Update index.js

index.js

@@ -71,10 +71,21 @@ app.use("/api/v1/", apiLimiter);
 app.disable("x-powered-by");
 app.disable("link")
 
+const allowedOrigins = [
+    'https://randydev-ryu-js.hf.space',
+];
+
 app.use(cors({
-    origin: '*',
+    origin: (origin, callback) => {
+        if (allowedOrigins.includes(origin)) {
+            callback(null, true);
+        } else {
+            callback(new Error('Not allowed by CORS'));
+        }
+    },
     methods: ['GET', 'POST'],
     allowedHeaders: ['Content-Type', 'Authorization', 'x-api-key'],
+    credentials: true,
 }));
 
 app.use(bodyParser.json());