From fda2962148edc2c3e3ae9adcf7140f0ad529c36b Mon Sep 17 00:00:00 2001
From: Hampus Kraft <hampus@fluxer.app>
Date: Wed, 18 Feb 2026 16:42:08 +0000
Subject: [PATCH] fix: marketing cors

---
 packages/api/src/App.tsx                    | 1 +
 packages/api/src/app/MiddlewarePipeline.tsx | 4 +++-
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/packages/api/src/App.tsx b/packages/api/src/App.tsx
index 03da09ab..0715962f 100644
--- a/packages/api/src/App.tsx
+++ b/packages/api/src/App.tsx
@@ -50,6 +50,7 @@ export async function createAPIApp(options: CreateAPIAppOptions): Promise<APIApp
 	configureMiddleware(routes, {
 		logger,
 		nodeEnv: config.nodeEnv,
+		corsOrigins: [config.endpoints.webApp, config.endpoints.marketing],
 		setSentryUser,
 		isTelemetryActive,
 	});
diff --git a/packages/api/src/app/MiddlewarePipeline.tsx b/packages/api/src/app/MiddlewarePipeline.tsx
index e0965fda..fc9fca02 100644
--- a/packages/api/src/app/MiddlewarePipeline.tsx
+++ b/packages/api/src/app/MiddlewarePipeline.tsx
@@ -38,6 +38,7 @@ import type {Context as HonoContext} from 'hono';
 export interface MiddlewarePipelineOptions {
 	logger: ILogger;
 	nodeEnv: string;
+	corsOrigins: Array<string>;
 	setSentryUser?: (user: {id?: string; username?: string; email?: string; ip_address?: string}) => void;
 	isTelemetryActive?: () => boolean;
 }
@@ -56,7 +57,7 @@ function attachTraceparentHeader(ctx: HonoContext<HonoEnv>): void {
 }
 
 export function configureMiddleware(routes: HonoApp, options: MiddlewarePipelineOptions): void {
-	const {logger, nodeEnv, setSentryUser, isTelemetryActive} = options;
+	const {logger, nodeEnv, corsOrigins, setSentryUser, isTelemetryActive} = options;
 
 	const requestTelemetry = createServiceTelemetry({
 		serviceName: 'fluxer-api',
@@ -65,6 +66,7 @@ export function configureMiddleware(routes: HonoApp, options: MiddlewarePipeline
 
 	applyMiddlewareStack(routes, {
 		requestId: {},
+		cors: {origins: corsOrigins},
 		tracing: requestTelemetry.tracing,
 		metrics: {
 			enabled: true,