Base Access-Control-Allow-Origin on VERCEL_ENV

Author: hasparus

src/app/api/contributors/route.ts

@@ -2,6 +2,7 @@ import { NextRequest, NextResponse } from "next/server"
 import contributorData from "../../../../scripts/sync-landing-schema/data.json"
 
 export const dynamic = "auto"
+export const revalidate = 172800
 
 interface Contributor {
   id: string
@@ -17,31 +18,22 @@ function getContributorData(): ContributorData {
   return contributorData as ContributorData
 }
 
-const PRODUCTION_ORIGIN = `https://${process.env.VERCEL_PROJECT_PRODUCTION_URL}`
-const ALLOWED_ORIGIN = process.env.VERCEL_URL
-  ? `https://${process.env.VERCEL_URL}`
-  : "http://localhost:3000"
-
-function isSameOrigin(origin: string, allowedOrigin: string): boolean {
-  return (
-    origin.replace(/\/\/www\./, "") === allowedOrigin.replace(/\/\/www\./, "")
-  )
-}
+const ALLOWED_ORIGIN =
+  process.env.VERCEL_ENV === "production"
+    ? `https://${process.env.VERCEL_PROJECT_PRODUCTION_URL}`
+    : process.env.VERCEL_URL
+      ? `https://${process.env.VERCEL_URL}`
+      : "http://localhost:3000"
 
 export async function GET(request: NextRequest) {
-  let origin = request.headers.get("origin")
-  if (!origin) {
-    origin = (request.headers.get("referer") || "").replace(/\/$/, "")
-  }
+  const origin = request.headers.get("origin")
 
   const headers = new Headers({
     "Content-Type": "application/json",
-    "Access-Control-Allow-Origin": isSameOrigin(origin, PRODUCTION_ORIGIN)
-      ? PRODUCTION_ORIGIN
-      : ALLOWED_ORIGIN,
+    "Access-Control-Allow-Origin": ALLOWED_ORIGIN,
     "Access-Control-Allow-Methods": "GET",
     "Access-Control-Allow-Headers": "Content-Type",
-    "Cache-Control": "public, s-maxage=86400, stale-while-revalidate=172800",
+    "Cache-Control": `public, s-maxage=86400, stale-while-revalidate=${revalidate}`,
   })
 
   try {