@eggjs/jsonp 4.0.0-beta.34 → 4.0.0-beta.36

package/dist/app/extend/application.d.ts

@@ -1,10 +1,14 @@
-import { Application, type MiddlewareFunc } from 'egg';
-import type { JSONPConfig } from '../../config/config.default.ts';
-export default class JSONPApplication extends Application {
-    /**
-     * return a middleware to enable jsonp response.
-     * will do some security check inside.
-     * @public
-     */
-    jsonp(initOptions?: Partial<JSONPConfig>): MiddlewareFunc;
+import { JSONPConfig } from "../../config/config.default.js";
+import { Application, MiddlewareFunc } from "egg";
+
+//#region src/app/extend/application.d.ts
+declare class JSONPApplication extends Application {
+  /**
+  * return a middleware to enable jsonp response.
+  * will do some security check inside.
+  * @public
+  */
+  jsonp(initOptions?: Partial<JSONPConfig>): MiddlewareFunc;
 }
+//#endregion
+export { JSONPApplication as default };

package/dist/app/extend/application.js

@@ -1,110 +1,80 @@
-import { debuglog } from 'node:util';
-import { parse as urlParse } from 'node:url';
-import { Application } from 'egg';
-import { JSONP_CONFIG } from "../../lib/private_key.js";
 import { JSONPForbiddenReferrerError } from "../../error/JSONPForbiddenReferrerError.js";
-const debug = debuglog('egg/jsonp/app/extend/application');
-export default class JSONPApplication extends Application {
-    /**
-     * return a middleware to enable jsonp response.
-     * will do some security check inside.
-     * @public
-     */
-    jsonp(initOptions = {}) {
-        const options = {
-            ...this.config.jsonp,
-            ...initOptions,
-        };
-        if (!Array.isArray(options.callback)) {
-            options.callback = [options.callback];
-        }
-        const csrfEnable = this.plugins.security &&
-            this.plugins.security.enable && // security enable
-            this.config.security.csrf &&
-            this.config.security.csrf.enable !== false && // csrf enable
-            options.csrf; // jsonp csrf enabled
-        const validateReferrer = options.whiteList && createValidateReferer(options.whiteList);
-        if (!csrfEnable && !validateReferrer) {
-            this.coreLogger.warn('[@eggjs/jsonp] SECURITY WARNING!! csrf check and referrer check are both closed!');
-        }
-        /**
-         * jsonp request security check, pass if
-         *
-         * 1. hit referrer white list
-         * 2. or pass csrf check
-         * 3. both check are disabled
-         */
-        function securityAssert(ctx) {
-            // all disabled. don't need check
-            if (!csrfEnable && !validateReferrer)
-                return;
-            // pass referrer check
-            const referrer = ctx.get('referrer');
-            if (validateReferrer && validateReferrer(referrer))
-                return;
-            if (csrfEnable && validateCsrf(ctx))
-                return;
