Update CORS and build workflow to use vars for environment variables (#164)

* fix(docker): update Docker build workflow to use vars for environment variables

* feat(cors): add API_CORS_ALLOWED_ORIGINS to .env.example and update settings for dynamic CORS configuration

Author: yunho7687

.github/workflows/docker-build.yml

@@ -60,8 +60,8 @@ jobs:
           file: ./docker/client/Dockerfile
           push: true
           build-args: |
-            NEXT_PUBLIC_BACKEND_URL_BASE=${{ secrets.NEXT_PUBLIC_BACKEND_URL_BASE }}
-            NEXT_PUBLIC_BACKEND_URL=${{ secrets.NEXT_PUBLIC_BACKEND_URL }}
+            NEXT_PUBLIC_BACKEND_URL_BASE=${{ vars.NEXT_PUBLIC_BACKEND_URL_BASE }}
+            NEXT_PUBLIC_BACKEND_URL=${{ vars.NEXT_PUBLIC_BACKEND_URL }}
           tags: |
             ${{ vars.DOCKERHUB_USERNAME }}/wajo-prod-client:latest
             ${{ vars.DOCKERHUB_USERNAME }}/wajo-prod-client:${{ env.date }}

server/.env.example

@@ -3,6 +3,7 @@ APP_NAME=DjangoAPI
 APP_ENV=DEVELOPMENT
 API_SECRET_KEY="supersecretkey"
 API_ALLOWED_HOSTS=".localhost 127.0.0.1 [::1]"
+API_CORS_ALLOWED_ORIGINS="http://localhost:3000 https://localhost:3000"
 
 POSTGRES_HOST=localhost
 POSTGRES_NAME=postgres

server/api/settings.py

@@ -110,11 +110,11 @@
     "corsheaders.middleware.CorsMiddleware",
 ]
 
-CORS_ALLOWED_ORIGINS = [
-    "http://localhost:3000",
-    "http://127.0.0.1:3000",
-    FRONTEND_URL,
-]
+CORS_ALLOWED_ORIGINS = (
+    os.environ.get("API_CORS_ALLOWED_ORIGINS").split(" ")
+    if os.environ.get("API_CORS_ALLOWED_ORIGINS")
+    else []
+) + [FRONTEND_URL]
 
 ROOT_URLCONF = "api.urls"