From 526ee6e5067b03d118dfeda2e14950de251189a3 Mon Sep 17 00:00:00 2001
From: Philip Molares <philip.molares@udo.edu>
Date: Fri, 2 Apr 2021 17:33:42 +0200
Subject: [PATCH 1/2] PrivateApi: Serve under /api/private

Signed-off-by: Philip Molares <philip.molares@udo.edu>
---
 src/app.module.ts | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/app.module.ts b/src/app.module.ts
index 2c7dc95e5..b7beb50ad 100644
--- a/src/app.module.ts
+++ b/src/app.module.ts
@@ -38,6 +38,10 @@ const routes: Routes = [
     path: '/api/v2',
     module: PublicApiModule,
   },
+  {
+    path: '/api/private',
+    module: PrivateApiModule,
+  },
 ];
 
 @Module({

From 75466c520285767e5ac8e78b2b09118b43120cce Mon Sep 17 00:00:00 2001
From: Philip Molares <philip.molares@udo.edu>
Date: Fri, 2 Apr 2021 17:36:51 +0200
Subject: [PATCH 2/2] PrivateApi: Add CORS-Header for rendererOrigin

Signed-off-by: Philip Molares <philip.molares@udo.edu>
---
 src/main.ts | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/main.ts b/src/main.ts
index 7b5cf6e3f..47ade5aa4 100644
--- a/src/main.ts
+++ b/src/main.ts
@@ -39,6 +39,11 @@ async function bootstrap(): Promise<void> {
     );
   }
 
+  app.enableCors({
+    origin: appConfig.rendererOrigin,
+  });
+  logger.log(`Enabling CORS for '${appConfig.rendererOrigin}'`, 'AppBootstrap');
+
   app.useGlobalPipes(
     new ValidationPipe({
       forbidUnknownValues: true,