@effect-app/infra 1.18.2 → 1.19.0

package/dist/api/internal/middlewares.js

@@ -0,0 +1,168 @@
+/**
+ * Mechanism for extendning behaviour of all handlers on the server.
+ *
+ * @since 1.0.0
+ */
+import * as crypto from "crypto";
+import { dropUndefined } from "@effect-app/core/utils";
+import { NotLoggedInError } from "@effect-app/infra/errors";
+import * as Middleware from "@effect/platform/HttpMiddleware";
+import * as HttpServerRequest from "@effect/platform/HttpServerRequest";
+import * as ServerResponse from "@effect/platform/HttpServerResponse";
+import { Effect } from "effect-app";
+import { HttpBody, HttpHeaders, HttpServerResponse } from "effect-app/http";
+import * as Either from "effect/Either";
+import * as FiberRef from "effect/FiberRef";
+import { pipe } from "effect/Function";
+import * as HashMap from "effect/HashMap";
+import * as Metric from "effect/Metric";
+export const accessLog = (level = "Info") => Middleware.make((app) => pipe(HttpServerRequest.HttpServerRequest, Effect.flatMap((request) => Effect[`log${level}`](`${request.method} ${request.url}`)), Effect.flatMap(() => app)));
+export const uuidLogAnnotation = (logAnnotationKey = "requestId") => Middleware.make((app) => pipe(Effect.sync(() => crypto.randomUUID()), Effect.flatMap((uuid) => FiberRef.update(FiberRef.currentLogAnnotations, HashMap.set(logAnnotationKey, uuid))), Effect.flatMap(() => app)));
+export const endpointCallsMetric = () => {
+    const endpointCalledCounter = Metric.counter("server.endpoint_calls");
+    return Middleware.make((app) => Effect.gen(function* (_) {
+        const request = yield* _(HttpServerRequest.HttpServerRequest);
+        yield* _(Metric.increment(endpointCalledCounter), Effect.tagMetrics("path", request.url));
+        return yield* _(app);
+    }));
+};
+export const errorLog = Middleware.make((app) => Effect.gen(function* (_) {
+    const request = yield* _(HttpServerRequest.HttpServerRequest);
+    const response = yield* _(app);
+    if (response.status >= 400 && response.status < 500) {
+        yield* _(Effect.logWarning(`${request.method.toUpperCase()} ${request.url} client error ${response.status}`));
+    }
+    else if (response.status >= 500) {
+        yield* _(Effect.logError(`${request.method.toUpperCase()} ${request.url} server error ${response.status}`));
+    }
+    return response;
+}));
+export const toServerResponse = (err) => HttpServerResponse.empty().pipe(HttpServerResponse.setStatus(401), HttpServerResponse.setBody(HttpBody.unsafeJson({ message: err.message })));
+export const basicAuth = (checkCredentials, options) => Middleware.make((app) => Effect.gen(function* (_) {
+    const headerName = options?.headerName ?? "Authorization";
+    const skippedPaths = options?.skipPaths ?? [];
+    const request = yield* _(HttpServerRequest.HttpServerRequest);
+    if (skippedPaths.includes(request.url)) {
+        return yield* _(app);
+    }
+    const authHeader = request.headers[headerName.toLowerCase()];
+    if (authHeader === undefined) {
+        return toServerResponse(new NotLoggedInError(`Expected header ${headerName}`));
+    }
+    const authorizationParts = authHeader.split(" ");
+    if (authorizationParts.length !== 2) {
+        return toServerResponse(new NotLoggedInError("Incorrect auhorization scheme. Expected \"Basic <credentials>\""));
+    }
+    if (authorizationParts[0] !== "Basic") {
+        return toServerResponse(new NotLoggedInError(`Incorrect auhorization type. Expected "Basic", got "${authorizationParts[0]}"`));
+    }
+    const credentialsBuffer = Buffer.from(authorizationParts[1], "base64");
+    const credentialsText = credentialsBuffer.toString("utf-8");
+    const credentialsParts = credentialsText.split(":");
+    if (credentialsParts.length !== 2) {
