitelist: true,
|
|
transform: true,
|
|
forbidNonWhitelisted: true,
|
|
}),
|
|
);
|
|
|
|
// Configuration CORS selon l'environnement
|
|
const environment = configService.get<string>('NODE_ENV', 'development');
|
|
const frontendUrl = configService.get<string>('FRONTEND_URL', 'http://localhost:3001');
|
|
|
|
if (environment === 'development') {
|
|
// En développement, on autorise toutes les origines avec credentials
|
|
app.enableCors({
|
|
origin: true,
|
|
methods: 'GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS',
|
|
credentials: true,
|
|
});
|
|
console.log('CORS configured for development environment (all origins allowed)');
|
|
} else {
|
|
// En production, on restreint les origines autorisées
|
|
const allowedOrigins = [frontendUrl];
|
|
// Ajouter d'autres origines si nécessaire (ex: sous-domaines, CDN, etc.)
|
|
const additionalOrigins = configService.get<string>('ADDITIONAL_CORS_ORIGINS');
|
|
if (additionalOrigins) {
|
|
allowedOrigins.push(...additionalOrigins.split(','));
|
|
}
|
|
|
|
app.enableCors({
|
|
origin: (origin, callback) => {
|
|
// Permettre les requêtes sans origine (comme les appels d'API mobile)
|
|
if (!origin || allowedOrigins.includes(origin)) {
|
|
callback(null, true);
|
|
} else {
|
|
callback(new Error(`Origin ${origin} not allowed by CORS`));
|
|
}
|
|
},
|
|
methods: 'GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS',
|
|
credentials: true,
|
|
maxAge: 86400, // 24 heures de mise en cache des résultats preflight
|
|
});
|
|
console.log(`CORS configured for production environment with allowed origins: ${allowedOrigins.join(', ')}`);
|
|
}
|
|
|
|
// Préfixe global pour les routes API
|
|
app.setGlobalPrefix(configService.get<string>('API_PREFIX', 'api'));
|
|
|
|
const port = configService.get<number>('PORT', 3000);
|
|
await app.listen(port);
|
|
console.log(`Application is running on: http://localhost:${port}`);
|
|
}
|
|
bootstrap();
|