event rpc and graph cors policies

services/events.js

@@ -441,7 +441,23 @@ class EventsFactory {
   instances = new Map()
 
   constructor(rpcUrl) {
-    this.provider = new Web3(rpcUrl).eth
+    this.provider = new Web3(
+      new Web3.providers.HttpProvider(rpcUrl, {
+        headers: [
+          {
+            name: 'Access-Control-Allow-Origin',
+            value: rpcUrl
+          },
+          {
+            name: 'Access-Control-Allow-Methods',
+            value: 'POST, GET, OPTIONS'
+          }
+        ],
+        withCredentials: false,
+        // buffer for tor connections
+        timeout: 30000
+      })
+    ).eth
   }
 
   getBlockNumber = () => {

services/graph.js

@@ -39,6 +39,7 @@ const defaultOptions = {
 
 const client = new ApolloClient({
   uri: link,
+  credentials: 'same-origin',
   cache: new InMemoryCache(),
   defaultOptions
 })
@@ -46,6 +47,7 @@ const client = new ApolloClient({
 const registryClient = new ApolloClient({
   uri: 'https://api.thegraph.com/subgraphs/name/tornadocash/tornado-relayer-registry',
   cache: new InMemoryCache(),
+  credentials: 'same-origin',
   defaultOptions
 })