From 9872355056b2b577310146ef2df12b58e0611cf0 Mon Sep 17 00:00:00 2001
From: Hongbo Wu <hongbo@omnivore.app>
Date: Fri, 11 Nov 2022 16:18:11 +0800
Subject: [PATCH] Allow apollo sandbox access in local env only

---
 packages/api/src/utils/corsConfig.ts | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/packages/api/src/utils/corsConfig.ts b/packages/api/src/utils/corsConfig.ts
index 4d17ee47b..d3462a0a0 100644
--- a/packages/api/src/utils/corsConfig.ts
+++ b/packages/api/src/utils/corsConfig.ts
@@ -1,5 +1,8 @@
+import { env } from '../env'
+
 export const corsConfig = {
   credentials: true,
+  // allow https://studio.apollographql.com for local env
   origin: [
     'https://omnivore.app',
     'https://dev.omnivore.app',
@@ -9,6 +12,6 @@ export const corsConfig = {
     'https://web-demo.omnivore.app',
     'http://localhost:3000',
     'lsp://logseq.io',
-    'https://studio.apollographql.com',
+    env.dev.isLocal && 'https://studio.apollographql.com',
   ],
 }