@middy/http-cors 4.6.5 → 5.0.0-alpha.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/index.js +143 -110
- package/package.json +5 -11
- package/index.cjs +0 -125
package/index.js
CHANGED
|
@@ -1,115 +1,148 @@
|
|
|
1
|
-
import { normalizeHttpResponse } from '@middy/util'
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
return options.origins[0];
|
|
8
|
-
}
|
|
1
|
+
import { normalizeHttpResponse } from '@middy/util'
|
|
2
|
+
|
|
3
|
+
const getOrigin = (incomingOrigin, options = {}) => {
|
|
4
|
+
if (options.origins.length > 0) {
|
|
5
|
+
if (incomingOrigin && options.origins.includes(incomingOrigin)) {
|
|
6
|
+
return incomingOrigin
|
|
9
7
|
} else {
|
|
10
|
-
|
|
11
|
-
return incomingOrigin;
|
|
12
|
-
}
|
|
13
|
-
return options.origin;
|
|
14
|
-
}
|
|
15
|
-
};
|
|
16
|
-
const defaults = {
|
|
17
|
-
disableBeforePreflightResponse: true,
|
|
18
|
-
getOrigin,
|
|
19
|
-
credentials: undefined,
|
|
20
|
-
headers: undefined,
|
|
21
|
-
methods: undefined,
|
|
22
|
-
origin: '*',
|
|
23
|
-
origins: [],
|
|
24
|
-
exposeHeaders: undefined,
|
|
25
|
-
maxAge: undefined,
|
|
26
|
-
requestHeaders: undefined,
|
|
27
|
-
requestMethods: undefined,
|
|
28
|
-
cacheControl: undefined,
|
|
29
|
-
vary: undefined
|
|
30
|
-
};
|
|
31
|
-
const httpCorsMiddleware = (opts = {})=>{
|
|
32
|
-
const options = {
|
|
33
|
-
...defaults,
|
|
34
|
-
...opts
|
|
35
|
-
};
|
|
36
|
-
const httpCorsMiddlewareBefore = async (request)=>{
|
|
37
|
-
if (options.disableBeforePreflightResponse) return;
|
|
38
|
-
const method = getVersionHttpMethod[request.event.version ?? '1.0']?.(request.event);
|
|
39
|
-
if (method === 'OPTIONS') {
|
|
40
|
-
normalizeHttpResponse(request);
|
|
41
|
-
const headers = {};
|
|
42
|
-
modifyHeaders(headers, options, request);
|
|
43
|
-
request.response.headers = headers;
|
|
44
|
-
request.response.statusCode = 204;
|
|
45
|
-
return request.response;
|
|
46
|
-
}
|
|
47
|
-
};
|
|
48
|
-
const httpCorsMiddlewareAfter = async (request)=>{
|
|
49
|
-
normalizeHttpResponse(request);
|
|
50
|
-
const { headers } = request.response;
|
|
51
|
-
modifyHeaders(headers, options, request);
|
|
52
|
-
request.response.headers = headers;
|
|
53
|
-
};
|
|
54
|
-
const httpCorsMiddlewareOnError = async (request)=>{
|
|
55
|
-
if (request.response === undefined) return;
|
|
56
|
-
await httpCorsMiddlewareAfter(request);
|
|
57
|
-
};
|
|
58
|
-
return {
|
|
59
|
-
before: httpCorsMiddlewareBefore,
|
|
60
|
-
after: httpCorsMiddlewareAfter,
|
|
61
|
-
onError: httpCorsMiddlewareOnError
|
|
62
|
-
};
|
|
63
|
-
};
|
|
64
|
-
const getVersionHttpMethod = {
|
|
65
|
-
'1.0': (event)=>event.httpMethod,
|
|
66
|
-
'2.0': (event)=>event.requestContext.http.method
|
|
67
|
-
};
|
|
68
|