+        return toServerResponse(new NotLoggedInError("Incorrect basic auth credentials format. Expected base64 encoded \"<user>:<pass>\"."));
+    }
+    const check = yield* _(checkCredentials({
+        user: credentialsParts[0],
+        password: credentialsParts[1]
+    }), Effect.either);
+    if (Either.isLeft(check)) {
+        return toServerResponse(check.left);
+    }
+    return yield* _(app);
+}));
+export const cors = (_options) => {
+    const DEFAULTS = {
+        allowedOrigins: ["*"],
+        allowedMethods: ["GET", "HEAD", "PUT", "PATCH", "POST", "DELETE"],
+        allowedHeaders: [],
+        exposedHeaders: [],
+        credentials: false
+    };
+    const options = { ...DEFAULTS, ..._options };
+    const isAllowedOrigin = (origin) => {
+        return options.allowedOrigins.includes(origin);
+    };
+    const allowOrigin = (originHeader) => {
+        if (options.allowedOrigins.length === 0) {
+            return { "Access-Control-Allow-Origin": "*" };
+        }
+        if (options.allowedOrigins.length === 1) {
+            return {
+                "Access-Control-Allow-Origin": options.allowedOrigins[0],
+                Vary: "Origin"
+            };
+        }
+        if (isAllowedOrigin(originHeader)) {
+            return {
+                "Access-Control-Allow-Origin": originHeader,
+                Vary: "Origin"
+            };
+        }
+        return undefined;
+    };
+    const allowMethods = (() => {
+        if (options.allowedMethods.length > 0) {
+            return {
+                "Access-Control-Allow-Methods": options.allowedMethods.join(", ")
+            };
+        }
+        return undefined;
+    })();
+    const allowCredentials = (() => {
+        if (options.credentials) {
+            return { "Access-Control-Allow-Credentials": "true" };
+        }
+        return undefined;
+    })();
+    const allowHeaders = (accessControlRequestHeaders) => {
+        if (options.allowedHeaders.length === 0 && accessControlRequestHeaders) {
+            return {
+                Vary: "Access-Control-Request-Headers",
+                "Access-Control-Allow-Headers": accessControlRequestHeaders
+            };
+        }
+        if (options.allowedHeaders) {
+            return {
+                "Access-Control-Allow-Headers": options.allowedHeaders.join(",")
+            };
+        }
+        return undefined;
+    };
+    const exposeHeaders = (() => {
+        if (options.exposedHeaders.length > 0) {
+            return {
+                "Access-Control-Expose-Headers": options.exposedHeaders.join(",")
+            };
+        }
+        return undefined;
+    })();
+    const maxAge = (() => {
+        if (options.maxAge) {
+            return { "Access-Control-Max-Age": options.maxAge.toString() };
+        }
+        return undefined;
+    })();
+    return Middleware.make((app) => Effect.gen(function* (_) {
+        const request = yield* _(HttpServerRequest.HttpServerRequest);
+        const origin = request.headers["origin"];
+        const accessControlRequestHeaders = request.headers["access-control-request-headers"];
+        let corsHeaders = {
+            ...allowOrigin(origin ?? ""),
+            ...allowCredentials,
+            ...exposeHeaders
+        };
+        if (request.method === "OPTIONS") {
+            corsHeaders = {
+                ...corsHeaders,
+                ...allowMethods,
+                ...allowHeaders(accessControlRequestHeaders),
+                ...maxAge
+            };
+            return ServerResponse.empty({ status: 204, headers: HttpHeaders.fromInput(dropUndefined(corsHeaders)) });
+        }
+        const response = yield* _(app);
+        return response.pipe(ServerResponse.setHeaders(dropUndefined(corsHeaders)));
+    }));
+};
+//# sourceMappingURL=data:application/json;base64,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

