@hvedinich/utils 0.0.70 → 0.0.71

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hvedinich/utils",
-  "version": "0.0.70",
+  "version": "0.0.71",
   "description": "utils module",
   "main": "index.js",
   "scripts": {
@@ -20,6 +20,7 @@
     "apollo-server-express": "2.17.0",
     "axios": "^0.27.2",
     "express": "4.17.1",
+    "cors": "2.8.5",
     "graphql-playground-middleware-express": "1.7.20",
     "jsonwebtoken": "8.5.1",
     "pino": "^9.5.0"

package/src/server/index.js

@@ -2,6 +2,7 @@ const express = require('express');
 const expressPlayground = require('graphql-playground-middleware-express').default;
 const axios = require('axios');
 const { ApolloServer, ApolloError } = require('apollo-server-express');
+const cors = require('cors');
 const {
   guestCtx,
   token: { EXPIRED, UNAUTHORIZED },
@@ -48,11 +49,24 @@ const defaultContext = async ({ req }) => {
 };
 
 class Server {
-  constructor({ config, healthCheck, context }) {
+  constructor({ config, healthCheck, context, originDomains }) {
     this.config = config;
+    this.originDomains = originDomains;
     this.app = express();
     this.router = null;
     this.app.get('/_status', healthCheck || defaultCHealthCheck);
+    if (this.originDomains?.length) {
+      this.app.use((req, res, next) => {
+        const authHeader = req.headers['access-control-request-headers'];
+        const wantsCredentials = authHeader ? authHeader.includes('x-with-credentials') : false;
+        const corsOptions = {
+          origin: wantsCredentials ? this.originDomains : '*',
+          credentials: wantsCredentials,
+        };
+
+        cors(corsOptions)(req, res, next);
+      });
+    }
     this.app.use((req, res, next) => {
       req.ctx = context({ req, res });
       next();
@@ -102,7 +116,7 @@ class Server {
     const server = new ApolloServer(serverOptions);
 
     const bodyParserConfig = this.jsonLimit ? { limit: this.jsonLimit } : true;
-    server.applyMiddleware({ app: this.app, path: '/graphql', bodyParserConfig });
+    server.applyMiddleware({ app: this.app, path: '/graphql', bodyParserConfig, cors: !this.originDomains?.length });
 
     if (this.config.playground) {
       this.app.get('/playground', expressPlayground({ endpoint: '/graphql', subscriptionEndpoint: '/subscriptions' }));