@ozdao/prometheus-framework 0.1.35 → 0.1.36

package/dist/auth.server.js

@@ -410,16 +410,16 @@ var invites_routes = function(app, db) {
 const controllerFactory$1 = auth_controller;
 const controllerFactoryTwofa = twofa_controller;
 const middlewareFactory$1 = index.server;
-var auth_routes = function(app, db) {
+var auth_routes = function(app, db, origins) {
   const controller = controllerFactory$1(db);
   const controllerTwofa = controllerFactoryTwofa();
   const { verifySignUp, verifyUser } = middlewareFactory$1(db);
   app.use(function(req, res, next) {
-    res.header(
-      "Access-Control-Allow-Headers",
-      "Access-Control-Allow-Origin",
-      "x-access-token, Origin, Content-Type, Accept"
-    );
+    const origin = req.headers.origin;
+    if (origins.includes(origin)) {
+      res.setHeader("Access-Control-Allow-Origin", origin);
+    }
+    res.header("Access-Control-Allow-Headers", "x-access-token, Origin, Content-Type, Accept");
     next();
   });
   app.post(

package/dist/auth.server.mjs

@@ -409,16 +409,16 @@ var invites_routes = function(app, db) {
 const controllerFactory$1 = auth_controller;
 const controllerFactoryTwofa = twofa_controller;
 const middlewareFactory$1 = server;
-var auth_routes = function(app, db) {
+var auth_routes = function(app, db, origins) {
   const controller = controllerFactory$1(db);
   const controllerTwofa = controllerFactoryTwofa();
   const { verifySignUp, verifyUser } = middlewareFactory$1(db);
   app.use(function(req, res, next) {
-    res.header(
-      "Access-Control-Allow-Headers",
-      "Access-Control-Allow-Origin",
-      "x-access-token, Origin, Content-Type, Accept"
-    );
+    const origin = req.headers.origin;
+    if (origins.includes(origin)) {
+      res.setHeader("Access-Control-Allow-Origin", origin);
+    }
+    res.header("Access-Control-Allow-Headers", "x-access-token, Origin, Content-Type, Accept");
     next();
   });
   app.post(

package/dist/community.server.js

@@ -487,16 +487,16 @@ var server = middlewareIndexFactory;
 const controllerFactory$2 = blog_controller;
 const middlewareFactoryGlobal = index.server;
 const middlewareFactoryCommunity = server;
-var blog_routes = function(app, db) {
+var blog_routes = function(app, db, origins) {
   const controller = controllerFactory$2(db);
   middlewareFactoryGlobal(db);
   const { verifyBlogpost: verifyBlogpost2 } = middlewareFactoryCommunity(db);
   app.use(function(req, res, next) {
-    res.header(
-      "Access-Control-Allow-Headers",
-      "Access-Control-Allow-Origin",
-      "x-access-token, Origin, Content-Type, Accept"
-    );
+    const origin = req.headers.origin;
+    if (origins.includes(origin)) {
+      res.setHeader("Access-Control-Allow-Origin", origin);
+    }
+    res.header("Access-Control-Allow-Headers", "x-access-token, Origin, Content-Type, Accept");
     next();
   });
   app.get(

package/dist/community.server.mjs

@@ -486,16 +486,16 @@ var server = middlewareIndexFactory;
 const controllerFactory$2 = blog_controller;
 const middlewareFactoryGlobal = server$1;
 const middlewareFactoryCommunity = server;
-var blog_routes = function(app, db) {
+var blog_routes = function(app, db, origins) {
   const controller = controllerFactory$2(db);
   middlewareFactoryGlobal(db);
   const { verifyBlogpost: verifyBlogpost2 } = middlewareFactoryCommunity(db);
   app.use(function(req, res, next) {
-    res.header(
-      "Access-Control-Allow-Headers",
-      "Access-Control-Allow-Origin",
-      "x-access-token, Origin, Content-Type, Accept"
-    );
+    const origin = req.headers.origin;
+    if (origins.includes(origin)) {
+      res.setHeader("Access-Control-Allow-Origin", origin);
+    }
+    res.header("Access-Control-Allow-Headers", "x-access-token, Origin, Content-Type, Accept");
     next();
   });
   app.get(

package/dist/events.server.js

@@ -493,16 +493,16 @@ var server = middlewareIndexFactory;
 const controllerFactory$2 = events_controller;
 const middlewareFactoryGlobal = index.server;
 const middlewareFactoryEvents = server;
-var events_routes = function(app, db) {
+var events_routes = function(app, db, origins) {
   const controller = controllerFactory$2(db);
   middlewareFactoryGlobal(db);
   const { verifyEvent: verifyEvent2 } = middlewareFactoryEvents(db);
   app.use(function(req, res, next) {
-    res.header(
-      "Access-Control-Allow-Headers",
-      "Access-Control-Allow-Origin",
-      "x-access-token, Origin, Content-Type, Accept"
-    );
+    const origin = req.headers.origin;
+    if (origins.includes(origin)) {
+      res.setHeader("Access-Control-Allow-Origin", origin);
+    }
+    res.header("Access-Control-Allow-Headers", "x-access-token, Origin, Content-Type, Accept");
     next();
   });
   app.get(

