extension: Instead of manually creating api keys, let users exchange their username passwords for one

1 files changed, 5 insertions, 1 deletions

diff --git a/packages/web/next.config.mjs b/packages/web/next.config.mjs
index 0aa37287..bda43a58 100644
--- a/packages/web/next.config.mjs
+++ b/packages/web/next.config.mjs
@@ -18,7 +18,7 @@ const nextConfig = withPWA({
           // Allow for specific domains to have access or * for all
           {
             key: "Access-Control-Allow-Origin",
-            value: "*",
+            value: "chrome-extension://olmdabfolepgfmjhmikngmfekcdgjinp",
           },
           // Allows for specific methods accepted
           {
@@ -30,6 +30,10 @@ const nextConfig = withPWA({
             key: "Access-Control-Allow-Headers",
             value: "Content-Type, Authorization",
           },
+          {
+            key: "Access-Control-Allow-Credentials",
+            value: "true",
+          },
         ],
       },
     ];