-
const modifyHeaders = (headers, options, request)=>{
|
|
69
|
-
const existingHeaders = Object.keys(headers);
|
|
70
|
-
if (existingHeaders.includes('Access-Control-Allow-Credentials')) {
|
|
71
|
-
options.credentials = headers['Access-Control-Allow-Credentials'] === 'true';
|
|
72
|
-
}
|
|
73
|
-
if (options.credentials) {
|
|
74
|
-
headers['Access-Control-Allow-Credentials'] = String(options.credentials);
|
|
75
|
-
}
|
|
76
|
-
if (options.headers && !existingHeaders.includes('Access-Control-Allow-Headers')) {
|
|
77
|
-
headers['Access-Control-Allow-Headers'] = options.headers;
|
|
78
|
-
}
|
|
79
|
-
if (options.methods && !existingHeaders.includes('Access-Control-Allow-Methods')) {
|
|
80
|
-
headers['Access-Control-Allow-Methods'] = options.methods;
|
|
81
|
-
}
|
|
82
|
-
if (!existingHeaders.includes('Access-Control-Allow-Origin')) {
|
|
83
|
-
const eventHeaders = request.event.headers ?? {};
|
|
84
|
-
const incomingOrigin = eventHeaders.Origin ?? eventHeaders.origin;
|
|
85
|
-
headers['Access-Control-Allow-Origin'] = options.getOrigin(incomingOrigin, options);
|
|
86
|
-
}
|
|
87
|
-
let vary = options.vary;
|
|
88
|
-
if (headers['Access-Control-Allow-Origin'] !== '*' && !vary) {
|
|
89
|
-
vary = 'Origin';
|
|
90
|
-
}
|
|
91
|
-
if (vary && !existingHeaders.includes('Vary')) {
|
|
92
|
-
headers.Vary = vary;
|
|
8
|
+
return options.origins[0]
|
|
93
9
|
}
|
|
94
|
-
|
|
95
|
-
|
|
10
|
+
} else {
|
|
11
|
+
if (incomingOrigin && options.credentials && options.origin === '*') {
|
|
12
|
+
return incomingOrigin
|
|
96
13
|
}
|
|
97
|
-
|
|
98
|
-
|
|
99
|
-
|
|
100
|
-
|
|
101
|
-
|
|
102
|
-
|
|
103
|
-
|
|
104
|
-
|
|
105
|
-
|
|
106
|
-
|
|
107
|
-
|
|
108
|
-
|
|
109
|
-
|
|
110
|
-
|
|
111
|
-
|
|
14
|
+
return options.origin
|
|
15
|
+
}
|
|
16
|
+
}
|
|
17
|
+
|
|
18
|
+
const defaults = {
|
|
19
|
+
disableBeforePreflightResponse: true,
|
|
20
|
+
getOrigin,
|
|
21
|
+
credentials: undefined,
|
|
22
|
+
headers: undefined,
|
|
23
|
+
methods: undefined,
|
|
24
|
+
origin: '*',
|
|
25
|
+
origins: [],
|
|
26
|
+
exposeHeaders: undefined,
|
|
27
|
+
maxAge: undefined,
|
|
28
|
+
requestHeaders: undefined,
|
|
29
|
+
requestMethods: undefined,
|
|
30
|
+
cacheControl: undefined,
|
|
31
|
+
vary: undefined
|
|
32
|
+
}
|
|
33
|
+
const httpCorsMiddleware = (opts = {}) => {
|
|
34
|
+
const options = {
|
|
35
|
+
...defaults,
|
|
36
|
+
...opts
|
|
37
|
+
}
|
|
38
|
+
const httpCorsMiddlewareBefore = async (request) => {
|
|
39
|
+
if (options.disableBeforePreflightResponse) return
|
|
40
|
+
|
|
41
|
+
const method = getVersionHttpMethod[request.event.version ?? '1.0']?.(
|
|
42
|
+
request.event
|
|
43
|
+
)
|
|
44
|
+
if (method === 'OPTIONS') {
|
|
45
|
+
normalizeHttpResponse(request)
