chore: remove type check step from CI workflow and update CORS configuration in app

Author: Thavarshan

.github/workflows/ci.yml

@@ -36,9 +36,6 @@ jobs:
       - name: Lint
         run: npm run lint
 
-      - name: Type check
-        run: npm run typecheck
-
       - name: Test
         run: npm test
 

README.md

@@ -36,6 +36,7 @@ npx prisma generate
 | ------------------------------------------------------- | ----------------------------------------------------------------------------------------- |
 | `PORT`                                                  | HTTP port (default 4001)                                                                  |
 | `DATABASE_URL`                                          | PostgreSQL connection string (e.g., `postgresql://user:pass@localhost:5432/auralyze_api`) |
+| `CORS_ORIGIN`                                           | Allowed origins for CORS (e.g., `http://localhost:3000` or comma-separated list)          |
 | `CERBERUS_BASE_URL`                                     | Cerberus IAM host (e.g., `https://cerberus.example.com`)                                  |
 | `CERBERUS_CLIENT_ID`                                    | OAuth2 client ID used for token introspection                                             |
 | `CERBERUS_CLIENT_SECRET`                                | OAuth2 client secret used for token introspection                                         |

src/app.ts

@@ -21,6 +21,10 @@ export function createApp(deps: AppDeps) {
     cors({
       origin: deps.corsOrigin ?? '*',
       credentials: true,
+      methods: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'],
+      allowedHeaders: ['Content-Type', 'Authorization', 'Cookie'],
+      exposedHeaders: ['Set-Cookie'],
+      maxAge: 86400, // 24 hours
     }),
   );
   app.use(express.json({ limit: '10mb' }));