fix(cors): add CORS headers for static image serving

apps/box-app-api/src/main.ts

@@ -47,6 +47,17 @@ async function bootstrap() {
     '/images',
     express.static(
       path.resolve(process.env.IMAGE_ROOT_PATH || '/data/box-images'),
+      {
+        setHeaders: (res: any, pathName: any, stat: any) => {
+          // CORS
+          res.setHeader('Access-Control-Allow-Origin', corsOrigin);
+          res.setHeader('Access-Control-Allow-Methods', 'GET, OPTIONS');
+          res.setHeader(
+            'Access-Control-Allow-Headers',
+            'Origin, X-Requested-With, Content-Type, Accept, Authorization',
+          );
+        },
+      },
     ),
   );