|
|
46
|
+
const headers = {}
|
|
47
|
+
modifyHeaders(headers, options, request)
|
|
48
|
+
request.response.headers = headers
|
|
49
|
+
request.response.statusCode = 204
|
|
50
|
+
return request.response
|
|
112
51
|
}
|
|
113
|
-
}
|
|
114
|
-
|
|
52
|
+
}
|
|
53
|
+
|
|
54
|
+
const httpCorsMiddlewareAfter = async (request) => {
|
|
55
|
+
normalizeHttpResponse(request)
|
|
56
|
+
const { headers } = request.response
|
|
57
|
+
modifyHeaders(headers, options, request)
|
|
58
|
+
request.response.headers = headers
|
|
59
|
+
}
|
|
60
|
+
const httpCorsMiddlewareOnError = async (request) => {
|
|
61
|
+
if (request.response === undefined) return
|
|
62
|
+
await httpCorsMiddlewareAfter(request)
|
|
63
|
+
}
|
|
64
|
+
return {
|
|
65
|
+
before: httpCorsMiddlewareBefore,
|
|
66
|
+
after: httpCorsMiddlewareAfter,
|
|
67
|
+
onError: httpCorsMiddlewareOnError
|
|
68
|
+
}
|
|
69
|
+
}
|
|
70
|
+
const getVersionHttpMethod = {
|
|
71
|
+
'1.0': (event) => event.httpMethod,
|
|
72
|
+
'2.0': (event) => event.requestContext.http.method
|
|
73
|
+
}
|
|
74
|
+
|
|
75
|
+
const modifyHeaders = (headers, options, request) => {
|
|
76
|
+
const existingHeaders = Object.keys(headers)
|
|
77
|
+
if (existingHeaders.includes('Access-Control-Allow-Credentials')) {
|
|
78
|
+
options.credentials = headers['Access-Control-Allow-Credentials'] === 'true'
|
|
79
|
+
}
|
|
80
|
+
if (options.credentials) {
|
|
81
|
+
headers['Access-Control-Allow-Credentials'] = String(options.credentials)
|
|
82
|
+
}
|
|
83
|
+
if (
|
|
84
|
+
options.headers &&
|
|
85
|
+
!existingHeaders.includes('Access-Control-Allow-Headers')
|
|
86
|
+
) {
|
|
87
|
+
headers['Access-Control-Allow-Headers'] = options.headers
|
|
88
|
+
}
|
|
89
|
+
if (
|
|
90
|
+
options.methods &&
|
|
91
|
+
!existingHeaders.includes('Access-Control-Allow-Methods')
|
|
92
|
+
) {
|
|
93
|
+
headers['Access-Control-Allow-Methods'] = options.methods
|
|
94
|
+
}
|
|
95
|
+
if (!existingHeaders.includes('Access-Control-Allow-Origin')) {
|
|
96
|
+
const eventHeaders = request.event.headers ?? {}
|
|
97
|
+
const incomingOrigin = eventHeaders.Origin ?? eventHeaders.origin
|
|
98
|
+
headers['Access-Control-Allow-Origin'] = options.getOrigin(
|
|
99
|
+
incomingOrigin,
|
|
100
|
+
options
|
|
101
|
+
)
|
|
102
|
+
}
|
|
103
|
+
let vary = options.vary
|
|
104
|
+
if (headers['Access-Control-Allow-Origin'] !== '*' && !vary) {
|
|
105
|
+
vary = 'Origin'
|
|
106
|
+
}
|
|
107
|
+
if (vary && !existingHeaders.includes('Vary')) {
|
|
108
|
+
headers.Vary = vary
|
|
109
|
+
}
|
|
110
|
+
if (
|
|
111
|
+
options.exposeHeaders &&
|
|
112
|
+
!existingHeaders.includes('Access-Control-Expose-Headers')
|
|
113
|
+
) {
|
|
114
|
+
headers['Access-Control-Expose-Headers'] = options.exposeHeaders
