Set Access-Control-Max-Age to 1 day

oxheadalpha · Oct 13, 2023 · 6c881eb · 6c881eb
1 parent f062f2c
commit 6c881eb
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/middleware.ts b/src/middleware.ts
@@ -8,6 +8,8 @@ export const cors = (_: Request, res: Response, next: NextFunction) => {
   res
     .setHeader("Access-Control-Allow-Origin", host)
     .setHeader("Access-Control-Allow-Methods", "GET, POST")
+    // Clients should cache CORS policy for 1 day
+    .setHeader("Access-Control-Max-Age", 86400)
     .setHeader(
       "Access-Control-Allow-Headers",
       "Origin, X-Requested-With, Content-Type, Accept"