package/dist/{test.arbs.d.ts → test/arbs.d.ts}

@@ -8,4 +8,4 @@ export declare function generate<T>(arb: FastCheck.Arbitrary<T>): FastCheck.Valu
  * @tsplus getter effect/schema/Arbitrary generate
  */
 export declare function generateFromArbitrary<T>(arb: A.LazyArbitrary<T>): FastCheck.Value<T>;
-//# sourceMappingURL=test.arbs.d.ts.map
+//# sourceMappingURL=arbs.d.ts.map

package/dist/test/arbs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"arbs.d.ts","sourceRoot":"","sources":["../../src/test/arbs.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAG1C,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAA;AAQ1C;;GAEG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,sBAEtD;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,sBAE/D"}

package/dist/test/arbs.js

@@ -0,0 +1,21 @@
+// Do not import to frontend
+import { FastCheck } from "@effect/schema";
+import { faker } from "@faker-js/faker";
+import { setFaker } from "effect-app/faker";
+import { Random } from "fast-check";
+import * as rand from "pure-rand";
+const rnd = new Random(rand.congruential32(5));
+setFaker(faker);
+/**
+ * @tsplus getter FastCheck generateRandom
+ */
+export function generate(arb) {
+    return arb.generate(rnd, undefined);
+}
+/**
+ * @tsplus getter effect/schema/Arbitrary generate
+ */
+export function generateFromArbitrary(arb) {
+    return generate(arb(FastCheck));
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiYXJicy5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uL3NyYy90ZXN0L2FyYnMudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsNEJBQTRCO0FBRTVCLE9BQU8sRUFBRSxTQUFTLEVBQUUsTUFBTSxnQkFBZ0IsQ0FBQTtBQUMxQyxPQUFPLEVBQUUsS0FBSyxFQUFFLE1BQU0saUJBQWlCLENBQUE7QUFDdkMsT0FBTyxFQUFFLFFBQVEsRUFBRSxNQUFNLGtCQUFrQixDQUFBO0FBRTNDLE9BQU8sRUFBRSxNQUFNLEVBQUUsTUFBTSxZQUFZLENBQUE7QUFDbkMsT0FBTyxLQUFLLElBQUksTUFBTSxXQUFXLENBQUE7QUFFakMsTUFBTSxHQUFHLEdBQUcsSUFBSSxNQUFNLENBQUMsSUFBSSxDQUFDLGNBQWMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFBO0FBRTlDLFFBQVEsQ0FBQyxLQUFLLENBQUMsQ0FBQTtBQUVmOztHQUVHO0FBQ0gsTUFBTSxVQUFVLFFBQVEsQ0FBSSxHQUEyQjtJQUNyRCxPQUFPLEdBQUcsQ0FBQyxRQUFRLENBQUMsR0FBRyxFQUFFLFNBQVMsQ0FBQyxDQUFBO0FBQ3JDLENBQUM7QUFFRDs7R0FFRztBQUNILE1BQU0sVUFBVSxxQkFBcUIsQ0FBSSxHQUF1QjtJQUM5RCxPQUFPLFFBQVEsQ0FBQyxHQUFHLENBQUMsU0FBUyxDQUFDLENBQUMsQ0FBQTtBQUNqQyxDQUFDIn0=

package/dist/test.d.ts

@@ -11,5 +11,5 @@ export declare const createRandomInstance: <A extends object, I, R>(s: S.Schema<
 export declare const createRandomInstanceI: <A extends object, I>(s: S.Schema<A, I, never> & {
     fields: S.Struct.Fields;
 }) => (overrides?: Partial<I>) => A;
-export * from "./test.arbs.js";
+export * from "./test/arbs.js";
 //# sourceMappingURL=test.d.ts.map