|
|
115
|
+
}
|
|
116
|
+
if (options.maxAge && !existingHeaders.includes('Access-Control-Max-Age')) {
|
|
117
|
+
headers['Access-Control-Max-Age'] = String(options.maxAge)
|
|
118
|
+
}
|
|
119
|
+
if (
|
|
120
|
+
options.requestHeaders &&
|
|
121
|
+
!existingHeaders.includes('Access-Control-Request-Headers')
|
|
122
|
+
) {
|
|
123
|
+
headers['Access-Control-Request-Headers'] = options.requestHeaders
|
|
124
|
+
}
|
|
125
|
+
if (
|
|
126
|
+
options.requestMethods &&
|
|
127
|
+
!existingHeaders.includes('Access-Control-Request-Methods')
|
|
128
|
+
) {
|
|
129
|
+
headers['Access-Control-Request-Methods'] = options.requestMethods
|
|
130
|
+
}
|
|
131
|
+
const httpMethod = getVersionHttpMethod[request.event.version ?? '1.0']?.(
|
|
132
|
+
request.event
|
|
133
|
+
)
|
|
134
|
+
if (!httpMethod) {
|
|
135
|
+
throw new Error('Unknown http event format', {
|
|
136
|
+
cause: { package: '@middy/http-cors' }
|
|
137
|
+
})
|
|
138
|
+
}
|
|
139
|
+
if (
|
|
140
|
+
httpMethod === 'OPTIONS' &&
|
|
141
|
+
options.cacheControl &&
|
|
142
|
+
!existingHeaders.includes('Cache-Control')
|
|
143
|
+
) {
|
|
144
|
+
headers['Cache-Control'] = options.cacheControl
|
|
145
|
+
}
|
|
146
|
+
}
|
|
115
147
|
|
|
148
|
+
export default httpCorsMiddleware
|
package/package.json
CHANGED
|
@@ -1,33 +1,27 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@middy/http-cors",
|
|
3
|
-
"version": "
|
|
3
|
+
"version": "5.0.0-alpha.1",
|
|
4
4
|
"description": "CORS (Cross-Origin Resource Sharing) middleware for the middy framework",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"engines": {
|
|
7
|
-
"node": ">=
|
|
7
|
+
"node": ">=18"
|
|
8
8
|
},
|
|
9
9
|
"engineStrict": true,
|
|
10
10
|
"publishConfig": {
|
|
11
11
|
"access": "public"
|
|
12
12
|
},
|
|
13
|
-
"main": "./index.cjs",
|
|
14
13
|
"module": "./index.js",
|
|
15
14
|
"exports": {
|
|
16
15
|
".": {
|
|
17
16
|
"import": {
|
|
18
17
|
"types": "./index.d.ts",
|
|
19
18
|
"default": "./index.js"
|
|
20
|
-
},
|
|
21
|
-
"require": {
|
|
22
|
-
"types": "./index.d.ts",
|
|
23
|
-
"default": "./index.cjs"
|
|
24
19
|
}
|
|
25
20
|
}
|
|
26
21
|
},
|
|
27
22
|
"types": "index.d.ts",
|
|
28
23
|
"files": [
|
|
29
24
|
"index.js",
|
|
30
|
-
"index.cjs",
|
|
31
25
|
"index.d.ts"
|
|
32
26
|
],
|
|
33
27
|
"scripts": {
|
|
@@ -64,11 +58,11 @@
|
|
|
64
58
|
"type": "github",
|
|
65
59
|
"url": "https://github.com/sponsors/willfarrell"
|
|
66
60
|
},
|
|
67
|
-
"gitHead": "
|
|
61
|
+
"gitHead": "ebce8d5df8783077fa49ba62ee9be20e8486a7f1",
|
|
68
62
|
"dependencies": {
|
|
69
|
-
"@middy/util": "
|
|
63
|
+
"@middy/util": "5.0.0-alpha.1"
|
|
70
64
|
},
|
|
71
65
|
"devDependencies": {
|
|
72
|
-
"@middy/core": "
|
|
66
