@lytjs/middleware-cors 6.6.0

package/README.md

@@ -0,0 +1,129 @@
+# @lytjs/middleware-cors
+
+> LytJS CORS 中间件。
+
+[![npm version](https://img.shields.io/npm/v/@lytjs/middleware-cors.svg)](https://www.npmjs.com/package/@lytjs/middleware-cors)
+[![license](https://img.shields.io/npm/l/@lytjs/middleware-cors.svg)](https://gitee.com/lytjs/lytjs/blob/main/LICENSE)
+
+## 简介
+
+`@lytjs/middleware-cors` 是 LytJS 框架的 CORS 中间件，用于处理跨域资源共享。
+
+### 核心特性
+
+- **灵活的源配置**：支持字符串、数组、正则表达式
+- **自动预检处理**：自动响应 OPTIONS 预检请求
+- **自定义头部**：可自定义允许和暴露的头部
+- **凭证支持**：支持携带凭证的跨域请求
+- **零依赖**：不引入任何外部依赖
+
+## 安装
+
+```bash
+npm install @lytjs/middleware-cors
+```
+
+或使用 pnpm：
+
+```bash
+pnpm add @lytjs/middleware-cors
+```
+
+## 快速开始
+
+### 基本用法
+
+```typescript
+import { createMiddlewareChain } from '@lytjs/middleware';
+import { createCorsMiddleware } from '@lytjs/middleware-cors';
+
+const chain = createMiddlewareChain();
+
+// 允许所有源
+chain.use(createCorsMiddleware());
+
+// 或者只允许特定源
+chain.use(
+  createCorsMiddleware({
+    origin: 'https://example.com',
+  }),
+);
+```
+
+### 配置 CORS
+
+```typescript
+import { createCorsMiddleware } from '@lytjs/middleware-cors';
+
+// 允许多个源
+const cors = createCorsMiddleware({
+  origin: ['https://example.com', 'https://app.example.com'],
+  methods: ['GET', 'POST', 'PUT', 'DELETE'],
+  allowedHeaders: ['Content-Type', 'Authorization'],
+  exposedHeaders: ['X-Custom-Header'],
+  credentials: true,
+  maxAge: 86400, // 24 hours
+});
+```
+
+### 使用正则表达式
+
+```typescript
+const cors = createCorsMiddleware({
+  origin: /\.example\.com$/,
+  credentials: true,
+});
+```
+
+### 使用函数自定义
+
+```typescript
+const cors = createCorsMiddleware({
+  origin: (requestOrigin) => {
+    const allowedOrigins = ['https://a.com', 'https://b.com'];
+    if (requestOrigin && allowedOrigins.includes(requestOrigin)) {
+      return requestOrigin;
+    }
+    return false;
+  },
+});
+```
+
+## 主要 API
+
+### `createCorsMiddleware(options)`
+
+创建 CORS 中间件。
+
+```typescript
+import { createCorsMiddleware } from '@lytjs/middleware-cors';
+
+const cors = createCorsMiddleware({
+  origin: '*',
+  methods: ['GET', 'POST'],
+  credentials: false,
+  maxAge: 86400,
+});
+```
+
+#### 选项说明
+
+| 选项             | 类型                                                                                     | 默认值                                                              | 说明                   |
+| ---------------- | ---------------------------------------------------------------------------------------- | ------------------------------------------------------------------- | ---------------------- |
+| `origin`         | string \| string[] \| RegExp \| boolean \| (origin: string \| null) => boolean \| string | `'*'`                                                               | 允许的来源             |
