@blaasvaer/frmwrk 0.1.17 → 0.1.18
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/handle-request.js +18 -0
- package/package.json +1 -1
package/handle-request.js
CHANGED
|
@@ -5,6 +5,8 @@ const path = require('path');
|
|
|
5
5
|
const statics = require('serve-handler');
|
|
6
6
|
const { findRoute } = require('./router');
|
|
7
7
|
|
|
8
|
+
let headers = {};
|
|
9
|
+
|
|
8
10
|
const content_types = {
|
|
9
11
|
"text" : 'text/plain; charset=utf-8',
|
|
10
12
|
"html" : 'text/html; charset=utf-8',
|
|
@@ -63,6 +65,18 @@ async function handleRequest( req, res ) {
|
|
|
63
65
|
let response_output = 'Nothing here …';
|
|
64
66
|
|
|
65
67
|
switch ( method ) {
|
|
68
|
+
case 'OPTIONS': // CORS request
|
|
69
|
+
headers = {
|
|
70
|
+
"Access-Control-Allow-Origin": "http://localhost",
|
|
71
|
+
"Access-Control-Allow-Methods": "OPTIONS, POST, GET, PUT, DELETE",
|
|
72
|
+
"Access-Control-Max-Age": 2592000, // 30 days // 86400, // 24 hours
|
|
73
|
+
"Access-Control-Allow-Credentials": false,
|
|
74
|
+
"Access-Control-Allow-Headers": "X-Requested-With, X-HTTP-Method-Override, Content-Type, Accept"
|
|
75
|
+
/** add other headers as per requirement */
|
|
76
|
+
};
|
|
77
|
+
res.writeHead(204, headers);
|
|
78
|
+
res.end();
|
|
79
|
+
return;
|
|
66
80
|
case 'GET':
|
|
67
81
|
if ( ! controller.route.params ) {
|
|
68
82
|
/**
|
|
@@ -124,7 +138,11 @@ async function handleRequest( req, res ) {
|
|
|
124
138
|
|
|
125
139
|
// Cookies
|
|
126
140
|
res.setHeader( 'Set-Cookie','uuid=1234-1324-1234-1234-1234; Max-Age=3000; SameSite=lax; Secure' );
|
|
141
|
+
|
|
142
|
+
// CORS
|
|
127
143
|
res.setHeader( 'Access-Control-Allow-Methods', 'GET, POST, PATCH, PUT, DELETE, OPTIONS' );
|
|
144
|
+
res.setHeader( 'Access-Control-Allow-Origin', 'http://localhost');
|
|
145
|
+
res.setHeader( 'Access-Control-Allow-Headers', 'Origin, X-Requested-With, Content-Type, Accept');
|
|
128
146
|
// res.setHeader( 'Content-Security-Policy', "default-src 'self'; img-src 'self';");
|
|
129
147
|
|
|
130
148
|
response_output = await controller.view( data );
|