package/dist/test.js

@@ -1,7 +1,7 @@
 import { Arbitrary } from "@effect/schema";
 import { Predicate, S } from "effect-app";
 import { copy } from "effect-app/utils";
-import { generate } from "./test.arbs.js";
+import { generate } from "./test/arbs.js";
 const isPropertySignature = (u) => Predicate.hasProperty(u, S.PropertySignatureTypeId);
 const defaults = (fields) => {
     const keys = Object.keys(fields);
@@ -43,5 +43,5 @@ export const createRandomInstanceI = (s) => {
         return decode({ ...encode(v), ...overrides });
     };
 };
-export * from "./test.arbs.js";
+export * from "./test/arbs.js";
 //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidGVzdC5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uL3NyYy90ZXN0LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBLE9BQU8sRUFBRSxTQUFTLEVBQUUsTUFBTSxnQkFBZ0IsQ0FBQTtBQUUxQyxPQUFPLEVBQUUsU0FBUyxFQUFFLENBQUMsRUFBRSxNQUFNLFlBQVksQ0FBQTtBQUN6QyxPQUFPLEVBQUUsSUFBSSxFQUFFLE1BQU0sa0JBQWtCLENBQUE7QUFDdkMsT0FBTyxFQUFFLFFBQVEsRUFBRSxNQUFNLGdCQUFnQixDQUFBO0FBRXpDLE1BQU0sbUJBQW1CLEdBQUcsQ0FBQyxDQUFVLEVBQThCLEVBQUUsQ0FDckUsU0FBUyxDQUFDLFdBQVcsQ0FBQyxDQUFDLEVBQUUsQ0FBQyxDQUFDLHVCQUF1QixDQUFDLENBQUE7QUFFckQsTUFBTSxRQUFRLEdBQUcsQ0FBQyxNQUF1QixFQUFFLEVBQUU7SUFDM0MsTUFBTSxJQUFJLEdBQUcsTUFBTSxDQUFDLElBQUksQ0FBQyxNQUFNLENBQUMsQ0FBQTtJQUNoQyw4REFBOEQ7SUFDOUQsTUFBTSxHQUFHLEdBQXdCLEVBQUUsQ0FBQTtJQUNuQyxLQUFLLE1BQU0sR0FBRyxJQUFJLElBQUksRUFBRSxDQUFDO1FBQ3ZCLE1BQU0sS0FBSyxHQUFHLE1BQU0sQ0FBQyxHQUFHLENBQUMsQ0FBQTtRQUN6QixJQUFJLG1CQUFtQixDQUFDLEtBQUssQ0FBQyxFQUFFLENBQUM7WUFDL0IsTUFBTSxHQUFHLEdBQUcsS0FBSyxDQUFDLEdBQUcsQ0FBQTtZQUNyQixNQUFNLFlBQVksR0FBRyxHQUFHLENBQUMsSUFBSSxLQUFLLDhCQUE4QixDQUFDLENBQUMsQ0FBQyxHQUFHLENBQUMsWUFBWSxDQUFDLENBQUMsQ0FBQyxHQUFHLENBQUMsRUFBRSxDQUFDLFlBQVksQ0FBQTtZQUN6RyxJQUFJLFlBQVksS0FBSyxTQUFTLEVBQUUsQ0FBQztnQkFDL0IsR0FBRyxDQUFDLEdBQUcsQ0FBQyxHQUFHLFlBQVksRUFBRSxDQUFBO1lBQzNCLENBQUM7UUFDSCxDQUFDO0lBQ0gsQ0FBQztJQUNELE9BQU8sR0FBRyxDQUFBO0FBQ1osQ0FBQyxDQUFBO0FBRUQ7O0dBRUc7QUFDSCxNQUFNLENBQUMsTUFBTSxvQkFBb0IsR0FBRyxDQUF5QixDQUFrRCxFQUFFLEVBQUU7SUFDakgsTUFBTSxHQUFHLEdBQUcsUUFBUSxDQUFDLFNBQVMsQ0FBQyxJQUFJLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQTtJQUN2QyxPQUFPLENBQUMsU0FBc0IsRUFBRSxFQUFFO1FBQ2hDLE1BQU0sQ0FBQyxHQUFHLEVBQUUsR0FBRyxHQUFHLENBQUMsS0FBSyxFQUFFLEdBQUcsUUFBUSxDQUFDLENBQUMsQ0FBQyxNQUFNLENBQUMsRUFBRSxDQUFBO1FBQ2pELE9BQU8sU0FBUyxDQUFDLENBQUMsQ0FBQyxJQUFJLENBQUMsQ0FBQyxFQUFFLFNBQVMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUE7SUFDM0MsQ0FBQyxDQUFBO0FBQ0gsQ0FBQyxDQUFBO0FBRUQ7O0dBRUc7QUFDSCxNQUFNLENBQUMsTUFBTSxxQkFBcUIsR0FBRyxDQUFzQixDQUFzRCxFQUFFLEVBQUU7SUFDbkgsTUFBTSxHQUFHLEdBQUcsUUFBUSxDQUFDLFNBQVMsQ0FBQyxJQUFJLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQTtJQUN2QyxNQUFNLE1BQU0sR0FBRyxDQUFDLENBQUMsVUFBVSxDQUFDLENBQUMsQ0FBQyxDQUFBO0lBQzlCLE1BQU0sTUFBTSxHQUFHLENBQUMsQ0FBQyxVQUFVLENBQUMsQ0FBQyxDQUFDLENBQUE7SUFDOUIsT0FBTyxDQUFDLFNBQXNCLEVBQUUsRUFBRTtRQUNoQyxNQUFNLENBQUMsR0FBRyxFQUFFLEdBQUcsR0FBRyxDQUFDLEtBQUssRUFBRSxHQUFHLFFBQVEsQ0FBQyxDQUFDLENBQUMsTUFBTSxDQUFDLEVBQUUsQ0FBQTtRQUNqRCxJQUFJLENBQUMsU0FBUztZQUFFLE9BQU8sQ0FBQyxDQUFBO1FBQ3hCLE9BQU8sTUFBTSxDQUFDLEVBQUUsR0FBRyxNQUFNLENBQUMsQ0FBQyxDQUFDLEVBQUUsR0FBRyxTQUFTLEVBQUUsQ0FBQyxDQUFBO0lBQy9DLENBQUMsQ0FBQTtBQUNILENBQUMsQ0FBQTtBQUVELGNBQWMsZ0JBQWdCLENBQUEifQ==

