function createCorsMiddleware(clientOrigin) {
  return (req, res, next) => {
    res.setHeader('Access-Control-Allow-Origin', clientOrigin)
    res.setHeader('Access-Control-Allow-Methods', 'GET,POST,PATCH,DELETE,OPTIONS')
    res.setHeader('Access-Control-Allow-Headers', 'Content-Type')

    if (req.method === 'OPTIONS') {
      return res.sendStatus(204)
    }

    next()
  }
}

module.exports = createCorsMiddleware