-            throw new JSONPForbiddenReferrerError('jsonp request security validate failed', referrer, 403);
-        }
-        return async function jsonp(ctx, next) {
-            const jsonpFunction = getJsonpFunction(ctx.query, options.callback);
-            ctx[JSONP_CONFIG] = {
-                jsonpFunction,
-                options,
-            };
-            // before handle request, must do some security checks
-            securityAssert(ctx);
-            await next();
-            // generate jsonp body
-            ctx.createJsonpBody(ctx.body);
-        };
-    }
-}
+import { JSONP_CONFIG } from "../../lib/private_key.js";
+import { Application } from "egg";
+import { parse } from "node:url";
+import { debuglog } from "node:util";
+
+//#region src/app/extend/application.ts
+const debug = debuglog("egg/jsonp/app/extend/application");
+var JSONPApplication = class extends Application {
+	/**
+	* return a middleware to enable jsonp response.
+	* will do some security check inside.
+	* @public
+	*/
+	jsonp(initOptions = {}) {
+		const options = {
+			...this.config.jsonp,
+			...initOptions
+		};
+		if (!Array.isArray(options.callback)) options.callback = [options.callback];
+		const csrfEnable = this.plugins.security && this.plugins.security.enable && this.config.security.csrf && this.config.security.csrf.enable !== false && options.csrf;
+		const validateReferrer = options.whiteList && createValidateReferer(options.whiteList);
+		if (!csrfEnable && !validateReferrer) this.coreLogger.warn("[@eggjs/jsonp] SECURITY WARNING!! csrf check and referrer check are both closed!");
+		/**
+		* jsonp request security check, pass if
+		*
+		* 1. hit referrer white list
+		* 2. or pass csrf check
+		* 3. both check are disabled
+		*/
+		function securityAssert(ctx) {
+			if (!csrfEnable && !validateReferrer) return;
+			const referrer = ctx.get("referrer");
+			if (validateReferrer && validateReferrer(referrer)) return;
+			if (csrfEnable && validateCsrf(ctx)) return;
+			throw new JSONPForbiddenReferrerError("jsonp request security validate failed", referrer, 403);
+		}
+		return async function jsonp(ctx, next) {
+			ctx[JSONP_CONFIG] = {
+				jsonpFunction: getJsonpFunction(ctx.query, options.callback),
+				options
+			};
+			securityAssert(ctx);
+			await next();
+			ctx.createJsonpBody(ctx.body);
+		};
+	}
+};
 function createValidateReferer(whiteList) {
-    if (!Array.isArray(whiteList)) {
-        whiteList = [whiteList];
-    }
-    return (referrer) => {
-        let parsed;
-        for (const rule of whiteList) {
-            if (rule instanceof RegExp) {
-                if (rule.test(referrer)) {
-                    // regexp(/^https?:\/\/github.com\//): test the referrer with rule
-                    return true;
-                }
-                continue;
-            }
-            parsed = parsed ?? urlParse(referrer);
