@azteam/express 1.2.503 → 1.2.506

package/lib/Server.js

@@ -444,9 +444,23 @@ var Server = /*#__PURE__*/function () {
         var httpServer = (0, _http.createServer)();
         var app = this.createExpressApp();
         httpServer.on('request', app);
+        var whiteList = this.options.whiteList;
         var io = new _socket.Server(httpServer, {
+          wsEngine: require('eiows').Server,
+          perMessageDeflate: {
+            threshold: 32768
+          },
           cors: {
-            origin: '*'
+            credentials: true,
+            origin: function origin(_origin, callback) {
+              if (_origin && whiteList && !whiteList.some(function (re) {
+                return _origin.endsWith(re);
+              })) {
+                callback(null, true);
+              } else {
+                callback(new Error("".concat(_origin, " Not allowed by CORS")));
+              }
+            }
           }
         });
         httpServer.listen(port);

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@azteam/express",
-    "version": "1.2.503",
+    "version": "1.2.506",
     "license": "MIT",
     "author": "toda <sp.azsolution.net@gmail.com>",
     "main": "./lib/index.js",
@@ -22,7 +22,7 @@
         "compression": "1.7.4",
         "cookie-parser": "1.4.4",
         "cors": "2.8.4",
-        "eiows": "4.1.2",
+        "eiows": "7.1.2",
         "ejs": "3.1.8",
         "etag": "1.8.1",
         "express": "4.17.1",

package/src/Server.js

@@ -425,9 +425,22 @@ class Server {
             const app = this.createExpressApp();
             httpServer.on('request', app);
 
+            const {whiteList} = this.options;
+
             const io = new SocketIO(httpServer, {
+                wsEngine: require('eiows').Server,
+                perMessageDeflate: {
+                    threshold: 32768,
+                },
                 cors: {
-                    origin: '*',
+                    credentials: true,
+                    origin(origin, callback) {
+                        if (origin && whiteList && !whiteList.some((re) => origin.endsWith(re))) {
+                            callback(null, true);
+                        } else {
+                            callback(new Error(`${origin} Not allowed by CORS`));
+                        }
+                    },
                 },
             });
             httpServer.listen(port);