check origins

Author: BotellaA

nginx.conf

@@ -2,6 +2,11 @@ events {
   worker_connections 1024;
 }
 
+map $http_origin $allow_origin {
+    ~^https://(.*\.)?geode-solutions\.com$  $http_origin;
+    default                                  "";
+}
+
 http {
   # Nginx will handle gzip compression of responses from the app server
   gzip on;
@@ -14,6 +19,10 @@ http {
     server_name localhost;
 
     client_max_body_size 0;
+    
+    add_header Access-Control-Allow-Origin $allow_origin;
+    add_header Access-Control-Allow-Credentials true;
+    add_header Vary Origin;
 
     location ~ "^/geode/" {
       if ($request_method !~ ^(DELETE|GET|POST|PUT|OPTIONS)$) {