From c1691157f9d901685f8d1de8bfb2404c8f4c1f95 Mon Sep 17 00:00:00 2001
From: EYHN <cneyhn@gmail.com>
Date: Tue, 17 Jun 2025 10:40:08 +0900
Subject: [PATCH] feat(core): enable socket cors (#12823)

fix android & ios selfhost syncing

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

- **Bug Fixes**
- Improved WebSocket connection compatibility by enabling cross-origin
requests with credentials and restricting allowed HTTP methods to GET
and POST.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->

Co-authored-by: fengmk2 <fengmk2@gmail.com>
---
 packages/backend/server/src/base/websocket/adapter.ts | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/packages/backend/server/src/base/websocket/adapter.ts b/packages/backend/server/src/base/websocket/adapter.ts
index 7387c1d8d1..064d45d3b9 100644
--- a/packages/backend/server/src/base/websocket/adapter.ts
+++ b/packages/backend/server/src/base/websocket/adapter.ts
@@ -20,6 +20,12 @@ export class SocketIoAdapter extends IoAdapter {
     const server: Server = super.createIOServer(port, {
       ...config,
       ...options,
+      // Enable CORS for Socket.IO
+      cors: {
+        origin: true, // Allow all origins
+        credentials: true, // Allow credentials (cookies, auth headers)
+        methods: ['GET', 'POST'],
+      },
     });
 
     if (config.canActivate) {