Fix for single origin as a string

Author: MarcDerhammer

src/middlewares.js

@@ -385,9 +385,11 @@ export function allowCrossDomain(appId) {
       allowHeaders += `, ${config.allowHeaders.join(', ')}`;
     }
 
-    const baseOrigins = config?.allowOrigin ?? ['*'];
+    const baseOrigins =
+      typeof config?.allowOrigin === 'string' ? [config.allowOrigin] : config?.allowOrigin ?? ['*'];
     const requestOrigin = req.headers.origin;
-    const allowOrigins = requestOrigin && baseOrigins.includes(requestOrigin) ? requestOrigin : baseOrigins[0];
+    const allowOrigins =
+      requestOrigin && baseOrigins.includes(requestOrigin) ? requestOrigin : baseOrigins[0];
     res.header('Access-Control-Allow-Origin', allowOrigins);
     res.header('Access-Control-Allow-Methods', 'GET,PUT,POST,DELETE,OPTIONS');
     res.header('Access-Control-Allow-Headers', allowHeaders);