Enable CORS for dinosaur API

lecture_5/dinosaurs/package-lock.json

@@ -8,6 +8,7 @@
 			"name": "dinosaurs",
 			"version": "1.0.0",
 			"dependencies": {
+				"cors": "^2.8.6",
 				"dotenv": "^17.4.2",
 				"express": "^5.1.0",
 				"pg": "^8.11.3",
@@ -419,6 +420,22 @@
 				"node": ">=6.6.0"
 			}
 		},
+		"node_modules/cors": {
+			"version": "2.8.6",
+			"resolved": "https://registry.npmjs.org/cors/-/cors-2.8.6.tgz",
+			"integrity": "sha512-tJtZBBHA6vjIAaF6EnIaq6laBBP9aq/Y3ouVJjEfoHbRBcHBAHYcMh/w8LDrk2PvIMMq8gmopa5D4V8RmbrxGw==",
+			"dependencies": {
+				"object-assign": "^4",
+				"vary": "^1"
+			},
+			"engines": {
+				"node": ">= 0.10"
+			},
+			"funding": {
+				"type": "opencollective",
+				"url": "https://opencollective.com/express"
+			}
+		},
 		"node_modules/cross-spawn": {
 			"version": "7.0.6",
 			"resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
@@ -1188,6 +1205,14 @@
 				"node": ">= 0.6"
 			}
 		},
+		"node_modules/object-assign": {
+			"version": "4.1.1",
+			"resolved": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz",
+			"integrity": "sha512-rJgTQnkUnH1sFw8yT6VSU3zD3sWmu6sZhIseY8VX+GRu3P6F7Fu+JNDoXfklElbLJSnc3FUQHVe4cU5hj+BcUg==",
+			"engines": {
+				"node": ">=0.10.0"
+			}
+		},
 		"node_modules/object-inspect": {
 			"version": "1.13.4",
 			"resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz",

lecture_5/dinosaurs/package.json

@@ -9,6 +9,7 @@
 		"check": "npm run lint && prettier --check ."
 	},
 	"dependencies": {
+		"cors": "^2.8.6",
 		"dotenv": "^17.4.2",
 		"express": "^5.1.0",
 		"pg": "^8.11.3",

lecture_5/dinosaurs/src/app.js

@@ -1,9 +1,11 @@
 import express from "express";
+import cors from "cors";
 import { dinosaurRouter } from "./routes/dinosaurRoutes.js";
 import { errorHandler } from "./validation/errorHandler.js";
 
 const app = express();
 
+app.use(cors());
 app.use(express.json());
 app.use(dinosaurRouter);
 // Error middleware must be registered after routes so it can handle rejected route handlers.