|
+
"@middy/core": "5.0.0-alpha.1"
|
|
73
67
|
}
|
|
74
68
|
}
|
package/index.cjs
DELETED
|
@@ -1,125 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", {
|
|
3
|
-
value: true
|
|
4
|
-
});
|
|
5
|
-
Object.defineProperty(module, "exports", {
|
|
6
|
-
enumerable: true,
|
|
7
|
-
get: function() {
|
|
8
|
-
return _default;
|
|
9
|
-
}
|
|
10
|
-
});
|
|
11
|
-
const _util = require("@middy/util");
|
|
12
|
-
const getOrigin = (incomingOrigin, options = {})=>{
|
|
13
|
-
if (options.origins.length > 0) {
|
|
14
|
-
if (incomingOrigin && options.origins.includes(incomingOrigin)) {
|
|
15
|
-
return incomingOrigin;
|
|
16
|
-
} else {
|
|
17
|
-
return options.origins[0];
|
|
18
|
-
}
|
|
19
|
-
} else {
|
|
20
|
-
if (incomingOrigin && options.credentials && options.origin === '*') {
|
|
21
|
-
return incomingOrigin;
|
|
22
|
-
}
|
|
23
|
-
return options.origin;
|
|
24
|
-
}
|
|
25
|
-
};
|
|
26
|
-
const defaults = {
|
|
27
|
-
disableBeforePreflightResponse: true,
|
|
28
|
-
getOrigin,
|
|
29
|
-
credentials: undefined,
|
|
30
|
-
headers: undefined,
|
|
31
|
-
methods: undefined,
|
|
32
|
-
origin: '*',
|
|
33
|
-
origins: [],
|
|
34
|
-
exposeHeaders: undefined,
|
|
35
|
-
maxAge: undefined,
|
|
36
|
-
requestHeaders: undefined,
|
|
37
|
-
requestMethods: undefined,
|
|
38
|
-
cacheControl: undefined,
|
|
39
|
-
vary: undefined
|
|
40
|
-
};
|
|
41
|
-
const httpCorsMiddleware = (opts = {})=>{
|
|
42
|
-
const options = {
|
|
43
|
-
...defaults,
|
|
44
|
-
...opts
|
|
45
|
-
};
|
|
46
|
-
const httpCorsMiddlewareBefore = async (request)=>{
|
|
47
|
-
if (options.disableBeforePreflightResponse) return;
|
|
48
|
-
const method = getVersionHttpMethod[request.event.version ?? '1.0']?.(request.event);
|
|
49
|
-
if (method === 'OPTIONS') {
|
|
50
|
-
(0, _util.normalizeHttpResponse)(request);
|
|
51
|
-
const headers = {};
|
|
52
|
-
modifyHeaders(headers, options, request);
|
|
53
|
-
request.response.headers = headers;
|
|
54
|
-
request.response.statusCode = 204;
|
|
55
|
-
return request.response;
|
|
56
|
-
}
|
|
57
|
-
};
|
|
58
|
-
const httpCorsMiddlewareAfter = async (request)=>{
|
|
59
|
-
(0, _util.normalizeHttpResponse)(request);
|
|
60
|
-
const { headers } = request.response;
|
|
61
|
-
modifyHeaders(headers, options, request);
|
|
62
|
-
request.response.headers = headers;
|
|
63
|
-
};
|
|
64
|
-
const httpCorsMiddlewareOnError = async (request)=>{
|
|
65
|
-
if (request.response === undefined) return;
|
|
66
|
-
await httpCorsMiddlewareAfter(request);
|
|
67
|
-
};
|
|
68
|
-
return {
|
|
69
|
-
before: httpCorsMiddlewareBefore,
|
|
70
|
-
after: httpCorsMiddlewareAfter,
|
|
71
|
-
onError: httpCorsMiddlewareOnError
|
|
72
|
-
};
|
|
73
|
-
};
|
|
74
|
-
const getVersionHttpMethod = {
