graphile / starter

Opinionated SaaS quick-start with pre-built user account and organization system for full-stack application development in React, Node.js, GraphQL and PostgreSQL. Powered by PostGraphile, TypeScript, Apollo Client, Graphile Worker, Graphile Migrate, GraphQL Code Generator, Ant Design and Next.js
https://graphile-starter.herokuapp.com
Other
1.74k stars 219 forks source link

Allow setting cookies from other origins #197

Open justinr1234 opened 4 years ago

justinr1234 commented 4 years ago

This allows cookies to be sent from an origin other than the primary origin. This can be useful if you want to have multiple sites hosted from different sub-domains but using the same API. Additionally, in development mode, this allows you to use a separate server (such as Ionic dev server) to go against the same API.

There shouldn't be any security concerns as this by default uses the same origin. It only allows changes if you specifically want to whitelist a particular domain to allow cookies from there.

Pass in allowed values as a comma-separated string:

SESSION_ALLOWED_ORIGINS=http://localhost:8100,https://sub.mydomain.com