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@effect-app/infra",
-  "version": "1.18.2",
+  "version": "1.19.0",
   "license": "MIT",
   "type": "module",
   "dependencies": {
@@ -19,9 +19,9 @@
     "pure-rand": "6.1.0",
     "redlock": "^4.2.0",
     "@effect-app/core": "1.10.1",
-    "@effect-app/infra-adapters": "1.11.2",
-    "effect-app": "1.17.0",
-    "@effect-app/schema": "1.12.1"
+    "@effect-app/infra-adapters": "1.11.3",
+    "@effect-app/schema": "1.12.1",
+    "effect-app": "1.17.1"
   },
   "devDependencies": {
     "@babel/cli": "^7.25.6",
@@ -95,6 +95,16 @@
         "default": "./_cjs/api/codec.cjs"
       }
     },
+    "./api/middlewares": {
+      "import": {
+        "types": "./dist/api/middlewares.d.ts",
+        "default": "./dist/api/middlewares.js"
+      },
+      "require": {
+        "types": "./dist/api/middlewares.d.ts",
+        "default": "./_cjs/api/middlewares.cjs"
+      }
+    },
     "./api/reportError": {
       "import": {
         "types": "./dist/api/reportError.d.ts",
@@ -645,14 +655,34 @@
         "default": "./_cjs/services/query/new-kid-interpreter.cjs"
       }
     },
-    "./test.arbs": {
+    "./test": {
+      "import": {
+        "types": "./dist/test.d.ts",
+        "default": "./dist/test.js"
+      },
+      "require": {
+        "types": "./dist/test.d.ts",
+        "default": "./_cjs/test.cjs"
+      }
+    },
+    "./test/arbs": {
+      "import": {
+        "types": "./dist/test/arbs.d.ts",
+        "default": "./dist/test/arbs.js"
+      },
+      "require": {
+        "types": "./dist/test/arbs.d.ts",
+        "default": "./_cjs/test/arbs.cjs"
+      }
+    },
+    "./vitest": {
       "import": {
-        "types": "./dist/test.arbs.d.ts",
-        "default": "./dist/test.arbs.js"
+        "types": "./dist/vitest.d.ts",
+        "default": "./dist/vitest.js"
       },
       "require": {
-        "types": "./dist/test.arbs.d.ts",
-        "default": "./_cjs/test.arbs.cjs"
+        "types": "./dist/vitest.d.ts",
+        "default": "./_cjs/vitest.cjs"
       }
     }
   },