-            const hostname = parsed.hostname || '';
-            // check if referrer's hostname match the string rule
-            if (rule[0] === '.' && (hostname.endsWith(rule) || hostname === rule.slice(1))) {
-                // string start with `.`(.github.com): referrer's hostname must ends with rule
-                return true;
-            }
-            else if (hostname === rule) {
-                // string not start with `.`(github.com): referrer's hostname must strict equal to rule
-                return true;
-            }
-        }
-        // no rule matched
-        return false;
-    };
+	if (!Array.isArray(whiteList)) whiteList = [whiteList];
+	return (referrer) => {
+		let parsed;
+		for (const rule of whiteList) {
+			if (rule instanceof RegExp) {
+				if (rule.test(referrer)) return true;
+				continue;
+			}
+			parsed = parsed ?? parse(referrer);
+			const hostname = parsed.hostname || "";
+			if (rule[0] === "." && (hostname.endsWith(rule) || hostname === rule.slice(1))) return true;
+			else if (hostname === rule) return true;
+		}
+		return false;
+	};
 }
 function validateCsrf(ctx) {
-    try {
-        ctx.assertCsrf();
-        return true;
-    }
-    catch (err) {
-        debug('validate csrf failed: %s', err);
-        return false;
-    }
+	try {
+		ctx.assertCsrf();
+		return true;
+	} catch (err) {
+		debug("validate csrf failed: %s", err);
+		return false;
+	}
 }
 function getJsonpFunction(query, callbacks) {
-    for (const callback of callbacks) {
-        if (query[callback]) {
-            return query[callback];
-        }
-    }
+	for (const callback of callbacks) if (query[callback]) return query[callback];
 }
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiYXBwbGljYXRpb24uanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvYXBwL2V4dGVuZC9hcHBsaWNhdGlvbi50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxPQUFPLEVBQUUsUUFBUSxFQUFFLE1BQU0sV0FBVyxDQUFDO0FBQ3JDLE9BQU8sRUFBRSxLQUFLLElBQUksUUFBUSxFQUEyQixNQUFNLFVBQVUsQ0FBQztBQUd0RSxPQUFPLEVBQUUsV0FBVyxFQUF1QixNQUFNLEtBQUssQ0FBQztBQUV2RCxPQUFPLEVBQUUsWUFBWSxFQUFFLE1BQU0sMEJBQTBCLENBQUM7QUFFeEQsT0FBTyxFQUFFLDJCQUEyQixFQUFFLE1BQU0sNENBQTRDLENBQUM7QUFHekYsTUFBTSxLQUFLLEdBQUcsUUFBUSxDQUFDLGtDQUFrQyxDQUFDLENBQUM7QUFFM0QsTUFBTSxDQUFDLE9BQU8sT0FBTyxnQkFBaUIsU0FBUSxXQUFXO0lBQ3ZEOzs7O09BSUc7SUFDSCxLQUFLLENBQUMsY0FBb0MsRUFBRTtRQUMxQyxNQUFNLE9BQU8sR0FBRztZQUNkLEdBQUcsSUFBSSxDQUFDLE1BQU0sQ0FBQyxLQUFLO1lBQ3BCLEdBQUcsV0FBVztTQUN5QixDQUFDO1FBQzFDLElBQUksQ0FBQyxLQUFLLENBQUMsT0FBTyxDQUFDLE9BQU8sQ0FBQyxRQUFRLENBQUMsRUFBRSxDQUFDO1lBQ3JDLE9BQU8sQ0FBQyxRQUFRLEdBQUcsQ0FBQyxPQUFPLENBQUMsUUFBUSxDQUFDLENBQUM7UUFDeEMsQ0FBQztRQUVELE1BQU0sVUFBVSxHQUNkLElBQUksQ0FBQyxPQUFPLENBQUMsUUFBUTtZQUNyQixJQUFJLENBQUMsT0FBTyxDQUFDLFFBQVEsQ0FBQyxNQUFNLElBQUksa0JBQWtCO1lBQ2xELElBQUksQ0FBQyxNQUFNLENBQUMsUUFBUSxDQUFDLElBQUk7WUFDekIsSUFBSSxDQUFDLE1BQU0sQ0FBQyxRQUFRLENBQUMsSUFBSSxDQUFDLE1BQU0sS0FBSyxLQUFLLElBQUksY0FBYztZQUM1RCxPQUFPLENBQUMsSUFBSSxDQUFDLENBQUMscUJBQXFCO1FBRXJDLE1BQU0sZ0JBQWdCLEdBQUcsT0FBTyxDQUFDLFNBQVMsSUFBSSxxQkFBcUIsQ0FBQyxPQUFPLENBQUMsU0FBUyxDQUFDLENBQUM7UUFFdkYsSUFBSSxDQUFDLFVBQVUsSUFBSSxDQUFDLGdCQUFnQixFQUFFLENBQUM7WUFDckMsSUFBSSxDQUFDLFVBQVUsQ0FBQyxJQUFJLENBQUMsa0ZBQWtGLENBQUMsQ0FBQztRQUMzRyxDQUFDO1FBQ0Q7Ozs7OztXQU1HO1FBQ0gsU0FBUyxjQUFjLENBQUMsR0FBaUI7WUFDdkMsaUNBQWlDO1lBQ2pDLElBQUksQ0FBQyxVQUFVLElBQUksQ0FBQyxnQkFBZ0I7Z0JBQUUsT0FBTztZQUU3QyxzQkFBc0I7WUFDdEIsTUFBTSxRQUFRLEdBQUcsR0FBRyxDQUFDLEdBQUcsQ0FBUyxVQUFVLENBQUMsQ0FBQztZQUM3QyxJQUFJLGdCQUFnQixJQUFJLGdCQUFnQixDQUFDLFFBQVEsQ0FBQztnQkFBRSxPQUFPO1lBQzNELElBQUksVUFBVSxJQUFJLFlBQVksQ0FBQyxHQUFHLENBQUM7Z0JBQUUsT0FBTztZQUU1QyxNQUFNLElBQUksMkJBQTJCLENBQUMsd0NBQXdDLEVBQUUsUUFBUSxFQUFFLEdBQUcsQ0FBQyxDQUFDO1FBQ2pHLENBQUM7UUFFRCxPQUFPLEtBQUssVUFBVSxLQUFLLENBQUMsR0FBaUIsRUFBRSxJQUFJO1lBQ2pELE1BQU0sYUFBYSxHQUFHLGdCQUFnQixDQUFDLEdBQUcsQ0FBQyxLQUFLLEVBQUUsT0FBTyxDQUFDLFFBQVEsQ0FBQyxDQUFDO1lBRXBFLEdBQUcsQ0FBQyxZQUFZLENBQUMsR0FBRztnQkFDbEIsYUFBYTtnQkFDYixPQUFPO2FBQ1IsQ0FBQztZQUVGLHNEQUFzRDtZQUN0RCxjQUFjLENBQUMsR0FBRyxDQUFDLENBQUM7WUFFcEIsTUFBTSxJQUFJLEVBQUUsQ0FBQztZQUViLHNCQUFzQjtZQUN0QixHQUFHLENBQUMsZUFBZSxDQUFDLEdBQUcsQ0FBQyxJQUFJLENBQUMsQ0FBQztRQUNoQyxDQUFDLENBQUM7SUFDSixDQUFDO0NBQ0Y7QUFFRCxTQUFTLHFCQUFxQixDQUFDLFNBQTZDO0lBQzFFLElBQUksQ0FBQyxLQUFLLENBQUMsT0FBTyxDQUFDLFNBQVMsQ0FBQyxFQUFFLENBQUM7UUFDOUIsU0FBUyxHQUFHLENBQUMsU0FBUyxDQUFDLENBQUM7SUFDMUIsQ0FBQztJQUVELE9BQU8sQ0FBQyxRQUFnQixFQUFFLEVBQUU7UUFDMUIsSUFBSSxNQUFzQyxDQUFDO1FBQzNDLEtBQUssTUFBTSxJQUFJLElBQUksU0FBUyxFQUFFLENBQUM7WUFDN0IsSUFBSSxJQUFJLFlBQVksTUFBTSxFQUFFLENBQUM7Z0JBQzNCLElBQUksSUFBSSxDQUFDLElBQUksQ0FBQyxRQUFRLENBQUMsRUFBRSxDQUFDO29CQUN4QixrRUFBa0U7b0JBQ2xFLE9BQU8sSUFBSSxDQUFDO2dCQUNkLENBQUM7Z0JBQ0QsU0FBUztZQUNYLENBQUM7WUFFRCxNQUFNLEdBQUcsTUFBTSxJQUFJLFFBQVEsQ0FBQyxRQUFRLENBQUMsQ0FBQztZQUN0QyxNQUFNLFFBQVEsR0FBRyxNQUFNLENBQUMsUUFBUSxJQUFJLEVBQUUsQ0FBQztZQUV2QyxxREFBcUQ7WUFDckQsSUFBSSxJQUFJLENBQUMsQ0FBQyxDQUFDLEtBQUssR0FBRyxJQUFJLENBQUMsUUFBUSxDQUFDLFFBQVEsQ0FBQyxJQUFJLENBQUMsSUFBSSxRQUFRLEtBQUssSUFBSSxDQUFDLEtBQUssQ0FBQyxDQUFDLENBQUMsQ0FBQyxFQUFFLENBQUM7Z0JBQy9FLDhFQUE4RTtnQkFDOUUsT0FBTyxJQUFJLENBQUM7WUFDZCxDQUFDO2lCQUFNLElBQUksUUFBUSxLQUFLLElBQUksRUFBRSxDQUFDO2dCQUM3Qix1RkFBdUY7Z0JBQ3ZGLE9BQU8sSUFBSSxDQUFDO1lBQ2QsQ0FBQztRQUNILENBQUM7UUFFRCxrQkFBa0I7UUFDbEIsT0FBTyxLQUFLLENBQUM7SUFDZixDQUFDLENBQUM7QUFDSixDQUFDO0FBRUQsU0FBUyxZQUFZLENBQUMsR0FBaUI7SUFDckMsSUFBSSxDQUFDO1FBQ0gsR0FBRyxDQUFDLFVBQVUsRUFBRSxDQUFDO1FBQ2pCLE9BQU8sSUFBSSxDQUFDO0lBQ2QsQ0FBQztJQUFDLE9BQU8sR0FBRyxFQUFFLENBQUM7UUFDYixLQUFLLENBQUMsMEJBQTBCLEVBQUUsR0FBRyxDQUFDLENBQUM7UUFDdkMsT0FBTyxLQUFLLENBQUM7SUFDZixDQUFDO0FBQ0gsQ0FBQztBQUVELFNBQVMsZ0JBQWdCLENBQUMsS0FBcUIsRUFBRSxTQUFtQjtJQUNsRSxLQUFLLE1BQU0sUUFBUSxJQUFJLFNBQVMsRUFBRSxDQUFDO1FBQ2pDLElBQUksS0FBSyxDQUFDLFFBQVEsQ0FBQyxFQUFFLENBQUM7WUFDcEIsT0FBTyxLQUFLLENBQUMsUUFBUSxDQUFXLENBQUM7UUFDbkMsQ0FBQztJQUNILENBQUM7QUFDSCxDQUFDIn0=
+
+//#endregion
+export { JSONPApplication as default };

