refactor: configureCORS

apps/meteor/app/cors/server/cors.ts

@@ -15,21 +15,17 @@ type NextFunction = (err?: any) => void;
 
 const logger = new Logger('CORS');
 
-let templatePromise: Promise<void> | void;
-
 declare module 'meteor/webapp' {
 	// eslint-disable-next-line @typescript-eslint/no-namespace
 	namespace WebApp {
 		function setInlineScriptsAllowed(allowed: boolean): Promise<void>;
 	}
 }
 
-settings.watch<boolean>(
-	'Enable_CSP',
-	Meteor.bindEnvironment(async (enabled) => {
-		templatePromise = WebAppInternals.setInlineScriptsAllowed(!enabled);
-	}),
-);
+let templatePromise: Promise<void> | void;
+export async function setInlineScriptsAllowed(allowed: boolean): Promise<void> {
+	templatePromise = WebApp.setInlineScriptsAllowed(!allowed);
+}
 
 WebApp.rawConnectHandlers.use(async (_req: http.IncomingMessage, res: http.ServerResponse, next: NextFunction) => {
 	if (templatePromise) {
@@ -104,9 +100,9 @@ declare module 'meteor/webapp' {
 }
 
 let cachingVersion = '';
-settings.watch<string>('Troubleshoot_Force_Caching_Version', (value) => {
-	cachingVersion = String(value).trim();
-});
+export function setCachingVersion(value: string): void {
+	cachingVersion = value.trim();
+}
 
 // @ts-expect-error - accessing internal property of webapp
 WebAppInternals.staticFilesMiddleware = function (

apps/meteor/server/main.ts

@@ -13,6 +13,7 @@ import { registerServices } from './services/startup';
 import { startup } from './startup';
 import { configureBoilerplate } from './startup/configureBoilerplate';
 import { configureCDN } from './startup/configureCDN';
+import { configureCORS } from './startup/configureCORS';
 import { configureDirectReply } from './startup/configureDirectReply';
 import { configureIRC } from './startup/configureIRC';
 import { configureFederation } from './startup/settings';
@@ -42,6 +43,7 @@ await Promise.all([configureLoginServices(), startFederationService()]);
 
 await Promise.all([
 	configureAssets(settings),
+	configureCORS(settings),
 	configureCDN(settings),
 	configurePushNotifications(settings),
 	configureBoilerplate(settings),

apps/meteor/server/startup/configureCORS.ts

@@ -0,0 +1,11 @@
+import { setCachingVersion, setInlineScriptsAllowed } from '../../app/cors/server/cors';
+import type { ICachedSettings } from '../../app/settings/server/CachedSettings';
+
+export async function configureCORS(settings: ICachedSettings): Promise<void> {
+	settings.watch<boolean>('Enable_CSP', async (enabled) => {
+		await setInlineScriptsAllowed(!enabled);
+	});
+	settings.watch<string>('Troubleshoot_Force_Caching_Version', (value) => {
+		setCachingVersion(value);
+	});
+}