From 1bdce528cf784615888b80e3686eca446154891e Mon Sep 17 00:00:00 2001
From: Alexis Tyler <xo@wvvw.me>
Date: Tue, 29 Jun 2021 05:19:09 +0930
Subject: [PATCH] fix: in debug mode allow null origin

---
 app/server.ts | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/app/server.ts b/app/server.ts
index 9a4a8adf1..b107562c2 100644
--- a/app/server.ts
+++ b/app/server.ts
@@ -90,8 +90,13 @@ log.debug(`Allowed origins: ${allowedOrigins.join(', ')}`);
 app.use(cors({
 	origin: function (origin, callback) {
 		// Disallow requests with no origin
-		// (like mobile apps or curl requests)
+		// (like mobile apps, curl requests or viewing /graphql directly)
 		if (!origin) {
+			// If in debug mode allow this
+			if (!config.get('debug')) {
+				return;
+			}
+
 			log.debug('No origin provided, denying CORS!');
 			callback(new Error(invalidOrigin), false);
 			return;