import { NextResponse } from 'next/server;
const allowedOrigins =
  process.env.NODE_ENV === 'production'
    ? ['https://www.art-ck.pl', 'https://art-ck.pl']
    : ['http://localhost:3000'];

export function middleware(request: Request) {
  const origin = request.headers.get('origin');
  console.log(origin);
  if (origin && !allowedOrigins.includes(origin)) {
    return new NextResponse(null, {
      status: 400,
      statusText: 'Bad request',
      headers: {
        'Content-Type': 'text/plain',
      },
    });
  }

  return NextResponse.next();
}

export const config = {
  matcher: '/api/:path*',
};

export async function GET(req: NextRequest, _res: NextResponse) {
  const origin = req.headers.get('origin');

  return new NextResponse(JSON.stringify({ message: 'text message' }), {
    status: 200,
    headers: {
      'Access-Control-Allow-Origin': origin || '*', 
      'Content-Type': 'application/json',
    },
  });
}

Access to fetch at 'https://art-ck.pl/api/newsletter' from origin 'https://www.art-ck.pl' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: Redirect is not allowed for a preflight request.
588-322a5451a4ef4b8c.js:1    
POST https://art-ck.pl/api/newsletter net::ERR_FAILED