feat: update environment variables and CORS configuration for improved deployment and API access

Author: RabbitDaCoder

api/.env.production

@@ -25,4 +25,4 @@ CLOUDINARY_API_KEY=747368826295982
 CLOUDINARY_API_SECRET=HbljlQwEoDR6ndvo98KNQy6Lbyk
 
 # CORS Configuration
-CLIENT_ORIGIN=https://your-domain.railway.app
+CLIENT_ORIGIN=https://aegis-express.vercel.app

api/app.js

@@ -17,8 +17,21 @@ app.use(express.json({ limit: "1mb" }));
 app.use(express.urlencoded({ extended: true }));
 app.use(
   cors({
-    origin: process.env.CLIENT_ORIGIN || "*",
+    origin: [
+      process.env.CLIENT_ORIGIN || "http://localhost:5173",
+      "https://aegis-express.vercel.app",
+      "http://localhost:3000",
+      "http://localhost:5173",
+    ],
     credentials: true,
+    methods: ["GET", "POST", "PUT", "DELETE", "PATCH", "OPTIONS"],
+    allowedHeaders: [
+      "Content-Type",
+      "Authorization",
+      "Accept",
+      "Origin",
+      "X-Requested-With",
+    ],
   })
 );
 
@@ -33,6 +46,9 @@ const publicLimiter = rateLimit({
 
 app.use("/api", publicLimiter);
 
+// Handle preflight requests
+app.options("*", cors());
+
 app.use("/api/auth", authRoutes);
 app.use("/api/deliveries", deliveryRoutes);
 app.use("/api/invoices", invoiceRoutes);

client/.env.production

@@ -1,6 +1,6 @@
 # Production Environment Variables
 # Note: For Vercel deployment, set these in Vercel Dashboard
-VITE_API_BASE_URL=https://your-api-domain.com/api
+VITE_API_BASE_URL=https://aegis-express-api.onrender.com/api
 
 # Optional: Add other environment-specific variables
 # VITE_APP_NAME=AegisExpress Logistics

client/src/services/api.ts

@@ -34,7 +34,11 @@ const tokenManager = {
 export const api = axios.create({
   baseURL: BASE_URL,
   timeout: 60000, // Increased to 60 seconds for delivery creation with PDF/email
-  headers: { "Content-Type": "application/json" },
+  headers: {
+    "Content-Type": "application/json",
+    Accept: "application/json",
+  },
+  withCredentials: true, // Include credentials for CORS
 });
 
 // --- Refresh Logic ---

render.yaml

@@ -15,6 +15,8 @@ services:
         value: 10000
       - key: FRONTEND_URL
         sync: false # Add your Vercel URL manually
+      - key: CLIENT_ORIGIN
+        value: https://aegis-express.vercel.app
       - key: MONGODB_URI
         sync: false # Add your MongoDB connection string
       - key: JWT_SECRET