added CORS header & env file

.env

@@ -0,0 +1 @@
+CORS_HEADER=*

package.json

@@ -5,7 +5,7 @@
   "type": "commonjs",
   "scripts": {
     "build": "esbuild src/main.ts --bundle --outfile=build/out.js --platform=node --external:better-sqlite3 --external:express",
-    "execute": "pnpm build && node build/out.js"
+    "execute": "pnpm build && node --env-file .env build/out.js"
   },
   "keywords": [],
   "author": "",

src/main.ts

@@ -6,18 +6,21 @@ const app = express();
 
 app.get("/tiers", (_, res) => {
     const db = getDB();
+    res.header("Access-Control-Allow-Origin", process.env.CORS_HEADER);
     res.send((db.prepare("SELECT * FROM tiers").all() as tiers[]).map(t => t.tier));
     db.close();
 });
 
 app.get("/types", (_, res) => {
     const db = getDB();
+    res.header("Access-Control-Allow-Origin", process.env.CORS_HEADER);
     res.send((db.prepare("SELECT * FROM types").all() as type[]).map(t => t.type));
     db.close();
 });
 
 app.get("/transactions", (_, res) => {
     const db = getDB();
+    res.header("Access-Control-Allow-Origin", process.env.CORS_HEADER);
     res.send((db.prepare("SELECT * FROM transactions").all() as transaction[]));
     db.close();
 })
@@ -28,4 +31,5 @@ app.listen(2500, () => {
     db.close()
 
     console.log("Server is running");
+    console.log("CORS header: " + process.env.CORS_HEADER);
 });