package/src/api/internal/middlewares.ts

@@ -0,0 +1,286 @@
+/**
+ * Mechanism for extendning behaviour of all handlers on the server.
+ *
+ * @since 1.0.0
+ */
+import * as crypto from "crypto"
+
+import { dropUndefined } from "@effect-app/core/utils"
+import { NotLoggedInError } from "@effect-app/infra/errors"
+import * as Middleware from "@effect/platform/HttpMiddleware"
+import * as HttpServerRequest from "@effect/platform/HttpServerRequest"
+import * as ServerResponse from "@effect/platform/HttpServerResponse"
+import { Effect } from "effect-app"
+import { HttpBody, HttpHeaders, HttpServerResponse } from "effect-app/http"
+import * as Either from "effect/Either"
+import * as FiberRef from "effect/FiberRef"
+import { pipe } from "effect/Function"
+import * as HashMap from "effect/HashMap"
+import * as Metric from "effect/Metric"
+import type * as Middlewares from "../middlewares.js"
+
+export const accessLog = (level: "Info" | "Warning" | "Debug" = "Info") =>
+  Middleware.make((app) =>
+    pipe(
+      HttpServerRequest.HttpServerRequest,
+      Effect.flatMap((request) => Effect[`log${level}`](`${request.method} ${request.url}`)),
+      Effect.flatMap(() => app)
+    )
+  )
+
+export const uuidLogAnnotation = (logAnnotationKey = "requestId") =>
+  Middleware.make((app) =>
+    pipe(
+      Effect.sync(() => crypto.randomUUID()),
+      Effect.flatMap((uuid) =>
+        FiberRef.update(
+          FiberRef.currentLogAnnotations,
+          HashMap.set<string, unknown>(logAnnotationKey, uuid)
+        )
+      ),
+      Effect.flatMap(() => app)
+    )
+  )
+
+export const endpointCallsMetric = () => {
+  const endpointCalledCounter = Metric.counter("server.endpoint_calls")
+
+  return Middleware.make((app) =>
+    Effect.gen(function*(_) {
+      const request = yield* _(HttpServerRequest.HttpServerRequest)
+
+      yield* _(
+        Metric.increment(endpointCalledCounter),
+        Effect.tagMetrics("path", request.url)
+      )
+
+      return yield* _(app)
+    })
+  )
+}
+
+export const errorLog = Middleware.make((app) =>
+  Effect.gen(function*(_) {
+    const request = yield* _(HttpServerRequest.HttpServerRequest)
+
+    const response = yield* _(app)
+
+    if (response.status >= 400 && response.status < 500) {
+      yield* _(
+        Effect.logWarning(
+          `${request.method.toUpperCase()} ${request.url} client error ${response.status}`
+        )
+      )
+    } else if (response.status >= 500) {
+      yield* _(
+        Effect.logError(
+          `${request.method.toUpperCase()} ${request.url} server error ${response.status}`
+        )
+      )
+    }
+
+    return response
+  })
+)
+
+export const toServerResponse = (err: NotLoggedInError) =>
+  HttpServerResponse.empty().pipe(
+    HttpServerResponse.setStatus(401),
+    HttpServerResponse.setBody(HttpBody.unsafeJson({ message: err.message }))
+  )
+
+export const basicAuth = <_, R>(
+  checkCredentials: (
+    credentials: Middlewares.BasicAuthCredentials
+  ) => Effect<_, NotLoggedInError, R>,
+  options?: Partial<{
+    headerName: string
+    skipPaths: readonly string[]
+  }>
+) =>
+  Middleware.make((app) =>
+    Effect.gen(function*(_) {
+      const headerName = options?.headerName ?? "Authorization"
+      const skippedPaths = options?.skipPaths ?? []
+      const request = yield* _(HttpServerRequest.HttpServerRequest)
+
+      if (skippedPaths.includes(request.url)) {
+        return yield* _(app)
+      }
+
+      const authHeader = request.headers[headerName.toLowerCase()]
+
+      if (authHeader === undefined) {
+        return toServerResponse(
+          new NotLoggedInError(
+            `Expected header ${headerName}`
+          )
+        )
+      }
+
+      const authorizationParts = authHeader.split(" ")
+
+      if (authorizationParts.length !== 2) {
+        return toServerResponse(
+          new NotLoggedInError(
+            "Incorrect auhorization scheme. Expected \"Basic <credentials>\""
+          )
+        )
+      }
+
+      if (authorizationParts[0] !== "Basic") {
