fix(cors): refactor CORS methods to array format and streamline image serving setup

apps/box-app-api/src/main.ts

@@ -38,27 +38,26 @@ async function bootstrap() {
 
   app.enableCors({
     origin: corsOriginOption,
-    methods: 'GET,PUT,PATCH,POST,DELETE',
+    methods: ['GET', 'PUT', 'PATCH', 'POST', 'DELETE'],
     credentials: true,
   });
 
-  // Serve static images
+  const imageRoot = path.resolve(
+    configService.get<string>('IMAGE_ROOT_PATH') || '/data/box-images',
+  );
+
   app.use(
     '/images',
-    express.static(
-      path.resolve(process.env.IMAGE_ROOT_PATH || '/data/box-images'),
-      {
-        setHeaders: (res: any, pathName: any, stat: any) => {
-          // CORS
-          res.setHeader('Access-Control-Allow-Origin', corsOrigin);
-          res.setHeader('Access-Control-Allow-Methods', 'GET, OPTIONS');
-          res.setHeader(
-            'Access-Control-Allow-Headers',
-            'Origin, X-Requested-With, Content-Type, Accept, Authorization',
-          );
-        },
+    express.static(imageRoot, {
+      setHeaders: (res: any) => {
+        res.setHeader('Access-Control-Allow-Origin', corsOrigin);
+        res.setHeader('Access-Control-Allow-Methods', 'GET, OPTIONS');
+        res.setHeader(
+          'Access-Control-Allow-Headers',
+          'Origin, X-Requested-With, Content-Type, Accept, Authorization',
+        );
       },
-    ),
+    }),
   );
 
   // 👇 Important: this makes /health become /api/v1/health