From ee5b2b2bdcd8e50bc20aceea03320b48e440f6a4 Mon Sep 17 00:00:00 2001
From: "Sara Jane (SJ)" <127313669+Ganainmtech@users.noreply.github.com>
Date: Mon, 2 Feb 2026 17:25:21 +0000
Subject: [PATCH] Update CORS to allow GitHub.dev origins

---
 .../TokenizeRWATemplate-contracts/NFT_mint_server/app.js  | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/projects/TokenizeRWATemplate-contracts/NFT_mint_server/app.js b/projects/TokenizeRWATemplate-contracts/NFT_mint_server/app.js
index d562b0d..dea0d4c 100644
--- a/projects/TokenizeRWATemplate-contracts/NFT_mint_server/app.js
+++ b/projects/TokenizeRWATemplate-contracts/NFT_mint_server/app.js
@@ -35,11 +35,13 @@ function isAllowedOrigin(origin) {
 
   try {
     const host = new URL(origin).hostname
-    if (host.endsWith('.vercel.app')) return true
+    return (
+      host.endsWith('.vercel.app') ||
+      host.endsWith('.app.github.dev')
+    )
   } catch {
-    // ignore
+    return false
   }
-  return false
 }
 
 const corsOptions = {