+        return toServerResponse(
+          new NotLoggedInError(
+            `Incorrect auhorization type. Expected "Basic", got "${authorizationParts[0]}"`
+          )
+        )
+      }
+
+      const credentialsBuffer = Buffer.from(authorizationParts[1]!, "base64")
+      const credentialsText = credentialsBuffer.toString("utf-8")
+      const credentialsParts = credentialsText.split(":")
+
+      if (credentialsParts.length !== 2) {
+        return toServerResponse(
+          new NotLoggedInError(
+            "Incorrect basic auth credentials format. Expected base64 encoded \"<user>:<pass>\"."
+          )
+        )
+      }
+
+      const check = yield* _(
+        checkCredentials({
+          user: credentialsParts[0],
+          password: credentialsParts[1]!
+        }),
+        Effect.either
+      )
+
+      if (Either.isLeft(check)) {
+        return toServerResponse(check.left)
+      }
+
+      return yield* _(app)
+    })
+  )
+
+export const cors = (_options?: Partial<Middlewares.CorsOptions>) => {
+  const DEFAULTS = {
+    allowedOrigins: ["*"],
+    allowedMethods: ["GET", "HEAD", "PUT", "PATCH", "POST", "DELETE"],
+    allowedHeaders: [],
+    exposedHeaders: [],
+    credentials: false
+  } as const
+
+  const options = { ...DEFAULTS, ..._options }
+
+  const isAllowedOrigin = (origin: string) => {
+    return options.allowedOrigins.includes(origin)
+  }
+
+  const allowOrigin = (originHeader: string) => {
+    if (options.allowedOrigins.length === 0) {
+      return { "Access-Control-Allow-Origin": "*" }
+    }
+
+    if (options.allowedOrigins.length === 1) {
+      return {
+        "Access-Control-Allow-Origin": options.allowedOrigins[0],
+        Vary: "Origin"
+      }
+    }
+
+    if (isAllowedOrigin(originHeader)) {
+      return {
+        "Access-Control-Allow-Origin": originHeader,
+        Vary: "Origin"
+      }
+    }
+
+    return undefined
+  }
+
+  const allowMethods = (() => {
+    if (options.allowedMethods.length > 0) {
+      return {
+        "Access-Control-Allow-Methods": options.allowedMethods.join(", ")
+      }
+    }
+
+    return undefined
+  })()
+
+  const allowCredentials = (() => {
+    if (options.credentials) {
+      return { "Access-Control-Allow-Credentials": "true" }
+    }
+
+    return undefined
+  })()
+
+  const allowHeaders = (accessControlRequestHeaders: string | undefined) => {
+    if (options.allowedHeaders.length === 0 && accessControlRequestHeaders) {
+      return {
+        Vary: "Access-Control-Request-Headers",
+        "Access-Control-Allow-Headers": accessControlRequestHeaders
+      }
+    }
+
+    if (options.allowedHeaders) {
+      return {
+        "Access-Control-Allow-Headers": options.allowedHeaders.join(",")
+      }
+    }
+
+    return undefined
+  }
+
+  const exposeHeaders = (() => {
+    if (options.exposedHeaders.length > 0) {
+      return {
+        "Access-Control-Expose-Headers": options.exposedHeaders.join(",")
+      }
+    }
+
+    return undefined
+  })()
+
+  const maxAge = (() => {
+    if (options.maxAge) {
+      return { "Access-Control-Max-Age": options.maxAge.toString() }
+    }
+
+    return undefined
+  })()
+
+  return Middleware.make((app) =>
+    Effect.gen(function*(_) {
+      const request = yield* _(HttpServerRequest.HttpServerRequest)
+
+      const origin = request.headers["origin"]
+      const accessControlRequestHeaders = request.headers["access-control-request-headers"]
+
+      let corsHeaders = {
+        ...allowOrigin(origin ?? ""),
+        ...allowCredentials,
+        ...exposeHeaders
+      }
+
+      if (request.method === "OPTIONS") {
+        corsHeaders = {
+          ...corsHeaders,
+          ...allowMethods,
+          ...allowHeaders(accessControlRequestHeaders),
+          ...maxAge
+        }
+
+        return ServerResponse.empty({ status: 204, headers: HttpHeaders.fromInput(dropUndefined(corsHeaders)) })
+      }
+
+      const response = yield* _(app)
+
+      return response.pipe(ServerResponse.setHeaders(dropUndefined(corsHeaders)))
+    })
+  )
+}