+| `methods`        | string \| string[]                                                                       | `['GET', 'HEAD', 'PUT', 'PATCH', 'POST', 'DELETE']`                 | 允许的 HTTP 方法       |
+| `allowedHeaders` | string \| string[]                                                                       | `['Accept', 'Accept-Language', 'Content-Language', 'Content-Type']` | 允许的请求头部         |
+| `exposedHeaders` | string \| string[]                                                                       |                                                                     | 暴露的响应头部         |
+| `credentials`    | boolean                                                                                  | `false`                                                             | 是否允许携带凭证       |
+| `maxAge`         | number                                                                                   |                                                                     | 预检请求缓存时间（秒） |
+
+## 许可证
+
+MIT License - [查看许可证](https://gitee.com/lytjs/lytjs/blob/main/LICENSE)
+
+## 贡献指南
+
+欢迎提交 Issue 和 Pull Request！
+
+- [Gitee 仓库](https://gitee.com/lytjs/lytjs)
+- [问题反馈](https://gitee.com/lytjs/lytjs/issues)

package/dist/index.cjs

@@ -0,0 +1,64 @@
+'use strict';
+
+// src/cors.ts
+var DEFAULT_CONFIG = {
+  origin: "*",
+  methods: ["GET", "HEAD", "PUT", "PATCH", "POST", "DELETE"],
+  allowedHeaders: ["Content-Type", "Authorization"],
+  exposedHeaders: [],
+  credentials: false,
+  maxAge: 86400,
+  preflightStatus: 204
+};
+function createCorsMiddleware(config = {}) {
+  const finalConfig = { ...DEFAULT_CONFIG, ...config };
+  return async (request, ctx, next) => {
+    const origin = request.headers.get("Origin");
+    const isPreflight = request.method === "OPTIONS" && request.headers.has("Access-Control-Request-Method");
+    const headers = new Headers();
+    let allowOrigin = finalConfig.origin;
+    if (allowOrigin === true && origin) {
+      allowOrigin = origin;
+    } else if (Array.isArray(allowOrigin) && origin) {
+      allowOrigin = allowOrigin.includes(origin) ? origin : "";
+    }
+    if (typeof allowOrigin === "string") {
+      headers.set("Access-Control-Allow-Origin", allowOrigin);
+    }
+    if (finalConfig.methods) {
+      headers.set("Access-Control-Allow-Methods", finalConfig.methods.join(","));
+    }
+    if (finalConfig.allowedHeaders) {
+      headers.set("Access-Control-Allow-Headers", finalConfig.allowedHeaders.join(","));
+    }
+    if (finalConfig.exposedHeaders && finalConfig.exposedHeaders.length > 0) {
+      headers.set("Access-Control-Expose-Headers", finalConfig.exposedHeaders.join(","));
+    }
+    if (finalConfig.credentials) {
