From 5ecb8166b1e18e955b98811156e12f446cdd805e Mon Sep 17 00:00:00 2001
From: Patrick Mulligan <patjmulligan@protonmail.com>
Date: Sat, 14 Feb 2026 15:28:54 -0500
Subject: [PATCH] feat(server): add CORS support for extension HTTP routes

Enable CORS on the extension HTTP server to allow cross-origin requests
from ATM apps and other web-based clients.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
---
 src/index.ts | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/index.ts b/src/index.ts
index 87181da2..2788c5d0 100644
--- a/src/index.ts
+++ b/src/index.ts
@@ -1,5 +1,6 @@
 import 'dotenv/config'
 import express from 'express'
+import cors from 'cors'
 import path from 'path'
 import { fileURLToPath } from 'url'
 import NewServer from '../proto/autogenerated/ts/express_server.js'
@@ -104,6 +105,7 @@ const start = async () => {
 
     // Create Express app for extension HTTP routes
     const extensionApp = express()
+    extensionApp.use(cors()) // Enable CORS for all origins (ATM apps, wallets, etc.)
     extensionApp.use(express.json())
 
     // Mount extension HTTP routes