← modules / security

Origin allowlist checks

security-origin-checks

Strict origin allowlist checks for Express or NestJS requests

add it to a devstack project

npx create-devstack-app add security-origin-checks

requires one of

  • http:connect
  • http:fastify

Environment

  • ALLOWED_ORIGINS

    Comma-separated origins allowed to call the API, e.g. https://app.example.com