+      headers.set("Access-Control-Allow-Credentials", "true");
+    }
+    if (finalConfig.maxAge) {
+      headers.set("Access-Control-Max-Age", String(finalConfig.maxAge));
+    }
+    if (isPreflight) {
+      return new Response(null, {
+        status: finalConfig.preflightStatus,
+        headers
+      });
+    }
+    await next();
+    if (ctx.response) {
+      const newResponse = new Response(ctx.response.body, ctx.response);
+      headers.forEach((value, key) => {
+        newResponse.headers.set(key, value);
+      });
+      return newResponse;
+    }
+  };
+}
+var corsMiddleware = createCorsMiddleware();
+
+exports.corsMiddleware = corsMiddleware;
+exports.createCorsMiddleware = createCorsMiddleware;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cors.ts"],"names":[],"mappings":";;;AAOA,IAAM,cAAA,GAA6B;AAAA,EACjC,MAAA,EAAQ,GAAA;AAAA,EACR,SAAS,CAAC,KAAA,EAAO,QAAQ,KAAA,EAAO,OAAA,EAAS,QAAQ,QAAQ,CAAA;AAAA,EACzD,cAAA,EAAgB,CAAC,cAAA,EAAgB,eAAe,CAAA;AAAA,EAChD,gBAAgB,EAAC;AAAA,EACjB,WAAA,EAAa,KAAA;AAAA,EACb,MAAA,EAAQ,KAAA;AAAA,EACR,eAAA,EAAiB;AACnB,CAAA;AAKO,SAAS,oBAAA,CAAqB,MAAA,GAAqB,EAAC,EAAe;AACxE,EAAA,MAAM,WAAA,GAAc,EAAE,GAAG,cAAA,EAAgB,GAAG,MAAA,EAAO;AAEnD,EAAA,OAAO,OACL,OAAA,EACA,GAAA,EACA,IAAA,KACyC;AACzC,IAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,QAAQ,CAAA;AAC3C,IAAA,MAAM,cACJ,OAAA,CAAQ,MAAA,KAAW,aAAa,OAAA,CAAQ,OAAA,CAAQ,IAAI,+BAA+B,CAAA;AAGrF,IAAA,MAAM,OAAA,GAAU,IAAI,OAAA,EAAQ;AAG5B,IAAA,IAAI,cAAc,WAAA,CAAY,MAAA;AAC9B,IAAA,IAAI,WAAA,KAAgB,QAAQ,MAAA,EAAQ;AAClC,MAAA,WAAA,GAAc,MAAA;AAAA,IAChB,CAAA,MAAA,IAAW,KAAA,CAAM,OAAA,CAAQ,WAAW,KAAK,MAAA,EAAQ;AAC/C,MAAA,WAAA,GAAc,WAAA,CAAY,QAAA,CAAS,MAAM,CAAA,GAAI,MAAA,GAAS,EAAA;AAAA,IACxD;AACA,IAAA,IAAI,OAAO,gBAAgB,QAAA,EAAU;AACnC,MAAA,OAAA,CAAQ,GAAA,CAAI,+BAA+B,WAAW,CAAA;AAAA,IACxD;AAGA,IAAA,IAAI,YAAY,OAAA,EAAS;AACvB,MAAA,OAAA,CAAQ,IAAI,8BAAA,EAAgC,WAAA,CAAY,OAAA,CAAQ,IAAA,CAAK,GAAG,CAAC,CAAA;AAAA,IAC3E;AAGA,IAAA,IAAI,YAAY,cAAA,EAAgB;AAC9B,MAAA,OAAA,CAAQ,IAAI,8BAAA,EAAgC,WAAA,CAAY,cAAA,CAAe,IAAA,CAAK,GAAG,CAAC,CAAA;AAAA,IAClF;AAGA,IAAA,IAAI,WAAA,CAAY,cAAA,IAAkB,WAAA,CAAY,cAAA,CAAe,SAAS,CAAA,EAAG;AACvE,MAAA,OAAA,CAAQ,IAAI,+BAAA,EAAiC,WAAA,CAAY,cAAA,CAAe,IAAA,CAAK,GAAG,CAAC,CAAA;AAAA,IACnF;AAGA,IAAA,IAAI,YAAY,WAAA,EAAa;AAC3B,MAAA,OAAA,CAAQ,GAAA,CAAI,oCAAoC,MAAM,CAAA;AAAA,IACxD;AAGA,IAAA,IAAI,YAAY,MAAA,EAAQ;AACtB,MAAA,OAAA,CAAQ,GAAA,CAAI,wBAAA,EAA0B,MAAA,CAAO,WAAA,CAAY,MAAM,CAAC,CAAA;AAAA,IAClE;AAGA,IAAA,IAAI,WAAA,EAAa;AACf,MAAA,OAAO,IAAI,SAAS,IAAA,EAAM;AAAA,QACxB,QAAQ,WAAA,CAAY,eAAA;AAAA,QACpB;AAAA,OACD,CAAA;AAAA,IACH;AAGA,IAAA,MAAM,IAAA,EAAK;AACX,IAAA,IAAI,IAAI,QAAA,EAAU;AAChB,MAAA,MAAM,cAAc,IAAI,QAAA,CAAS,IAAI,QAAA,CAAS,IAAA,EAAM,IAAI,QAAQ,CAAA;AAChE,MAAA,OAAA,CAAQ,OAAA,CAAQ,CAAC,KAAA,EAAO,GAAA,KAAQ;AAC9B,QAAA,WAAA,CAAY,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AAAA,MACpC,CAAC,CAAA;AACD,MAAA,OAAO,WAAA;AAAA,IACT;AAAA,EACF,CAAA;AACF;AAKO,IAAM,iBAAiB,oBAAA","file":"index.cjs","sourcesContent":["/**\n * CORS 中间件实现\n */\n\nimport type { Middleware, MiddlewareContext } from '@lytjs/middleware';\nimport { CorsConfig } from './types';\n\nconst DEFAULT_CONFIG: CorsConfig = {\n  origin: '*',\n  methods: ['GET', 'HEAD', 'PUT', 'PATCH', 'POST', 'DELETE'],\n  allowedHeaders: ['Content-Type', 'Authorization'],\n  exposedHeaders: [],\n  credentials: false,\n  maxAge: 86400,\n  preflightStatus: 204,\n};\n\n/**\n * 创建 CORS 中间件\n */\nexport function createCorsMiddleware(config: CorsConfig = {}): Middleware {\n  const finalConfig = { ...DEFAULT_CONFIG, ...config };\n\n  return async (\n    request: Request,\n    ctx: MiddlewareContext,\n    next: () => Promise<void>,\n  ): Promise<Response | void | undefined> => {\n    const origin = request.headers.get('Origin');\n    const isPreflight =\n      request.method === 'OPTIONS' && request.headers.has('Access-Control-Request-Method');\n\n    // 设置 CORS 响应头\n    const headers = new Headers();\n\n    // 处理 Origin\n    let allowOrigin = finalConfig.origin;\n    if (allowOrigin === true && origin) {\n      allowOrigin = origin;\n    } else if (Array.isArray(allowOrigin) && origin) {\n      allowOrigin = allowOrigin.includes(origin) ? origin : '';\n    }\n    if (typeof allowOrigin === 'string') {\n      headers.set('Access-Control-Allow-Origin', allowOrigin);\n    }\n\n    // 处理 Methods\n    if (finalConfig.methods) {\n      headers.set('Access-Control-Allow-Methods', finalConfig.methods.join(','));\n    }\n\n    // 处理 Allowed Headers\n    if (finalConfig.allowedHeaders) {\n      headers.set('Access-Control-Allow-Headers', finalConfig.allowedHeaders.join(','));\n    }\n\n    // 处理 Exposed Headers\n    if (finalConfig.exposedHeaders && finalConfig.exposedHeaders.length > 0) {\n      headers.set('Access-Control-Expose-Headers', finalConfig.exposedHeaders.join(','));\n    }\n\n    // 处理 Credentials\n    if (finalConfig.credentials) {\n      headers.set('Access-Control-Allow-Credentials', 'true');\n    }\n\n    // 处理 Max Age\n    if (finalConfig.maxAge) {\n      headers.set('Access-Control-Max-Age', String(finalConfig.maxAge));\n    }\n\n    // 预检请求处理\n    if (isPreflight) {\n      return new Response(null, {\n        status: finalConfig.preflightStatus,\n        headers,\n      });\n    }\n\n    // 在响应上设置头部\n    await next();\n    if (ctx.response) {\n      const newResponse = new Response(ctx.response.body, ctx.response);\n      headers.forEach((value, key) => {\n        newResponse.headers.set(key, value);\n      });\n      return newResponse;\n    }\n  };\n}\n\n/**\n * 默认 CORS 中间件\n */\nexport const corsMiddleware = createCorsMiddleware();\n"]}

