feat: enhance CORS configuration and implement throttling for API endpoints; add admin role checks in controllers

2026-04-21 08:17:44 +02:00
parent 7748ad311f
commit e370062b5c
10 changed files with 44 additions and 24 deletions
@@ -23,6 +23,8 @@ MISTRAL_API_KEY=
 # Publik URL (används av frontend)
 NEXT_PUBLIC_APP_URL=https://recept.gynther.se
 NEXT_PUBLIC_API_URL=https://recept.gynther.se
+# CORS — tillåtna origins för backend-API (normalt samma som APP_URL)
+ALLOWED_ORIGIN=https://recept.gynther.se

 # Bootstrap-användare (skapas/uppdateras vid appstart)
 ADMIN_NADMIN_PASSWORD=byt-ut-mig