add custom origin check

config/prod.exs

@@ -15,11 +15,7 @@ config :accumulator, Accumulator.Mailer, adapter: Resend.Swoosh.Adapter
 # before starting your production server.
 config :accumulator, AccumulatorWeb.Endpoint,
   cache_static_manifest: "priv/static/cache_manifest.json",
-  check_origin: [
-    "https://aayushsahu.com",
-    "https://phoenix-aayushsahu-com.fly.dev",
-    "https://phoenix.aayushsahu.com/"
-  ]
+  check_origin: {Accumulator.Origin, :my_check_origin?, []}
 
 # Do not print debug messages in production
 config :logger, level: :info

lib/accumulator/origin.ex

@@ -0,0 +1,12 @@
+defmodule Accumulator.Origin do
+  @allowed_hosts ["aayushsahu.com", "phoenix.aayushsahu.com"]
+
+  def my_check_origin?(%URI{scheme: scheme, host: host} = _uri) do
+    case scheme do
+      "moz-extension" -> true
+      "chrome-extension" -> true
+      "https" -> if host in @allowed_hosts, do: true, else: false
+      _ -> false
+    end
+  end
+end

lib/accumulator_web/endpoint.ex

@@ -60,6 +60,5 @@ defmodule AccumulatorWeb.Endpoint do
 
   socket "/extension", AccumulatorWeb.ExtensionSocket,
     websocket: true,
-    longpoll: false,
-    check_origin: false
+    longpoll: false
 end