feat(medusa): Allow regexp in CORS configuration (#1935)

packages/medusa/src/api/routes/admin/index.js

@@ -36,6 +36,7 @@ import userRoutes, { unauthenticatedUserRoutes } from "./users"
 import variantRoutes from "./variants"
 import paymentCollectionRoutes from "./payment-collections"
 import paymentRoutes from "./payments"
+import { parseCorsOrigins } from "medusa-core-utils"
 
 const route = Router()
 
@@ -45,7 +46,7 @@ export default (app, container, config) => {
   const adminCors = config.admin_cors || ""
   route.use(
     cors({
-      origin: adminCors.split(","),
+      origin: parseCorsOrigins(adminCors),
       credentials: true,
     })
   )

packages/medusa/src/api/routes/store/index.js

@@ -17,6 +17,7 @@ import shippingOptionRoutes from "./shipping-options"
 import swapRoutes from "./swaps"
 import variantRoutes from "./variants"
 import paymentCollectionRoutes from "./payment-collections"
+import { parseCorsOrigins } from "medusa-core-utils"
 
 const route = Router()
 
@@ -26,7 +27,7 @@ export default (app, container, config) => {
   const storeCors = config.store_cors || ""
   route.use(
     cors({
-      origin: storeCors.split(","),
+      origin: parseCorsOrigins(storeCors),
       credentials: true,
     })
   )