package/dist/app/extend/context.d.ts

@@ -1,15 +1,19 @@
-import { Context } from 'egg';
-export default class JSONPContext extends Context {
-    /**
-     * detect if response should be jsonp
-     */
-    get acceptJSONP(): boolean;
-    /**
-     * JSONP wrap body function
-     * Set jsonp response wrap function, other plugin can use it.
-     * If not necessary, please don't use this method in your application code.
-     * @param {Object} body response body
-     * @private
-     */
-    createJsonpBody(body: any): void;
+import { Context } from "egg";
+
+//#region src/app/extend/context.d.ts
+declare class JSONPContext extends Context {
+  /**
+  * detect if response should be jsonp
+  */
+  get acceptJSONP(): boolean;
+  /**
+  * JSONP wrap body function
+  * Set jsonp response wrap function, other plugin can use it.
+  * If not necessary, please don't use this method in your application code.
+  * @param {Object} body response body
+  * @private
+  */
+  createJsonpBody(body: any): void;
 }
+//#endregion
+export { JSONPContext as default };

package/dist/app/extend/context.js

@@ -1,32 +1,34 @@
-import { jsonp as jsonpBody } from 'jsonp-body';
-import { Context } from 'egg';
 import { JSONP_CONFIG } from "../../lib/private_key.js";
-export default class JSONPContext extends Context {
-    /**
-     * detect if response should be jsonp
-     */
-    get acceptJSONP() {
-        const jsonpConfig = this[JSONP_CONFIG];
-        return !!jsonpConfig?.jsonpFunction;
-    }
-    /**
-     * JSONP wrap body function
-     * Set jsonp response wrap function, other plugin can use it.
-     * If not necessary, please don't use this method in your application code.
-     * @param {Object} body response body
-     * @private
-     */
-    createJsonpBody(body) {
-        const jsonpConfig = this[JSONP_CONFIG];
-        if (!jsonpConfig?.jsonpFunction) {
-            this.body = body;
-            return;
-        }
-        this.set('x-content-type-options', 'nosniff');
-        this.type = 'js';
-        body = body === undefined ? null : body;
-        // protect from jsonp xss
-        this.body = jsonpBody(body, jsonpConfig.jsonpFunction, jsonpConfig.options);
-    }
-}
-//# sourceMappingURL=data:application/json;base64,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
+import { Context } from "egg";
+import { jsonp } from "jsonp-body";
+
+//#region src/app/extend/context.ts
+var JSONPContext = class extends Context {
+	/**
+	* detect if response should be jsonp
+	*/
+	get acceptJSONP() {
+		return !!this[JSONP_CONFIG]?.jsonpFunction;
+	}
+	/**
+	* JSONP wrap body function
+	* Set jsonp response wrap function, other plugin can use it.
+	* If not necessary, please don't use this method in your application code.
+	* @param {Object} body response body
+	* @private
+	*/
+	createJsonpBody(body) {
+		const jsonpConfig = this[JSONP_CONFIG];
+		if (!jsonpConfig?.jsonpFunction) {
+			this.body = body;
+			return;
+		}
+		this.set("x-content-type-options", "nosniff");
+		this.type = "js";
+		body = body === void 0 ? null : body;
+		this.body = jsonp(body, jsonpConfig.jsonpFunction, jsonpConfig.options);
+	}
+};
+
+//#endregion
+export { JSONPContext as default };

package/dist/config/config.default.d.ts

@@ -1,21 +1,24 @@
-import type { PartialEggConfig } from 'egg';
-export interface JSONPConfig {
-    /**
-     * jsonp callback methods key, default to `['_callback', 'callback' ]`
-     */
-    callback: string[] | string;
-    /**
-     * callback method name's max length, default to `50`
-     */
-    limit: number;
-    /**
-     * enable csrf check or not, default to `false`
-     */
-    csrf: boolean;
-    /**
-     * referrer white list, default to `undefined`
-     */
-    whiteList?: string | RegExp | (string | RegExp)[];
+import { PartialEggConfig } from "egg";
+
+//#region src/config/config.default.d.ts
+interface JSONPConfig {
+  /**
+  * jsonp callback methods key, default to `['_callback', 'callback' ]`
+  */
+  callback: string[] | string;
+  /**
+  * callback method name's max length, default to `50`
+  */
+  limit: number;
+  /**
+  * enable csrf check or not, default to `false`
+  */
+  csrf: boolean;
+  /**
+  * referrer white list, default to `undefined`
+  */
+  whiteList?: string | RegExp | (string | RegExp)[];
 }
-declare const _default: PartialEggConfig;
-export default _default;
+declare const config: PartialEggConfig;
+//#endregion
+export { JSONPConfig, config as default };

