Allow HTTPS tenant origins for cross-origin get_user CORS.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-03 19:47:54 +03:30
parent 0a08cdb7ca
commit 1586725a5b
2 changed files with 8 additions and 2 deletions
@@ -9,6 +9,7 @@ DATABASE_URL="postgresql://montime:CHANGE_ME@127.0.0.1:5432/superadmin?schema=pu
 JWT_SECRET="change-me-in-production-use-long-random-string"
 JWT_EXPIRES_IN="7d"
 CORS_ORIGIN="http://localhost:5173,http://localhost:3100,https://adm.montzar.ir"
+# Production also allows any https:// sold-version origin for public /get_user (see main.ts).
 # آدرس عمومی API برای ساخت URL لوگو (در پروداکشن دامنه HTTPS سوپرادمین)
 PUBLIC_API_URL="http://localhost:3001"