From 4a99233ea14d2b55b38da90f5dad5b04da58babe Mon Sep 17 00:00:00 2001
From: Gowtham M <gowtham.m@venbainfotech.com>
Date: Thu, 4 Dec 2025 15:08:56 +0530
Subject: [PATCH] GWM : helmet

---
 app/routes/routes.js | 14 +++++++-------
 server.js            |  2 +-
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/app/routes/routes.js b/app/routes/routes.js
index a9f254e..8d11b88 100644
--- a/app/routes/routes.js
+++ b/app/routes/routes.js
@@ -224,7 +224,7 @@ router.get("/admin_users", [verifySignature , verifyToken], adminUserController.
  *     tags: [Admin Users]
  *     security:
  *       - appSignature: []
- *       - bearerAuth: []
+ *         cookieAuth: []   # or bearerAuth: [] if you use Authorization header
  *     parameters:
  *       - in: path
  *         name: id
@@ -250,7 +250,7 @@ router.get("/admin_users/:id", [verifySignature, verifyToken], adminUserControll
  *     tags: [Admin Users]
  *     security:
  *       - appSignature: []
- *       - bearerAuth: []
+ *         cookieAuth: []   # or bearerAuth: [] if you use Authorization header
  *     requestBody:
  *       required: true
  *       content:
@@ -279,7 +279,7 @@ router.post("/admin_users",[verifySignature, verifyToken], adminUserController.c
  *     tags: [Admin Users]
  *     security:
  *       - appSignature: []
- *       - bearerAuth: []
+ *         cookieAuth: []   # or bearerAuth: [] if you use Authorization header
  *     parameters:
  *       - in: path
  *         name: id
@@ -315,7 +315,7 @@ router.put("/admin_users/:id",[verifySignature, verifyToken], adminUserControlle
  *     tags: [Admin Users]
  *     security:
  *       - appSignature: []
- *       - bearerAuth: []
+ *         cookieAuth: []   # or bearerAuth: [] if you use Authorization header
  *     parameters:
  *       - in: path
  *         name: id
@@ -343,7 +343,7 @@ router.delete("/admin_users/:id",[verifySignature, verifyToken], adminUserContro
  *     tags: [Admin Users]
  *     security:
  *       - appSignature: []
- *       - bearerAuth: []
+ *         cookieAuth: []   # or bearerAuth: [] if you use Authorization header
  *     parameters:
  *       - name: id
  *         in: path
@@ -2388,7 +2388,7 @@ router.post("/submission_deadlines",[verifySignature, verifyToken], ConfigContro
  *     tags: [Dashboard]
  *     security:
  *       - appSignature: []
- *       - bearerAuth: []
+ *         cookieAuth: []   # or bearerAuth: [] if you use Authorization header
  *     parameters:
  *       - in: query
  *         name: establishment_id
@@ -2419,7 +2419,7 @@ router.get("/establishment_dashboard",[verifySignature, verifyToken],dashboardCo
  *     tags: [Dashboard]
  *     security:
  *       - appSignature: []
- *       - bearerAuth: []
+ *         cookieAuth: []   # or bearerAuth: [] if you use Authorization header
  *     parameters:
  *       - in: query
  *         name: quarter
diff --git a/server.js b/server.js
index 56cd042..3e2a11d 100644
--- a/server.js
+++ b/server.js
@@ -29,7 +29,7 @@ const allowedOrigins = [
   "http://localhost:5173",     //local
   "http://13.201.47.205:5173", //dev
   "http://13.201.47.205:5175",  //uat
-  "https://ipi.venbait.in/api"
+  "https://ipi.venbait.in/api"  // backend
 ];
 app.use(cors({
   origin: allowedOrigins,