From 24fcf3d6fd0b0480a50fece99a5774d3b94f7fa2 Mon Sep 17 00:00:00 2001
From: Daria Pardue <daria.pardue@mongodb.com>
Date: Fri, 21 Nov 2025 11:54:07 -0500
Subject: [PATCH] feat: update allowed hosts list

---
 src/cmap/auth/mongo_credentials.ts | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/cmap/auth/mongo_credentials.ts b/src/cmap/auth/mongo_credentials.ts
index 5030f8ebbd..a64cbaa434 100644
--- a/src/cmap/auth/mongo_credentials.ts
+++ b/src/cmap/auth/mongo_credentials.ts
@@ -45,7 +45,9 @@ export const DEFAULT_ALLOWED_HOSTS = [
   '*.mongodbgov.net',
   'localhost',
   '127.0.0.1',
-  '::1'
+  '::1',
+  '*.mongo.com',
+  '*.mongodbgov.net'
 ];
 
 /** Error for when the token audience is missing in the environment. */