fix: 프로덕션 환경에서는 특정 Origin만 참조하도록 수정 (#79)

src/core/config/AppConfig.ts

@@ -0,0 +1,14 @@
+export type AppConfig = {
+  env: 'development' | 'production';
+};
+
+const validateEnv = (env: string = 'development'): AppConfig['env'] => {
+  if (env !== 'development' && env !== 'production') {
+    throw new Error(`Invalid NODE_ENV: ${env}`);
+  }
+  return env as AppConfig['env'];
+};
+
+export const config = (): AppConfig => ({
+  env: validateEnv(process.env.NODE_ENV),
+});

src/core/config/index.ts

@@ -1,10 +1,13 @@
+import * as app from '@khlug/core/config/AppConfig';
 import * as db from '@khlug/core/config/DatabaseConfig';
 import * as session from '@khlug/core/config/LaravelSessionConfig';
 
 export const configuration = (): {
+  app: app.AppConfig;
   database: db.DatabaseConfig;
   session: session.LaravelSessionConfig;
 } => ({
+  app: app.config(),
   database: db.config(),
   session: session.config(),
 });

src/main.ts

@@ -1,13 +1,23 @@
+import { CorsOptions } from '@nestjs/common/interfaces/external/cors-options.interface';
+import { ConfigService } from '@nestjs/config';
 import { NestFactory } from '@nestjs/core';
 import cookieParser from 'cookie-parser';
 
+import { AppConfig } from '@khlug/core/config/AppConfig';
+
 import { RootModule } from '@khlug/RootModule';
 
 async function bootstrap() {
   const app = await NestFactory.create(RootModule);
 
+  const appConfig = app.get(ConfigService).getOrThrow<AppConfig>('app');
+  const corsOptions: CorsOptions | undefined =
+    appConfig.env === 'production'
+      ? { origin: ['https://khlug.org', 'https://app.khlug.org'] }
+      : undefined;
+
+  app.enableCors(corsOptions);
   app.use(cookieParser());
-  app.enableCors();
 
   await app.listen(3000);
 }