|
|
75
|
-
'1.0': (event)=>event.httpMethod,
|
|
76
|
-
'2.0': (event)=>event.requestContext.http.method
|
|
77
|
-
};
|
|
78
|
-
const modifyHeaders = (headers, options, request)=>{
|
|
79
|
-
const existingHeaders = Object.keys(headers);
|
|
80
|
-
if (existingHeaders.includes('Access-Control-Allow-Credentials')) {
|
|
81
|
-
options.credentials = headers['Access-Control-Allow-Credentials'] === 'true';
|
|
82
|
-
}
|
|
83
|
-
if (options.credentials) {
|
|
84
|
-
headers['Access-Control-Allow-Credentials'] = String(options.credentials);
|
|
85
|
-
}
|
|
86
|
-
if (options.headers && !existingHeaders.includes('Access-Control-Allow-Headers')) {
|
|
87
|
-
headers['Access-Control-Allow-Headers'] = options.headers;
|
|
88
|
-
}
|
|
89
|
-
if (options.methods && !existingHeaders.includes('Access-Control-Allow-Methods')) {
|
|
90
|
-
headers['Access-Control-Allow-Methods'] = options.methods;
|
|
91
|
-
}
|
|
92
|
-
if (!existingHeaders.includes('Access-Control-Allow-Origin')) {
|
|
93
|
-
const eventHeaders = request.event.headers ?? {};
|
|
94
|
-
const incomingOrigin = eventHeaders.Origin ?? eventHeaders.origin;
|
|
95
|
-
headers['Access-Control-Allow-Origin'] = options.getOrigin(incomingOrigin, options);
|
|
96
|
-
}
|
|
97
|
-
let vary = options.vary;
|
|
98
|
-
if (headers['Access-Control-Allow-Origin'] !== '*' && !vary) {
|
|
99
|
-
vary = 'Origin';
|
|
100
|
-
}
|
|
101
|
-
if (vary && !existingHeaders.includes('Vary')) {
|
|
102
|
-
headers.Vary = vary;
|
|
103
|
-
}
|
|
104
|
-
if (options.exposeHeaders && !existingHeaders.includes('Access-Control-Expose-Headers')) {
|
|
105
|
-
headers['Access-Control-Expose-Headers'] = options.exposeHeaders;
|
|
106
|
-
}
|
|
107
|
-
if (options.maxAge && !existingHeaders.includes('Access-Control-Max-Age')) {
|
|
108
|
-
headers['Access-Control-Max-Age'] = String(options.maxAge);
|
|
109
|
-
}
|
|
110
|
-
if (options.requestHeaders && !existingHeaders.includes('Access-Control-Request-Headers')) {
|
|
111
|
-
headers['Access-Control-Request-Headers'] = options.requestHeaders;
|
|
112
|
-
}
|
|
113
|
-
if (options.requestMethods && !existingHeaders.includes('Access-Control-Request-Methods')) {
|
|
114
|
-
headers['Access-Control-Request-Methods'] = options.requestMethods;
|
|
115
|
-
}
|
|
116
|
-
const httpMethod = getVersionHttpMethod[request.event.version ?? '1.0']?.(request.event);
|
|
117
|
-
if (!httpMethod) {
|
|
118
|
-
throw new Error('[http-cors] Unknown http event format');
|
|
119
|
-
}
|
|
120
|
-
if (httpMethod === 'OPTIONS' && options.cacheControl && !existingHeaders.includes('Cache-Control')) {
|
|
121
|
-
headers['Cache-Control'] = options.cacheControl;
|
|
122
|
-
}
|
|
123
|
-
};
|
|
124
|
-
const _default = httpCorsMiddleware;
|
|
125
|
-
|