hobby-cors 0.0.0 → 0.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 494fee694e14e61b1aecc95e43b752d51aa0e1bafdc8f7072bd49a281273e8c0
-  data.tar.gz: 387d2c9722827471b5623e1faca1dd129dd4a931dc6f7c1a3eec3cd1fc191a72
+  metadata.gz: d5e015f024ff9151f35aa4cf941f75ce9480c83984a0617dd12d56c991bdd8c7
+  data.tar.gz: 7e693bc6293c8388293cf400b8a8b42574be5aecd1e9f8c6b34b6f4110ec12c0
 SHA512:
-  metadata.gz: 13283068cf585bb0465dc3dea3c62f6b6345e70b06a8be76b0d3bf55db41350b72d29cff8907e8e1323936454f66f459d93cce6a91ab79ec484e60e8838ac300
-  data.tar.gz: 558c4f85d9981d7262fcaa1dea50f270d25b458eb0b4359613a99586109007e089e0546f70c34cf94273d84060f9910cdcb5035785cc78e9fc9f5716a85ce597
+  metadata.gz: 5b73e2f5d700a708de2da36f5a7d09014fe944147d33742008b09542cae239b993cbf9578acd5106d8d42561acb2f7a3d6d114fa0807e344f016d51bb788bb4a
+  data.tar.gz: 5078de1fd7f111cc68c5bbb680396b63bfa1696efb33533c044038e8081a7d4327d5df349b4f761edd4bc7d71a1c5688cd42ccae28542464a9dc37a8c629b06c

data/lib/hobby/cors.rb

@@ -1,13 +1,38 @@
+require 'rack'
+
 module Hobby
-  class Cors
-    def initialize app
+  class CORS
+    def initialize app, origins: nil
       @app = app
+      @origins = origins
     end
 
     def call env
-      status, headers, body = @app.call env
-      headers['Access-Control-Allow-Origin'] = '*'
-      [status, headers, body]
+      origin = '*'
+
+      if @origins
+        if @origins.include? env['HTTP_ORIGIN']
+          origin = env['HTTP_ORIGIN']
+        else
+          return [400, {}, []]
+        end
+      end
+
+      case env['REQUEST_METHOD']
+      when 'OPTIONS'
+        response = Rack::Response.new
+
+        response.add_header 'Access-Control-Allow-Origin', origin
+        response.add_header 'Access-Control-Allow-Methods', 'POST, OPTIONS'
+        response.add_header 'Access-Control-Allow-Headers', 'Authorization, Content-Type'
+        response.add_header 'Access-Control-Max-Age', '86400'
+
+        response.to_a
+      else
+        status, headers, body = @app.call env
+        headers['Access-Control-Allow-Origin'] = origin
+        [status, headers, body]
+      end
     end
   end
 end

metadata

@@ -1,38 +1,40 @@
 --- !ruby/object:Gem::Specification
 name: hobby-cors
 version: !ruby/object:Gem::Version
-  version: 0.0.0
+  version: 0.1.0
 platform: ruby
 authors:
-- Anatoly Chernow
+- Anatoly Chernov
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-06-05 00:00:00.000000000 Z
+date: 2021-04-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rack
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '2'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '2'
 description: 
-email: 
+email:
+- chertoly@gmail.com
 executables: []
 extensions: []
 extra_rdoc_files: []
 files:
 - lib/hobby/cors.rb
-homepage: 
-licenses: []
+homepage: https://github.com/ch1c0t/hobby-cors
+licenses:
+- ISC
 metadata: {}
 post_install_message: 
 rdoc_options: []
@@ -49,9 +51,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.7.6
+rubygems_version: 3.1.6
 signing_key: 
 specification_version: 4
-summary: A Rack CORS middleware without complexities.
+summary: A Rack middleware for CORS, with permissive defaults.
 test_files: []