package/dist/config/config.default.js

@@ -1,9 +1,11 @@
-export default {
-    jsonp: {
-        limit: 50,
-        callback: ['_callback', 'callback'],
-        csrf: false,
-        whiteList: undefined,
-    },
-};
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiY29uZmlnLmRlZmF1bHQuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvY29uZmlnL2NvbmZpZy5kZWZhdWx0LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQXFCQSxlQUFlO0lBQ2IsS0FBSyxFQUFFO1FBQ0wsS0FBSyxFQUFFLEVBQUU7UUFDVCxRQUFRLEVBQUUsQ0FBQyxXQUFXLEVBQUUsVUFBVSxDQUFDO1FBQ25DLElBQUksRUFBRSxLQUFLO1FBQ1gsU0FBUyxFQUFFLFNBQVM7S0FDckI7Q0FDa0IsQ0FBQyJ9
+//#region src/config/config.default.ts
+const config = { jsonp: {
+	limit: 50,
+	callback: ["_callback", "callback"],
+	csrf: false,
+	whiteList: void 0
+} };
+var config_default_default = config;
+
+//#endregion
+export { config_default_default as default };

package/dist/error/JSONPForbiddenReferrerError.d.ts

@@ -1,5 +1,8 @@
-export declare class JSONPForbiddenReferrerError extends Error {
-    referrer: string;
-    status: number;
-    constructor(message: string, referrer: string, status: number);
+//#region src/error/JSONPForbiddenReferrerError.d.ts
+declare class JSONPForbiddenReferrerError extends Error {
+  referrer: string;
+  status: number;
+  constructor(message: string, referrer: string, status: number);
 }
+//#endregion
+export { JSONPForbiddenReferrerError };

package/dist/error/JSONPForbiddenReferrerError.js

@@ -1,12 +1,15 @@
-export class JSONPForbiddenReferrerError extends Error {
-    referrer;
-    status;
-    constructor(message, referrer, status) {
-        super(message);
-        this.name = this.constructor.name;
-        this.referrer = referrer;
-        this.status = status;
-        Error.captureStackTrace(this, this.constructor);
-    }
-}
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiSlNPTlBGb3JiaWRkZW5SZWZlcnJlckVycm9yLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vc3JjL2Vycm9yL0pTT05QRm9yYmlkZGVuUmVmZXJyZXJFcnJvci50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxNQUFNLE9BQU8sMkJBQTRCLFNBQVEsS0FBSztJQUNwRCxRQUFRLENBQVM7SUFDakIsTUFBTSxDQUFTO0lBRWYsWUFBWSxPQUFlLEVBQUUsUUFBZ0IsRUFBRSxNQUFjO1FBQzNELEtBQUssQ0FBQyxPQUFPLENBQUMsQ0FBQztRQUNmLElBQUksQ0FBQyxJQUFJLEdBQUcsSUFBSSxDQUFDLFdBQVcsQ0FBQyxJQUFJLENBQUM7UUFDbEMsSUFBSSxDQUFDLFFBQVEsR0FBRyxRQUFRLENBQUM7UUFDekIsSUFBSSxDQUFDLE1BQU0sR0FBRyxNQUFNLENBQUM7UUFDckIsS0FBSyxDQUFDLGlCQUFpQixDQUFDLElBQUksRUFBRSxJQUFJLENBQUMsV0FBVyxDQUFDLENBQUM7SUFDbEQsQ0FBQztDQUNGIn0=
+//#region src/error/JSONPForbiddenReferrerError.ts
+var JSONPForbiddenReferrerError = class extends Error {
+	referrer;
+	status;
+	constructor(message, referrer, status) {
+		super(message);
+		this.name = this.constructor.name;
+		this.referrer = referrer;
+		this.status = status;
+		Error.captureStackTrace(this, this.constructor);
+	}
+};
+
+//#endregion
+export { JSONPForbiddenReferrerError };

package/dist/index.d.ts

@@ -1,18 +1,22 @@
-import './types.ts';
-import { type EggPluginFactory } from 'egg';
+import "./types.js";
+import { EggPluginFactory } from "egg";
+
+//#region src/index.d.ts
+
 /**
- * JSONP plugin
- *
- * @since 4.1.0
- * Usage:
- * ```ts
- * // config/plugin.ts
- * import jsonpPlugin from '@eggjs/jsonp';
- *
- * export default {
- *   ...jsonpPlugin(),
- * };
- * ```
- */
+* JSONP plugin
+*
+* @since 4.1.0
+* Usage:
+* ```ts
+* // config/plugin.ts
+* import jsonpPlugin from '@eggjs/jsonp';
+*
+* export default {
+*   ...jsonpPlugin(),
+* };
+* ```
+*/
 declare const _default: EggPluginFactory;
-export default _default;
+//#endregion
+export { _default as default };

