var cors = require('cors'); var whitelist = ['http://localhost:8080']; var corsOptions = { origin: function(origin, callback) { var originIsWhitelisted = whitelist.indexOf(origin) !== -1; callback(originIsWhitelisted ? null : 'Bad Request', originIsWhitelisted); } }; module.exports = function() { return cors({origin: true}); };