From 9c32f1ff4d40900f853eac47954b151cb3aa2eba Mon Sep 17 00:00:00 2001
From: Tomas Krejci <tk@tomaskrejci.com>
Date: Wed, 17 Jun 2026 21:00:25 +0200
Subject: [PATCH] Enable CORS for dinosaur API

---
 lecture_5/dinosaurs/package-lock.json | 25 +++++++++++++++++++++++++
 lecture_5/dinosaurs/package.json      |  1 +
 lecture_5/dinosaurs/src/app.js        |  2 ++
 3 files changed, 28 insertions(+)

diff --git a/lecture_5/dinosaurs/package-lock.json b/lecture_5/dinosaurs/package-lock.json
index 98077cc..6c725b0 100644
--- a/lecture_5/dinosaurs/package-lock.json
+++ b/lecture_5/dinosaurs/package-lock.json
@@ -8,6 +8,7 @@
 			"name": "dinosaurs",
 			"version": "1.0.0",
 			"dependencies": {
+				"cors": "^2.8.6",
 				"dotenv": "^17.4.2",
 				"express": "^5.1.0",
 				"pg": "^8.11.3",
@@ -419,6 +420,22 @@
 				"node": ">=6.6.0"
 			}
 		},
+		"node_modules/cors": {
+			"version": "2.8.6",
+			"resolved": "https://registry.npmjs.org/cors/-/cors-2.8.6.tgz",
+			"integrity": "sha512-tJtZBBHA6vjIAaF6EnIaq6laBBP9aq/Y3ouVJjEfoHbRBcHBAHYcMh/w8LDrk2PvIMMq8gmopa5D4V8RmbrxGw==",
+			"dependencies": {
+				"object-assign": "^4",
+				"vary": "^1"
+			},
+			"engines": {
+				"node": ">= 0.10"
+			},
+			"funding": {
+				"type": "opencollective",
+				"url": "https://opencollective.com/express"
+			}
+		},
 		"node_modules/cross-spawn": {
 			"version": "7.0.6",
 			"resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
@@ -1188,6 +1205,14 @@
 				"node": ">= 0.6"
 			}
 		},
+		"node_modules/object-assign": {
+			"version": "4.1.1",
+			"resolved": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz",
+			"integrity": "sha512-rJgTQnkUnH1sFw8yT6VSU3zD3sWmu6sZhIseY8VX+GRu3P6F7Fu+JNDoXfklElbLJSnc3FUQHVe4cU5hj+BcUg==",
+			"engines": {
+				"node": ">=0.10.0"
+			}
+		},
 		"node_modules/object-inspect": {
 			"version": "1.13.4",
 			"resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz",
diff --git a/lecture_5/dinosaurs/package.json b/lecture_5/dinosaurs/package.json
index a6c7a95..d373115 100644
--- a/lecture_5/dinosaurs/package.json
+++ b/lecture_5/dinosaurs/package.json
@@ -9,6 +9,7 @@
 		"check": "npm run lint && prettier --check ."
 	},
 	"dependencies": {
+		"cors": "^2.8.6",
 		"dotenv": "^17.4.2",
 		"express": "^5.1.0",
 		"pg": "^8.11.3",
diff --git a/lecture_5/dinosaurs/src/app.js b/lecture_5/dinosaurs/src/app.js
index 1ebd2ef..2fc2388 100644
--- a/lecture_5/dinosaurs/src/app.js
+++ b/lecture_5/dinosaurs/src/app.js
@@ -1,9 +1,11 @@
 import express from "express";
+import cors from "cors";
 import { dinosaurRouter } from "./routes/dinosaurRoutes.js";
 import { errorHandler } from "./validation/errorHandler.js";
 
 const app = express();
 
+app.use(cors());
 app.use(express.json());
 app.use(dinosaurRouter);
 // Error middleware must be registered after routes so it can handle rejected route handlers.