验证域名源码

const express = require('express');
const app = express();

app.use((req, res, next) => {
  const allowedOrigins = ['https://example.com', 'https://trusted.com'];
  const origin = req.headers.origin;

  if (allowedOrigins.includes(origin)) {
    res.setHeader('Access-Control-Allow-Origin', origin);
    res.setHeader('Access-Control-Allow-Methods', 'GET, POST, PUT, DELETE');
    res.setHeader('Access-Control-Allow-Headers', 'Content-Type, Authorization');
  }

  next();
});

app.get('/data', (req, res) => {
  res.json({ message: 'This is secure data' });
});

app.listen(3000, () => {
  console.log('Server is running on port 3000');
});