@jaypie/express 1.1.0 → 1.1.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jaypie/express",
-  "version": "1.1.0",
+  "version": "1.1.1",
   "license": "MIT",
   "author": "Finlayson Studio",
   "type": "module",
@@ -22,6 +22,7 @@
     "prepublish": "npm run build",
     "test": "vitest run .",
     "test:spec:constants": "vitest run ./src/__tests__/constants.spec.js",
+    "test:spec:cors.helper": "vitest run ./src/__tests__/cors.helper.spec.js",
     "test:spec:decorateResponse.helper": "vitest run ./src/__tests__/decorateResponse.helper.spec.js",
     "test:spec:echo.handler": "vitest run ./src/__tests__/echo.handler.spec.js",
     "test:spec:expressHandler": "vitest run ./src/__tests__/expressHandler.spec.js",
@@ -35,10 +36,12 @@
   },
   "dependencies": {
     "@codegenie/serverless-express": "^4.15.0",
-    "@jaypie/core": "^1.1.0"
+    "@jaypie/core": "^1.1.0",
+    "@jaypie/errors": "^1.1.2",
+    "cors": "^2.8.5"
   },
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "26b6847fa8b061594bd899c2e098822dad198e51"
+  "gitHead": "878517b1552208902adeef5f6658c0a5c580c3fc"
 }

package/src/cors.helper.js

@@ -0,0 +1,86 @@
+import { CorsError } from "@jaypie/errors";
+import expressCors from "cors";
+
+//
+//
+// Constants
+//
+
+const DEFAULT_HEADERS = ["Authorization", "X-Session-Id"];
+const DEFAULT_METHODS = ["DELETE", "HEAD", "GET", "POST", "PUT"];
+const HTTP_PROTOCOL = "http://";
+const HTTPS_PROTOCOL = "https://";
+const SANDBOX_ENV = "sandbox";
+
+//
+//
+// Helper Functions
+//
+
+const ensureProtocol = (url) => {
+  if (!url) return url;
+  if (url.startsWith(HTTP_PROTOCOL) || url.startsWith(HTTPS_PROTOCOL))
+    return url;
+  return HTTPS_PROTOCOL + url;
+};
+
+//
+//
+// Main
+//
+
+const corsHelper = (config = {}) => {
+  const { origins, methods, headers, overrides = {} } = config;
+
+  const options = {
+    origin(origin, callback) {
+      // Handle wildcard origin
+      if (origins === "*") {
+        callback(null, true);
+        return;
+      }
+
+      // Allow requests with no origin (like mobile apps, curl, etc)
+      if (!origin) {
+        callback(null, true);
+        return;
+      }
+
+      const allowedOrigins = origins || [
+        ensureProtocol(process.env.BASE_URL),
+        ensureProtocol(process.env.PROJECT_BASE_URL),
+      ];
+
+      // Add localhost origins in sandbox
+      if (!origins && process.env.PROJECT_ENV === SANDBOX_ENV) {
+        allowedOrigins.push("http://localhost");
+        allowedOrigins.push(/^http:\/\/localhost:\d+$/);
+      }
+
+      const isAllowed = allowedOrigins.some((allowed) => {
+        if (allowed instanceof RegExp) {
+          return allowed.test(origin);
+        }
+        return origin.includes(allowed);
+      });
+
+      if (isAllowed) {
+        callback(null, true);
+      } else {
+        callback(new CorsError());
+      }
+    },
+    methods: [...DEFAULT_METHODS, ...(methods || [])],
+    allowedHeaders: [...DEFAULT_HEADERS, ...(headers || [])],
+    ...overrides,
+  };
+
+  return expressCors(options);
+};
+
+//
+//
+// Export
+//
+
+export default corsHelper;