@bool-ts/core 1.0.0 → 1.0.1

package/dist/decorators/module.d.ts

@@ -1,6 +1,8 @@
 export type TModuleOptions = Partial<{
     controllers: Array<new (...args: any[]) => unknown>;
     dependencies: Array<new (...args: any[]) => unknown>;
+    allowOrigins: string | Array<string>;
+    allowMethods: Array<"GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "OPTIONS">;
 }> | undefined;
 export declare const moduleKey = "__bool:module__";
 export declare const Module: (args?: TModuleOptions) => <T extends new (...args: any[]) => {}>(target: T, context?: ClassDecoratorContext) => T;

package/dist/hooks/factory.js

@@ -113,6 +113,32 @@ export const BoolFactory = (target) => {
         const convertedTime = `${Math.round((time + Number.EPSILON) * 10 ** 2) / 10 ** 2}ms`.yellow;
         console.info(`PID: ${convertedPID} - Method: ${convertedMethod} - IP: ${convertedReqIp} - ${req.originalUrl.blue} - Time: ${convertedTime}`);
     }));
+    const allowOrigins = !metadata?.allowOrigins ?
+        ["*"] : typeof metadata.allowOrigins !== "string" ?
+        metadata.allowOrigins : [metadata.allowOrigins];
+    const allowMethods = !metadata?.allowMethods ?
+        ["GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"] : metadata.allowMethods;
+    app.use((req, res, next) => {
+        if (!req.headers.origin) {
+            return res.status(403).json({
+                ["httpCode"]: 403,
+                ["data"]: "CORS Origin - Not found."
+            });
+        }
+        if (!allowOrigins.includes("*")) {
+            if (!allowOrigins.includes(req.headers.origin)) {
+                return res.status(403).json({
+                    ["httpCode"]: 403,
+                    ["data"]: "Invalid origin."
+                });
+            }
+        }
+        res.header("Access-Control-Allow-Origin", req.headers.origin);
+        res.header("Access-Control-Allow-Headers", "*");
+        res.header("Access-Control-Allow-Credentials", "true");
+        res.header("Access-Control-Allow-Methods", allowMethods.join(", "));
+        next();
+    });
     app.use(routers);
     return app;
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bool-ts/core",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "",
   "main": "dist/index.js",
   "scripts": {

package/src/decorators/module.ts

@@ -1,6 +1,8 @@
 export type TModuleOptions = Partial<{
     controllers: Array<new (...args: any[]) => unknown>;
     dependencies: Array<new (...args: any[]) => unknown>;
+    allowOrigins: string | Array<string>;
+    allowMethods: Array<"GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "OPTIONS">;
 }> | undefined;
 
 export const moduleKey = "__bool:module__";

package/src/hooks/factory.ts

@@ -2,7 +2,7 @@ import "reflect-metadata";
 import "colors";
 
 import * as Qs from "qs";
-import * as  ResponseTime from "response-time";
+import * as ResponseTime from "response-time";
 
 import { type IControllerRoute, type TModuleOptions, controllerKey, controllerRoutesKey, moduleKey } from "../decorators";
 import { default as ExpressApp, Router, json, urlencoded, Request, Response, NextFunction, Errback } from "express";
@@ -143,6 +143,38 @@ export const BoolFactory = (
         })
     );
 
+    const allowOrigins = !metadata?.allowOrigins ?
+        ["*"] : typeof metadata.allowOrigins !== "string" ?
+            metadata.allowOrigins : [metadata.allowOrigins];
+
+    const allowMethods = !metadata?.allowMethods ?
+        ["GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"] : metadata.allowMethods;
+
+    app.use((req: Request, res: Response, next: NextFunction) => {
+        if (!req.headers.origin) {
+            return res.status(403).json({
+                ["httpCode"]: 403,
+                ["data"]: "CORS Origin - Not found."
+            });
+        }
+
+        if (!allowOrigins.includes("*")) {
+            if (!allowOrigins.includes(req.headers.origin)) {
+                return res.status(403).json({
+                    ["httpCode"]: 403,
+                    ["data"]: "Invalid origin."
+                });
+            }
+        }
+
+        res.header("Access-Control-Allow-Origin", req.headers.origin);
+        res.header("Access-Control-Allow-Headers", "*");
+        res.header("Access-Control-Allow-Credentials", "true");
+        res.header("Access-Control-Allow-Methods", allowMethods.join(", "));
+
+        next();
+    });
+
     app.use(routers);
 
     return app;