From 85dd55be1efc87ce5cf148b2171c4c18fc39d6a6 Mon Sep 17 00:00:00 2001
From: Jeff Emmett <46964190+Jeff-Emmett@users.noreply.github.com>
Date: Sat, 7 Dec 2024 14:57:05 -0500
Subject: [PATCH] fix prod env

---
 worker/TldrawDurableObject.ts |  6 +++++-
 worker/worker.ts              | 18 +++++-------------
 2 files changed, 10 insertions(+), 14 deletions(-)

diff --git a/worker/TldrawDurableObject.ts b/worker/TldrawDurableObject.ts
index e958bb6..a362bca 100644
--- a/worker/TldrawDurableObject.ts
+++ b/worker/TldrawDurableObject.ts
@@ -108,7 +108,11 @@ export class TldrawDurableObject {
 				status: 500,
 				headers: {
 					'Content-Type': 'application/json',
-					'Access-Control-Allow-Origin': '*'
+					'Access-Control-Allow-Origin': '*',
+					'Access-Control-Allow-Methods': 'GET, POST, OPTIONS, UPGRADE',
+					'Access-Control-Allow-Headers': 'Content-Type, Authorization, Upgrade, Connection',
+					'Access-Control-Max-Age': '86400',
+					'Access-Control-Allow-Credentials': 'true'
 				}
 			});
 		}
diff --git a/worker/worker.ts b/worker/worker.ts
index c81ad19..c319f2d 100644
--- a/worker/worker.ts
+++ b/worker/worker.ts
@@ -27,24 +27,16 @@ const { preflight, corsify } = cors({
 			'https://jeffemmett-canvas.jeffemmett.workers.dev'
 		];
 
-		// Development patterns
-		const devPatterns = [
-			/^http:\/\/localhost:\d+$/,
-			/^http:\/\/127\.0\.0\.1:\d+$/,
-			/^http:\/\/192\.168\.\d+\.\d+:\d+$/,
-			/^http:\/\/169\.254\.\d+\.\d+:\d+$/,
-			/^http:\/\/10\.\d+\.\d+\.\d+:\d+$/
-		];
+		// Always allow if no origin (like from a local file)
+		if (!origin) return '*';
 
-		if (!origin) return undefined;
-
-		// Check exact matches first
+		// Check exact matches
 		if (allowedOrigins.includes(origin)) {
 			return origin;
 		}
 
-		// Then check development patterns
-		if (process.env.NODE_ENV === 'development' && devPatterns.some(pattern => pattern.test(origin))) {
+		// For development - check if it's a localhost or local IP
+		if (origin.match(/^http:\/\/(localhost|127\.0\.0\.192\.168\.|169\.254\.|10\.)/)) {
 			return origin;
 		}