feat: configure API endpoints and CORS origins using environment variables

Author: sinwoojin

backend/.env.example

@@ -0,0 +1,4 @@
+PORT=3001
+JWT_SECRET=your-super-secret-jwt-key-change-this-in-production
+NODE_ENV=development
+FRONTEND_URL=http://localhost:3000

backend/src/main.ts

@@ -4,11 +4,18 @@ import { AppModule } from './app.module';
 
 async function bootstrap() {
   const app = await NestFactory.create(AppModule);
+  
+  const allowedOrigins = process.env.NODE_ENV === 'production'
+    ? (process.env.FRONTEND_URL || '').split(',').filter(Boolean)
+    : ['http://localhost:3000'];
+  
   app.enableCors({
-    origin: 'http://localhost:3000',
+    origin: allowedOrigins.length > 0 ? allowedOrigins : 'http://localhost:3000',
     credentials: true,
   });
+  
   await app.listen(process.env.PORT ?? 3001);
-  Logger.log(`Server listening on port ${process.env.PORT}`, 'NestApplication');
+  Logger.log(`Server listening on port ${process.env.PORT ?? 3001}`, 'NestApplication');
+  Logger.log(`CORS enabled for: ${allowedOrigins.join(', ')}`, 'NestApplication');
 }
 bootstrap();

frontend/env.example.txt

@@ -0,0 +1,2 @@
+NEXT_PUBLIC_API_URL=http://localhost:3001
+NEXT_PUBLIC_WS_URL=http://localhost:3001

frontend/src/context/WalletContext.tsx

@@ -1,6 +1,5 @@
 "use client";
 
-import { BASE_URL } from "@/config/api";
 import { useAuth, useUser } from "@/context/AuthUserProvider";
 import { fetchClient } from "@/lib/api/fetchClient";
 import React, { createContext, useCallback, useContext, useEffect, useState } from "react";
@@ -90,8 +89,8 @@ export function WalletProvider({ children }: { children: React.ReactNode }) {
     console.log("WalletProvider: initializing for user", user.email);
 
     refreshPortfolio();
-    console.log("Connecting to WebSocket:", BASE_URL);
-    const newSocket = io(BASE_URL);
+    console.log("Connecting to WebSocket:", process.env.NEXT_PUBLIC_BASE_URL);
+    const newSocket = io(process.env.NEXT_PUBLIC_BASE_URLBASE_URL);
 
     newSocket.on("connect", () => {
       console.log("WebSocket connected:", newSocket.id);

frontend/src/lib/api/fetch.ts

@@ -1,4 +1,3 @@
-import { BASE_URL } from "@/config/api";
 import { refreshAccessTokenAPI } from "./auth";
 
 let isRefreshing = false;
@@ -25,7 +24,7 @@ export async function fetchWithAuth(
   clearAccessToken: () => void, // 토큰 제거 함수를 인자로 받음
   init?: RequestInit
 ) {
-  const url = `${BASE_URL}${input}`;
+  const url = `${process.env.NEXT_PUBLIC_BASE_URL}${input}`;
 
   const requestHeaders = new Headers(init?.headers);
   if (accessToken) {

frontend/src/lib/api/fetchClient.ts

@@ -1,9 +1,7 @@
-import { BASE_URL } from "@/config/api";
 
 export async function fetchClient(input: string, init: RequestInit = {}) {
-  const url = `${BASE_URL}${input}`;
+  const url = `${process.env.NEXT_PUBLIC_BASE_URL}${input}`;
 
-  // Check if we're in browser environment before accessing localStorage
   const token = typeof window !== 'undefined' ? localStorage.getItem("accessToken") : null;
   console.log("token", token);