fix: 🐛 Fixed invalid CORD handling in the node-api server

Author: kostysh

packages/node-api/src/server.ts

@@ -397,9 +397,7 @@ export class NodeApiServer {
     });
 
     // Create a http server for handling of HTTP requests
-    // TODO Implement origin configuration via .env
     this.server = createServer((req, res) => {
-      res.setHeader('Access-Control-Allow-Origin', this.cors.join(', '));
       res.setHeader('Access-Control-Request-Method', 'GET');
       res.setHeader('Access-Control-Allow-Methods', 'OPTIONS, GET');
       res.setHeader(
@@ -408,6 +406,12 @@ export class NodeApiServer {
       );
       res.setHeader('Access-Control-Allow-Credentials', 'true');
 
+      const origin = req.headers.origin;
+
+      if (origin && this.cors.includes(origin)) {
+        res.setHeader('Access-Control-Allow-Origin', origin);
+      }
+
       if (req.method === 'OPTIONS') {
         res.writeHead(200);
         res.end();