fix: temporary remove domain check (#14)

palladiumkenya · Sep 12, 2024 · 3add5b1 · 3add5b1
1 parent cdf4405
commit 3add5b1
Show file tree

Hide file tree

Showing 4 changed files with 13 additions and 11 deletions.
diff --git a/app/api/mpesa/check-payment-state/route.ts b/app/api/mpesa/check-payment-state/route.ts
@@ -34,7 +34,8 @@ export const POST = async (req: NextRequest) => {
     }
 
     const origin = req.headers.get("origin") ?? "";
-    const isAllowedOrigin = allowedOrigins.includes(origin);
+    // const isAllowedOrigin = allowedOrigins.includes(origin);
+    const isAllowedOrigin = true;
 
     if (isAllowedOrigin) {
       response.headers.set("Access-Control-Allow-Origin", origin);
@@ -59,7 +60,8 @@ export const POST = async (req: NextRequest) => {
 
 export const OPTIONS = async (request: NextRequest) => {
   const origin = request.headers.get("origin") ?? "";
-  const isAllowedOrigin = allowedOrigins.includes(origin);
+  // const isAllowedOrigin = allowedOrigins.includes(origin);
+  const isAllowedOrigin = true;
 
   const preflightHeaders = {
     ...(isAllowedOrigin && { "Access-Control-Allow-Origin": origin }),

diff --git a/app/api/mpesa/stk-push/route.ts b/app/api/mpesa/stk-push/route.ts
@@ -16,7 +16,8 @@ type RequestBody = {
 
 export const OPTIONS = async (request: NextRequest) => {
   const origin = request.headers.get("origin") ?? "";
-  const isAllowedOrigin = allowedOrigins.includes(origin);
+  // const isAllowedOrigin = allowedOrigins.includes(origin);
+  const isAllowedOrigin = true;
 
   const preflightHeaders = {
     ...(isAllowedOrigin && { "Access-Control-Allow-Origin": origin }),

diff --git a/app/api/stk-push-callback/route.ts b/app/api/stk-push-callback/route.ts
@@ -37,13 +37,13 @@ export const POST = async (req: NextRequest, res: NextResponse) => {
   const received: STKPushSuccessfulCallbackBody = await req.json();
 
   const origin = req.headers.get("origin") ?? "";
-  const isAllowedOrigin = [...allowedOrigins, ...safaricomOrigins].includes(
-    origin
-  );
+  // const isAllowedOrigin = [...allowedOrigins, ...safaricomOrigins].includes(
+  //   origin
+  // );
 
-  const tempIsAllowedOrigin = true;
+  const isAllowedOrigin = true;
 
-  if (!tempIsAllowedOrigin) {
+  if (!isAllowedOrigin) {
     return NextResponse.json({ message: "NOT-ALLOWED" }, { status: 401 });
   }
 

diff --git a/utils/cors.ts b/utils/cors.ts
@@ -1,7 +1,5 @@
 import { NextResponse } from "next/server";
 
-//TODO find the URL used in production and add it here
-
 export const allowedOrigins = [
   "https://dev.kenyahmis.org",
   "http://localhost:8700",
@@ -14,7 +12,8 @@ export const corsOptions = {
 };
 
 export const setCorsHeaders = (response: NextResponse, origin: string) => {
-  const isAllowedOrigin = allowedOrigins.includes(origin);
+  // const isAllowedOrigin = allowedOrigins.includes(origin);
+  const isAllowedOrigin = true;
 
   if (isAllowedOrigin) {
     response.headers.set("Access-Control-Allow-Origin", origin);