package/dist/events.server.mjs

@@ -491,16 +491,16 @@ var server = middlewareIndexFactory;
 const controllerFactory$2 = events_controller;
 const middlewareFactoryGlobal = server$1;
 const middlewareFactoryEvents = server;
-var events_routes = function(app, db) {
+var events_routes = function(app, db, origins) {
   const controller = controllerFactory$2(db);
   middlewareFactoryGlobal(db);
   const { verifyEvent: verifyEvent2 } = middlewareFactoryEvents(db);
   app.use(function(req, res, next) {
-    res.header(
-      "Access-Control-Allow-Headers",
-      "Access-Control-Allow-Origin",
-      "x-access-token, Origin, Content-Type, Accept"
-    );
+    const origin = req.headers.origin;
+    if (origins.includes(origin)) {
+      res.setHeader("Access-Control-Allow-Origin", origin);
+    }
+    res.header("Access-Control-Allow-Headers", "x-access-token, Origin, Content-Type, Accept");
     next();
   });
   app.get(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ozdao/prometheus-framework",
-  "version": "0.1.35",
+  "version": "0.1.36",
   "description": "Web3 Framework focused on user experience and ease of development.",
   "author": "OZ DAO <hello@ozdao.dev>",
   "license": "GPL-3.0-or-later",

package/src/modules/auth/routes/auth.routes.js

@@ -4,7 +4,7 @@ const controllerFactoryTwofa = require("../controllers/twofa.controller");
 // Middlewares
 const middlewareFactory = require('@pf/src/modules/middlewares/server');
 // Routes
-module.exports = function(app, db) {
+module.exports = function(app, db, origins) {
   const controller = controllerFactory(db);
   const controllerTwofa = controllerFactoryTwofa(db);
 
@@ -12,11 +12,14 @@ module.exports = function(app, db) {
 
   app.use(function(req, res, next) {
     
-    res.header(
-      "Access-Control-Allow-Headers",
-      "Access-Control-Allow-Origin",
-      "x-access-token, Origin, Content-Type, Accept"
-    );
+    const origin = req.headers.origin;
+
+    if (origins.includes(origin)) {
+      res.setHeader('Access-Control-Allow-Origin', origin);
+    }
+
+    res.header("Access-Control-Allow-Headers", "x-access-token, Origin, Content-Type, Accept");
+
     next();
   });
   

package/src/modules/community/routes/blog.routes.js

@@ -3,18 +3,22 @@ const controllerFactory = require("../controllers/blog.controller");
 const middlewareFactoryGlobal = require('@pf/src/modules/middlewares/server');
 const middlewareFactoryCommunity = require('../middlewares/server');
 
-module.exports = function(app, db) {
+module.exports = function(app, db, origins) {
   const controller = controllerFactory(db);
 
   const { authJwt } = middlewareFactoryGlobal(db);
   const { verifyBlogpost } = middlewareFactoryCommunity(db);
 
   app.use(function(req, res, next) {
-    res.header(
-      "Access-Control-Allow-Headers",
-      "Access-Control-Allow-Origin",
-      "x-access-token, Origin, Content-Type, Accept"
-    );
+    
+    const origin = req.headers.origin;
+
+    if (origins.includes(origin)) {
+      res.setHeader('Access-Control-Allow-Origin', origin);
+    }
+
+    res.header("Access-Control-Allow-Headers", "x-access-token, Origin, Content-Type, Accept");
+
     next();
   });
 

package/src/modules/events/routes/events.routes.js

@@ -4,7 +4,7 @@ const controllerFactory = require("../controllers/events.controller");
 const middlewareFactoryGlobal = require('@pf/src/modules/middlewares/server');
 const middlewareFactoryEvents = require('../middlewares/server');
 // Routes
-module.exports = function(app, db) {
+module.exports = function(app, db, origins) {
   const controller = controllerFactory(db);
 
   const { authJwt } = middlewareFactoryGlobal(db);
@@ -12,11 +12,14 @@ module.exports = function(app, db) {
 
   app.use(function(req, res, next) {
     
-    res.header(
-      "Access-Control-Allow-Headers",
-      "Access-Control-Allow-Origin",
-      "x-access-token, Origin, Content-Type, Accept"
-    );
+    const origin = req.headers.origin;
+
+    if (origins.includes(origin)) {
+      res.setHeader('Access-Control-Allow-Origin', origin);
+    }
+
+    res.header("Access-Control-Allow-Headers", "x-access-token, Origin, Content-Type, Accept");
+
     next();
   });