From f13e1f1e0a331d685f05d3ae03bde18a7b2abb4d Mon Sep 17 00:00:00 2001
From: Tat Dat Duong <david@duong.cz>
Date: Sat, 10 May 2025 16:13:03 -0700
Subject: [PATCH] fix(api): CORS not respected for custom auth / HTTP

---
 libs/langgraph-api/src/server.mts | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/libs/langgraph-api/src/server.mts b/libs/langgraph-api/src/server.mts
index dc81018..e57e06c 100644
--- a/libs/langgraph-api/src/server.mts
+++ b/libs/langgraph-api/src/server.mts
@@ -116,6 +116,9 @@ export async function startServer(options: z.infer<typeof StartServerSchema>) {
     },
   );
 
+  app.use(cors(options.http?.cors));
+  app.use(requestLogger());
+
   if (options.auth?.path) {
     logger.info(`Loading auth from ${options.auth.path}`);
     await registerAuth(options.auth, { cwd: options.cwd });
@@ -128,8 +131,6 @@ export async function startServer(options: z.infer<typeof StartServerSchema>) {
     app.route("/", api);
   }
 
-  app.use(cors(options.http?.cors));
-  app.use(requestLogger());
   app.use(ensureContentType());
 
   if (!options.http?.disable_meta) app.route("/", meta);