@middy/http-cors 5.2.6 → 5.3.1

package/index.js

@@ -4,8 +4,6 @@ const getOrigin = (incomingOrigin, options = {}) => {
   if (options.origins.length > 0) {
     if (incomingOrigin && options.origins.includes(incomingOrigin)) {
       return incomingOrigin
-    } else {
-      return options.origins[0]
     }
   } else {
     if (incomingOrigin && options.credentials && options.origin === '*') {
@@ -13,6 +11,7 @@ const getOrigin = (incomingOrigin, options = {}) => {
     }
     return options.origin
   }
+  return null
 }
 
 const defaults = {
@@ -95,13 +94,17 @@ const modifyHeaders = (headers, options, request) => {
   if (!existingHeaders.includes('Access-Control-Allow-Origin')) {
     const eventHeaders = request.event.headers ?? {}
     const incomingOrigin = eventHeaders.Origin ?? eventHeaders.origin
-    headers['Access-Control-Allow-Origin'] = options.getOrigin(
-      incomingOrigin,
-      options
-    )
+    const newOrigin = options.getOrigin(incomingOrigin, options)
+    if (newOrigin) {
+      headers['Access-Control-Allow-Origin'] = newOrigin
+    }
   }
   let vary = options.vary
-  if (headers['Access-Control-Allow-Origin'] !== '*' && !vary) {
+  if (
+    headers['Access-Control-Allow-Origin'] &&
+    headers['Access-Control-Allow-Origin'] !== '*' &&
+    !vary
+  ) {
     vary = 'Origin'
   }
   if (vary && !existingHeaders.includes('Vary')) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@middy/http-cors",
-  "version": "5.2.6",
+  "version": "5.3.1",
   "description": "CORS (Cross-Origin Resource Sharing) middleware for the middy framework",
   "type": "module",
   "engines": {
@@ -58,11 +58,11 @@
     "type": "github",
     "url": "https://github.com/sponsors/willfarrell"
   },
-  "gitHead": "02424c3740b6a4386dba4fb713ac290bedadb649",
+  "gitHead": "d25628bf7ebf0c4f00ed2e789d0b3edae2be4dae",
   "dependencies": {
-    "@middy/util": "5.2.6"
+    "@middy/util": "5.3.1"
   },
   "devDependencies": {
-    "@middy/core": "5.2.6"
+    "@middy/core": "5.3.1"
   }
 }