package/dist/index.js

@@ -1,23 +1,26 @@
-import "./types.js";
-import { definePluginFactory } from 'egg';
+import { definePluginFactory } from "egg";
+
+//#region src/index.ts
 /**
- * JSONP plugin
- *
- * @since 4.1.0
- * Usage:
- * ```ts
- * // config/plugin.ts
- * import jsonpPlugin from '@eggjs/jsonp';
- *
- * export default {
- *   ...jsonpPlugin(),
- * };
- * ```
- */
-export default definePluginFactory({
-    name: 'jsonp',
-    enable: true,
-    path: import.meta.dirname,
-    optionalDependencies: ['security'],
+* JSONP plugin
+*
+* @since 4.1.0
+* Usage:
+* ```ts
+* // config/plugin.ts
+* import jsonpPlugin from '@eggjs/jsonp';
+*
+* export default {
+*   ...jsonpPlugin(),
+* };
+* ```
+*/
+var src_default = definePluginFactory({
+	name: "jsonp",
+	enable: true,
+	path: import.meta.dirname,
+	optionalDependencies: ["security"]
 });
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi9zcmMvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsT0FBTyxZQUFZLENBQUM7QUFFcEIsT0FBTyxFQUFFLG1CQUFtQixFQUF5QixNQUFNLEtBQUssQ0FBQztBQUVqRTs7Ozs7Ozs7Ozs7OztHQWFHO0FBQ0gsZUFBZSxtQkFBbUIsQ0FBQztJQUNqQyxJQUFJLEVBQUUsT0FBTztJQUNiLE1BQU0sRUFBRSxJQUFJO0lBQ1osSUFBSSxFQUFFLE1BQU0sQ0FBQyxJQUFJLENBQUMsT0FBTztJQUN6QixvQkFBb0IsRUFBRSxDQUFDLFVBQVUsQ0FBQztDQUNuQyxDQUFxQixDQUFDIn0=
+
+//#endregion
+export { src_default as default };

package/dist/lib/private_key.d.ts

@@ -1 +1,4 @@
-export declare const JSONP_CONFIG: unique symbol;
+//#region src/lib/private_key.d.ts
+declare const JSONP_CONFIG: unique symbol;
+//#endregion
+export { JSONP_CONFIG };

package/dist/lib/private_key.js

@@ -1,2 +1,5 @@
-export const JSONP_CONFIG = Symbol('jsonp#config');
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicHJpdmF0ZV9rZXkuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvbGliL3ByaXZhdGVfa2V5LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBLE1BQU0sQ0FBQyxNQUFNLFlBQVksR0FBa0IsTUFBTSxDQUFDLGNBQWMsQ0FBQyxDQUFDIn0=
+//#region src/lib/private_key.ts
+const JSONP_CONFIG = Symbol("jsonp#config");
+
+//#endregion
+export { JSONP_CONFIG };

package/dist/types.d.ts

@@ -1,33 +1,35 @@
-import type { MiddlewareFunc } from 'egg';
-import type { JSONPConfig } from './config/config.default.ts';
-declare module 'egg' {
-    interface EggAppConfig {
-        /**
-         * jsonp options
-         * @member Config#jsonp
-         */
-        jsonp?: JSONPConfig;
-    }
-    interface Context {
-        /**
-         * detect if response should be jsonp
-         */
-        acceptJSONP: boolean;
-        /**
-         * JSONP wrap body function
-         * Set jsonp response wrap function, other plugin can use it.
-         * If not necessary, please don't use this method in your application code.
-         * @param {Object} body response body
-         * @private
-         */
-        createJsonpBody(body: any): void;
-    }
-    interface Application {
-        /**
-         * return a middleware to enable jsonp response.
-         * will do some security check inside.
-         * @public
-         */
-        jsonp(initOptions?: Partial<JSONPConfig>): MiddlewareFunc;
-    }
-}
+import { JSONPConfig } from "./config/config.default.js";
+import { MiddlewareFunc } from "egg";
+
+//#region src/types.d.ts
+declare module "egg" {
+  interface EggAppConfig {
+    /**
+    * jsonp options
+    * @member Config#jsonp
+    */
+    jsonp?: JSONPConfig;
+  }
+  interface Context {
+    /**
+    * detect if response should be jsonp
+    */
+    acceptJSONP: boolean;
+    /**
+    * JSONP wrap body function
+    * Set jsonp response wrap function, other plugin can use it.
+    * If not necessary, please don't use this method in your application code.
+    * @param {Object} body response body
+    * @private
+    */
+    createJsonpBody(body: any): void;
+  }
+  interface Application {
+    /**
+    * return a middleware to enable jsonp response.
+    * will do some security check inside.
+    * @public
+    */
+    jsonp(initOptions?: Partial<JSONPConfig>): MiddlewareFunc;
+  }
+}

