js添加域名授权验证源码

const express = require('express');
const app = express();

// 允许的域名列表
const allowedOrigins = ['http://example.com', 'https://another-example.com'];

app.use((req, res, next) => {
  const origin = req.headers.origin;
  if (allowedOrigins.includes(origin)) {
    res.setHeader('Access-Control-Allow-Origin', origin);
    res.setHeader('Access-Control-Allow-Methods', 'GET, POST, PUT, DELETE, OPTIONS');
    res.setHeader('Access-Control-Allow-Headers', 'Content-Type, Authorization');
  }
  next();
});

app.get('/data', (req, res) => {
  res.json({ message: 'This is protected data.' });
});

app.listen(3000, () => {
  console.log('Server is running on port 3000');
});