feat: ignore secret or cors for client

2025-10-29 21:14:43 +01:00
parent a399209947
commit ddc99e9850
3 changed files with 8 additions and 0 deletions
--- a/apps/api/src/utils/auth.ts
+++ b/apps/api/src/utils/auth.ts
@@ -104,6 +104,10 @@ export async function validateSdkRequest(
    throw createError('Ingestion: Profile id is blocked by project filter');
  }

+  if (client.ignoreCorsAndSecret) {
+    return client;
+  }
+
  if (client.project.cors) {
    const domainAllowed = client.project.cors.find((domain) => {
      const cleanedDomain = cleanDomain(domain);