package/dist/types.js

@@ -1,2 +1 @@
-export {};
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidHlwZXMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi9zcmMvdHlwZXMudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IiJ9
+export {  };

package/package.json

@@ -1,23 +1,6 @@
 {
   "name": "@eggjs/jsonp",
-  "version": "4.0.0-beta.34",
-  "publishConfig": {
-    "access": "public"
-  },
-  "type": "module",
-  "exports": {
-    ".": "./dist/index.js",
-    "./app/extend/application": "./dist/app/extend/application.js",
-    "./app/extend/context": "./dist/app/extend/context.js",
-    "./config/config.default": "./dist/config/config.default.js",
-    "./error/JSONPForbiddenReferrerError": "./dist/error/JSONPForbiddenReferrerError.js",
-    "./lib/private_key": "./dist/lib/private_key.js",
-    "./types": "./dist/types.js",
-    "./package.json": "./package.json"
-  },
-  "files": [
-    "dist"
-  ],
+  "version": "4.0.0-beta.36",
   "description": "jsonp support for egg",
   "keywords": [
     "egg",
@@ -25,43 +8,53 @@
     "jsonp",
     "security"
   ],
+  "homepage": "https://github.com/eggjs/egg/tree/next/plugins/jsonp",
+  "bugs": {
+    "url": "https://github.com/eggjs/egg/issues"
+  },
+  "license": "MIT",
+  "author": "dead-horse",
   "repository": {
     "type": "git",
-    "url": "git://github.com/eggjs/egg.git",
+    "url": "git+https://github.com/eggjs/egg.git",
     "directory": "plugins/jsonp"
   },
-  "bugs": {
-    "url": "https://github.com/eggjs/egg/issues"
+  "files": [
+    "dist"
+  ],
+  "type": "module",
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": "./dist/index.js",
+    "./app/extend/application": "./dist/app/extend/application.js",
+    "./app/extend/context": "./dist/app/extend/context.js",
+    "./config/config.default": "./dist/config/config.default.js",
+    "./error/JSONPForbiddenReferrerError": "./dist/error/JSONPForbiddenReferrerError.js",
+    "./lib/private_key": "./dist/lib/private_key.js",
+    "./types": "./dist/types.js",
+    "./package.json": "./package.json"
   },
-  "homepage": "https://github.com/eggjs/egg/tree/next/plugins/jsonp",
-  "author": "dead-horse",
-  "license": "MIT",
-  "engines": {
-    "node": ">=22.18.0"
+  "publishConfig": {
+    "access": "public"
   },
   "dependencies": {
     "jsonp-body": "^2.0.0"
   },
-  "peerDependencies": {
-    "egg": "4.1.0-beta.34"
-  },
   "devDependencies": {
-    "@types/node": "^24.9.1",
-    "tsdown": "0.15.11",
+    "@types/node": "^24.10.2",
     "typescript": "^5.9.3",
-    "vitest": "4.0.5",
-    "@eggjs/mock": "7.0.0-beta.34",
-    "@eggjs/tsconfig": "3.1.0-beta.34",
-    "egg": "4.1.0-beta.34"
+    "egg": "4.1.0-beta.36",
+    "@eggjs/mock": "7.0.0-beta.36"
+  },
+  "peerDependencies": {
+    "egg": "4.1.0-beta.36"
+  },
+  "engines": {
+    "node": ">=22.18.0"
   },
-  "main": "./dist/index.js",
-  "module": "./dist/index.js",
-  "types": "./dist/index.d.ts",
   "scripts": {
-    "build": "tsdown && rimraf dist *.tsbuildinfo && tsc -p tsconfig.build.json",
-    "typecheck": "tsc --noEmit",
-    "lint": "oxlint --type-aware",
-    "lint:fix": "npm run lint -- --fix",
-    "test": "npm run lint:fix && vitest run"
+    "typecheck": "tsgo --noEmit"
   }
 }