updates

config/dev.env

@@ -1,3 +1,4 @@
 PRISMA_ENDPOINT=http://192.168.99.100:4466
 PRISMA_SECRET=f3fasa9b7fda7f7d8s9af7sa6fds9a6fsda0f6dsa6vg
-JWT_SECRET=fdsa7f96oli6sdiFUD29df5dsa950mblyde
+JWT_SECRET=fdsa7f96oli6sdiFUD29df5dsa950mblyde
+WHITE_LIST=http://localhost:3000

config/prod.env

@@ -1,4 +1,5 @@
 NODE_ENV=production
 PRISMA_ENDPOINT=https://blogging-app-9d8770a311.herokuapp.com/blogging-app/prod
 PRISMA_SECRET=HhFHHfdhuswU43ehhw324fHWh432fsfGWFW74327W8GFFHfdsfhfhds
-JWT_SECRET=freqfreq31h1478jhgnwe21hy652hew264nhx
+JWT_SECRET=freqfreq31h1478jhgnwe21hy652hew264nhx
+WHITE_LIST=https://jeancarlos-cpu.github.io

src/apollo-sever.js

@@ -13,14 +13,14 @@ const limiter = rateLimit({
   max: 100 // limit each IP to 100 requests per windowMs
 });
 
-// const csp = helmet.contentSecurityPolicy({
-//   directives: {
-//     defaultSrc: ["'self'"],
-//     styleSrc: ["'self'", "192.168.99.100:4466/"]
-//   }
-// });
+const csp = helmet.contentSecurityPolicy({
+  directives: {
+    defaultSrc: ["'self'"],
+    styleSrc: ["'self'"]
+  }
+});
 
-const whitelist = ["https://jeancarlos-cpu.github.io/"];
+const whitelist = [process.env.WHITE_LIST];
 
 const corsOptions = {
   origin: (origin, callback) =>
@@ -30,8 +30,8 @@ const corsOptions = {
 };
 
 const app = express();
-// app.use(helmet());
-// app.use(csp);
+app.use(helmet());
+app.use(csp);
 app.use(cors(corsOptions));
 app.use(limiter);
 app.use(compression());
@@ -46,7 +46,7 @@ const server = new ApolloServer({
 });
 
 server.applyMiddleware({ app });
-app.listen({ port: process.env.PORT || 4000 }, () => console.log("server up."));
+app.listen({ port: process.env.PORT || 4000 }, () => console.log(whitelist));
 
 // server
 //   .listen({ port: process.env.PORT || 4000 })