2 files changed, 12 insertions, 27 deletions
diff --git a/src/routes/api/preferences/+server.ts b/src/routes/api/preferences/+server.ts
index 0f62fb76..d6db364f 100644
--- a/src/routes/api/preferences/+server.ts
+++ b/src/routes/api/preferences/+server.ts
@@ -10,6 +10,7 @@ import {
 	togglePinnedBadgeWallCategory,
 	setPinnedBadgeWallCategories,
 } from "$lib/Database/SB/User/preferences";
+import { appOriginHeaders } from "$lib/Utility/appOrigin";
 import { Schema } from "effect";
 
 const unauthorised = new Response("Unauthorised", { status: 401 });
@@ -20,9 +21,7 @@ export const GET = async ({ url }) => {
 	);
 
 	return Response.json(preferences ? preferences : {}, {
-		headers: {
-			"Access-Control-Allow-Origin": "https://due.moe",
-		},
+		headers: appOriginHeaders(),
 	});
 };
 
@@ -36,23 +35,17 @@ export const PUT = async ({ url, cookies, request }) => {
 
 	if (url.searchParams.get("toggleHideMissingBadges") !== null)
 		return Response.json(await toggleHideMissingBadges(userId), {
-			headers: {
-				"Access-Control-Allow-Origin": "https://due.moe",
-			},
+			headers: appOriginHeaders(),
 		});
 
 	if (url.searchParams.get("toggleHideAWCBadges") !== null)
 		return Response.json(await toggleHideAWCBadges(userId), {
-			headers: {
-				"Access-Control-Allow-Origin": "https://due.moe",
-			},
+			headers: appOriginHeaders(),
 		});
 
 	if (url.searchParams.get("badgeWallCSS") !== null)
 		return Response.json(await setCSS(userId, await request.text()), {
-			headers: {
-				"Access-Control-Allow-Origin": "https://due.moe",
-			},
+			headers: appOriginHeaders(),
 		});
 
 	if (url.searchParams.get("toggleCategory") !== null)
@@ -62,9 +55,7 @@ export const PUT = async ({ url, cookies, request }) => {
 				url.searchParams.get("toggleCategory") || "",
 			),
 			{
-				headers: {
-					"Access-Control-Allow-Origin": "https://due.moe",
-				},
+				headers: appOriginHeaders(),
 			},
 		);
 
@@ -77,9 +68,7 @@ export const PUT = async ({ url, cookies, request }) => {
 				)),
 			]),
 			{
-				headers: {
-					"Access-Control-Allow-Origin": "https://due.moe",
-				},
+				headers: appOriginHeaders(),
 			},
 		);
 
@@ -87,18 +76,14 @@ export const PUT = async ({ url, cookies, request }) => {
 		return Response.json(
 			await setBiography(userId, (await request.text()).slice(0, 3000)),
 			{
-				headers: {
-					"Access-Control-Allow-Origin": "https://due.moe",
-				},
+				headers: appOriginHeaders(),
 			},
 		);
 
 	return Response.json(
 		await getUserPreferences(Number(url.searchParams.get("id") || 0)),
 		{
-			headers: {
-				"Access-Control-Allow-Origin": "https://due.moe",
-			},
+			headers: appOriginHeaders(),
 		},
 	);
 };
diff --git a/src/routes/api/preferences/pin/+server.ts b/src/routes/api/preferences/pin/+server.ts
index 045d0187..45a231fd 100644
--- a/src/routes/api/preferences/pin/+server.ts
+++ b/src/routes/api/preferences/pin/+server.ts
@@ -1,6 +1,7 @@
 import { userIdentity } from "$lib/Data/AniList/identity";
 import { decodeAuthCookieOrThrow } from "$lib/Effect/authCookie";
 import { toggleHololiveStreamPinning } from "$lib/Database/SB/User/preferences";
+import { appOriginHeaders } from "$lib/Utility/appOrigin";
 
 const unauthorised = new Response("Unauthorised", { status: 401 });
 
@@ -17,10 +18,9 @@ export const PUT = async ({ cookies, url }) => {
 			url.searchParams.get("stream") || "",
 		),
 		{
-			headers: {
+			headers: appOriginHeaders({
 				method: "PUT",
-				"Access-Control-Allow-Origin": "https://due.moe",
-			},
+			}),
 		},
 	);
 };