package/dist/index.js

@@ -0,0 +1,61 @@
+// src/cors.ts
+var DEFAULT_CONFIG = {
+  origin: "*",
+  methods: ["GET", "HEAD", "PUT", "PATCH", "POST", "DELETE"],
+  allowedHeaders: ["Content-Type", "Authorization"],
+  exposedHeaders: [],
+  credentials: false,
+  maxAge: 86400,
+  preflightStatus: 204
+};
+function createCorsMiddleware(config = {}) {
+  const finalConfig = { ...DEFAULT_CONFIG, ...config };
+  return async (request, ctx, next) => {
+    const origin = request.headers.get("Origin");
+    const isPreflight = request.method === "OPTIONS" && request.headers.has("Access-Control-Request-Method");
+    const headers = new Headers();
+    let allowOrigin = finalConfig.origin;
+    if (allowOrigin === true && origin) {
+      allowOrigin = origin;
+    } else if (Array.isArray(allowOrigin) && origin) {
+      allowOrigin = allowOrigin.includes(origin) ? origin : "";
+    }
+    if (typeof allowOrigin === "string") {
+      headers.set("Access-Control-Allow-Origin", allowOrigin);
+    }
+    if (finalConfig.methods) {
+      headers.set("Access-Control-Allow-Methods", finalConfig.methods.join(","));
+    }
+    if (finalConfig.allowedHeaders) {
+      headers.set("Access-Control-Allow-Headers", finalConfig.allowedHeaders.join(","));
+    }
+    if (finalConfig.exposedHeaders && finalConfig.exposedHeaders.length > 0) {
+      headers.set("Access-Control-Expose-Headers", finalConfig.exposedHeaders.join(","));
+    }
+    if (finalConfig.credentials) {
+      headers.set("Access-Control-Allow-Credentials", "true");
+    }
+    if (finalConfig.maxAge) {
+      headers.set("Access-Control-Max-Age", String(finalConfig.maxAge));
+    }
+    if (isPreflight) {
+      return new Response(null, {
+        status: finalConfig.preflightStatus,
+        headers
+      });
+    }
+    await next();
+    if (ctx.response) {
+      const newResponse = new Response(ctx.response.body, ctx.response);
+      headers.forEach((value, key) => {
+        newResponse.headers.set(key, value);
+      });
+      return newResponse;
+    }
+  };
+}
+var corsMiddleware = createCorsMiddleware();
+
+export { corsMiddleware, createCorsMiddleware };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cors.ts"],"names":[],"mappings":";AAOA,IAAM,cAAA,GAA6B;AAAA,EACjC,MAAA,EAAQ,GAAA;AAAA,EACR,SAAS,CAAC,KAAA,EAAO,QAAQ,KAAA,EAAO,OAAA,EAAS,QAAQ,QAAQ,CAAA;AAAA,EACzD,cAAA,EAAgB,CAAC,cAAA,EAAgB,eAAe,CAAA;AAAA,EAChD,gBAAgB,EAAC;AAAA,EACjB,WAAA,EAAa,KAAA;AAAA,EACb,MAAA,EAAQ,KAAA;AAAA,EACR,eAAA,EAAiB;AACnB,CAAA;AAKO,SAAS,oBAAA,CAAqB,MAAA,GAAqB,EAAC,EAAe;AACxE,EAAA,MAAM,WAAA,GAAc,EAAE,GAAG,cAAA,EAAgB,GAAG,MAAA,EAAO;AAEnD,EAAA,OAAO,OACL,OAAA,EACA,GAAA,EACA,IAAA,KACyC;AACzC,IAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,QAAQ,CAAA;AAC3C,IAAA,MAAM,cACJ,OAAA,CAAQ,MAAA,KAAW,aAAa,OAAA,CAAQ,OAAA,CAAQ,IAAI,+BAA+B,CAAA;AAGrF,IAAA,MAAM,OAAA,GAAU,IAAI,OAAA,EAAQ;AAG5B,IAAA,IAAI,cAAc,WAAA,CAAY,MAAA;AAC9B,IAAA,IAAI,WAAA,KAAgB,QAAQ,MAAA,EAAQ;AAClC,MAAA,WAAA,GAAc,MAAA;AAAA,IAChB,CAAA,MAAA,IAAW,KAAA,CAAM,OAAA,CAAQ,WAAW,KAAK,MAAA,EAAQ;AAC/C,MAAA,WAAA,GAAc,WAAA,CAAY,QAAA,CAAS,MAAM,CAAA,GAAI,MAAA,GAAS,EAAA;AAAA,IACxD;AACA,IAAA,IAAI,OAAO,gBAAgB,QAAA,EAAU;AACnC,MAAA,OAAA,CAAQ,GAAA,CAAI,+BAA+B,WAAW,CAAA;AAAA,IACxD;AAGA,IAAA,IAAI,YAAY,OAAA,EAAS;AACvB,MAAA,OAAA,CAAQ,IAAI,8BAAA,EAAgC,WAAA,CAAY,OAAA,CAAQ,IAAA,CAAK,GAAG,CAAC,CAAA;AAAA,IAC3E;AAGA,IAAA,IAAI,YAAY,cAAA,EAAgB;AAC9B,MAAA,OAAA,CAAQ,IAAI,8BAAA,EAAgC,WAAA,CAAY,cAAA,CAAe,IAAA,CAAK,GAAG,CAAC,CAAA;AAAA,IAClF;AAGA,IAAA,IAAI,WAAA,CAAY,cAAA,IAAkB,WAAA,CAAY,cAAA,CAAe,SAAS,CAAA,EAAG;AACvE,MAAA,OAAA,CAAQ,IAAI,+BAAA,EAAiC,WAAA,CAAY,cAAA,CAAe,IAAA,CAAK,GAAG,CAAC,CAAA;AAAA,IACnF;AAGA,IAAA,IAAI,YAAY,WAAA,EAAa;AAC3B,MAAA,OAAA,CAAQ,GAAA,CAAI,oCAAoC,MAAM,CAAA;AAAA,IACxD;AAGA,IAAA,IAAI,YAAY,MAAA,EAAQ;AACtB,MAAA,OAAA,CAAQ,GAAA,CAAI,wBAAA,EAA0B,MAAA,CAAO,WAAA,CAAY,MAAM,CAAC,CAAA;AAAA,IAClE;AAGA,IAAA,IAAI,WAAA,EAAa;AACf,MAAA,OAAO,IAAI,SAAS,IAAA,EAAM;AAAA,QACxB,QAAQ,WAAA,CAAY,eAAA;AAAA,QACpB;AAAA,OACD,CAAA;AAAA,IACH;AAGA,IAAA,MAAM,IAAA,EAAK;AACX,IAAA,IAAI,IAAI,QAAA,EAAU;AAChB,MAAA,MAAM,cAAc,IAAI,QAAA,CAAS,IAAI,QAAA,CAAS,IAAA,EAAM,IAAI,QAAQ,CAAA;AAChE,MAAA,OAAA,CAAQ,OAAA,CAAQ,CAAC,KAAA,EAAO,GAAA,KAAQ;AAC9B,QAAA,WAAA,CAAY,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AAAA,MACpC,CAAC,CAAA;AACD,MAAA,OAAO,WAAA;AAAA,IACT;AAAA,EACF,CAAA;AACF;AAKO,IAAM,iBAAiB,oBAAA","file":"index.js","sourcesContent":["/**\n * CORS 中间件实现\n */\n\nimport type { Middleware, MiddlewareContext } from '@lytjs/middleware';\nimport { CorsConfig } from './types';\n\nconst DEFAULT_CONFIG: CorsConfig = {\n  origin: '*',\n  methods: ['GET', 'HEAD', 'PUT', 'PATCH', 'POST', 'DELETE'],\n  allowedHeaders: ['Content-Type', 'Authorization'],\n  exposedHeaders: [],\n  credentials: false,\n  maxAge: 86400,\n  preflightStatus: 204,\n};\n\n/**\n * 创建 CORS 中间件\n */\nexport function createCorsMiddleware(config: CorsConfig = {}): Middleware {\n  const finalConfig = { ...DEFAULT_CONFIG, ...config };\n\n  return async (\n    request: Request,\n    ctx: MiddlewareContext,\n    next: () => Promise<void>,\n  ): Promise<Response | void | undefined> => {\n    const origin = request.headers.get('Origin');\n    const isPreflight =\n      request.method === 'OPTIONS' && request.headers.has('Access-Control-Request-Method');\n\n    // 设置 CORS 响应头\n    const headers = new Headers();\n\n    // 处理 Origin\n    let allowOrigin = finalConfig.origin;\n    if (allowOrigin === true && origin) {\n      allowOrigin = origin;\n    } else if (Array.isArray(allowOrigin) && origin) {\n      allowOrigin = allowOrigin.includes(origin) ? origin : '';\n    }\n    if (typeof allowOrigin === 'string') {\n      headers.set('Access-Control-Allow-Origin', allowOrigin);\n    }\n\n    // 处理 Methods\n    if (finalConfig.methods) {\n      headers.set('Access-Control-Allow-Methods', finalConfig.methods.join(','));\n    }\n\n    // 处理 Allowed Headers\n    if (finalConfig.allowedHeaders) {\n      headers.set('Access-Control-Allow-Headers', finalConfig.allowedHeaders.join(','));\n    }\n\n    // 处理 Exposed Headers\n    if (finalConfig.exposedHeaders && finalConfig.exposedHeaders.length > 0) {\n      headers.set('Access-Control-Expose-Headers', finalConfig.exposedHeaders.join(','));\n    }\n\n    // 处理 Credentials\n    if (finalConfig.credentials) {\n      headers.set('Access-Control-Allow-Credentials', 'true');\n    }\n\n    // 处理 Max Age\n    if (finalConfig.maxAge) {\n      headers.set('Access-Control-Max-Age', String(finalConfig.maxAge));\n    }\n\n    // 预检请求处理\n    if (isPreflight) {\n      return new Response(null, {\n        status: finalConfig.preflightStatus,\n        headers,\n      });\n    }\n\n    // 在响应上设置头部\n    await next();\n    if (ctx.response) {\n      const newResponse = new Response(ctx.response.body, ctx.response);\n      headers.forEach((value, key) => {\n        newResponse.headers.set(key, value);\n      });\n      return newResponse;\n    }\n  };\n}\n\n/**\n * 默认 CORS 中间件\n */\nexport const corsMiddleware = createCorsMiddleware();\n"]}

package/package.json

@@ -0,0 +1,65 @@
+{
+  "name": "@lytjs/middleware-cors",
+  "version": "6.6.0",
+  "description": "LytJS CORS Middleware - Cross-Origin Resource Sharing middleware",
+  "author": "lytjs",
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.cjs"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "sideEffects": false,
+  "scripts": {
+    "dev": "tsup --watch",
+    "build": "tsup",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage",
+    "type-check": "tsc --noEmit",
+    "clean": "rm -rf dist node_modules .turbo"
+  },
+  "dependencies": {
+    "@lytjs/middleware": "workspace:*",
+    "@lytjs/common-constants": "workspace:*"
+  },
+  "devDependencies": {
+    "@types/node": "^22.13.10",
+    "@vitest/coverage-v8": "^3.0.7",
+    "tsup": "^8.4.0",
+    "typescript": "^5.8.2",
+    "vitest": "^3.0.7"
+  },
+  "peerDependencies": {},
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://gitee.com/lytjs/lytjs.git",
+    "directory": "packages/ecosystem/packages/web-framework/packages/middleware-cors"
+  },
+  "keywords": [
+    "lytjs",
+    "middleware",
+    "cors",
+    "cross-origin"
+  ],
+  "homepage": "https://gitee.com/lytjs/lytjs/tree/develop/packages/ecosystem/packages/web-framework/packages/middleware-cors#readme",
+  "bugs": {
+    "url": "https://gitee.com/lytjs/lytjs/issues"
+  }
+}