@xeno-js/core 0.1.3 → 0.1.5

package/dist/index.cjs

@@ -1509,15 +1509,15 @@ var init_logger_utils = __esm({
        */
       async addLogger(container, opts) {
         const loggerDependencies = [];
-        const { Guards: Guards45, LOG_LEVEL: LOG_LEVEL7, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
-        if (!Guards45.isDefined(opts) || opts.console) {
+        const { Guards: Guards46, LOG_LEVEL: LOG_LEVEL7, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
+        if (!Guards46.isDefined(opts) || opts.console) {
           const { ConsoleLogger: ConsoleLogger2 } = await Promise.resolve().then(() => (init_console_logger(), console_logger_exports));
           container.addSingleton(TOKENS4.CONSOLE_LOGGER, () => new ConsoleLogger2(opts?.level));
           loggerDependencies.push(TOKENS4.CONSOLE_LOGGER);
         }
         const customLoggerFactories = [];
-        if (Guards45.isDefined(opts)) {
-          if (Guards45.isDefined(opts.sentry.config)) {
+        if (Guards46.isDefined(opts)) {
+          if (Guards46.isDefined(opts.sentry.config)) {
             const { SentryLoggerFactory: SentryLoggerFactory2 } = await Promise.resolve().then(() => (init_sentry_logger_factory(), sentry_logger_factory_exports));
             container.addSingleton(TOKENS4.SENTRY_LOGGER, () => {
               const factory = new SentryLoggerFactory2();
@@ -1525,7 +1525,7 @@ var init_logger_utils = __esm({
             });
             loggerDependencies.push(TOKENS4.SENTRY_LOGGER);
           }
-          if (Guards45.isDefined(opts.pino.config)) {
+          if (Guards46.isDefined(opts.pino.config)) {
             const { PinoLoggerFactory: PinoLoggerFactory2 } = await Promise.resolve().then(() => (init_pino_logger_factory(), pino_logger_factory_exports));
             container.addSingleton(TOKENS4.PINO_LOGGER, () => {
               const factory = new PinoLoggerFactory2();
@@ -1533,10 +1533,10 @@ var init_logger_utils = __esm({
             });
             loggerDependencies.push(TOKENS4.PINO_LOGGER);
           }
-          if (!Guards45.isNullOrEmpty(opts.customLoggers)) {
+          if (!Guards46.isNullOrEmpty(opts.customLoggers)) {
             const customLoggers = opts.customLoggers;
             customLoggers.forEach((f) => {
-              if (Guards45.isDefined(f)) {
+              if (Guards46.isDefined(f)) {
                 customLoggerFactories.push(f);
               }
             });
@@ -1709,8 +1709,8 @@ var init_cache_utils = __esm({
        * @link https://github.com/xeno-js/xeno-js
        */
       async addCache(container, opts) {
-        const { Guards: Guards45, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
-        if (!opts.inMemory && !Guards45.isDefined(opts.redis)) {
+        const { Guards: Guards46, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
+        if (!opts.inMemory && !Guards46.isDefined(opts.redis)) {
           throw new Error(
             "No cache strategies are configured. Please provide at least one cache strategy."
           );
@@ -1720,12 +1720,12 @@ var init_cache_utils = __esm({
           TOKENS4.CACHE_KEY_BUILDER,
           (c) => new CacheKeyBuilder(c.resolve(TOKENS4.IDENTITY_ACCESSOR))
         );
-        if (opts.inMemory || !Guards45.isDefined(opts.redis)) {
+        if (opts.inMemory || !Guards46.isDefined(opts.redis)) {
           const { InMemoryCacheExtended: InMemoryCacheExtended2 } = await Promise.resolve().then(() => (init_inmemory_cache(), inmemory_cache_exports));
           container.addSingleton(TOKENS4.CACHE, () => new InMemoryCacheExtended2());
           return;
         }
-        if (Guards45.isDefined(opts.redis)) {
+        if (Guards46.isDefined(opts.redis)) {
           const { RedisCacheFactory: RedisCacheFactory2 } = await Promise.resolve().then(() => (init_redis_cache_factory(), redis_cache_factory_exports));
           container.addSingleton(TOKENS4.CACHE, () => {
             const config = opts.redis;
@@ -1925,29 +1925,20 @@ var init_csrf_token_service = __esm({
       async generate(subject) {
         const randomBuffer = this._cryptoService.randomBytes(32);
         const nonce = btoa(String.fromCharCode(...randomBuffer)).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
-        const signature = await this._cryptoService.hmacSha256(
-          this._secret,
-          `${subject}.${nonce}`
-        );
+        const signature = await this._cryptoService.hmacSha256(this._secret, `${subject}.${nonce}`);
         return `${nonce}.${signature}`;
       }
       async validate(token, subject) {
         const separatorIndex = token.indexOf(".");
-        if (separatorIndex <= 0)
-          return false;
+        if (separatorIndex <= 0) return false;
         const nonce = token.slice(0, separatorIndex);
         const signature = token.slice(separatorIndex + 1);
-        if (import_shared44.Guards.isNullOrEmpty(nonce) || import_shared44.Guards.isNullOrEmpty(signature))
-          return false;
-        const expected = await this._cryptoService.hmacSha256(
-          this._secret,
-          `${subject}.${nonce}`
-        );
+        if (import_shared44.Guards.isNullOrEmpty(nonce) || import_shared44.Guards.isNullOrEmpty(signature)) return false;
+        const expected = await this._cryptoService.hmacSha256(this._secret, `${subject}.${nonce}`);
         const encoder = new TextEncoder();
         const actualBuffer = encoder.encode(signature);
         const expectedBuffer = encoder.encode(expected);
-        if (actualBuffer.length !== expectedBuffer.length)
-          return false;
+        if (actualBuffer.length !== expectedBuffer.length) return false;
         return this._cryptoService.timingSafeEqual(actualBuffer, expectedBuffer);
       }
     };
@@ -2046,15 +2037,12 @@ var init_http_cookie_extractor = __esm({
     import_shared47 = require("@xeno-js/shared");
     HttpCookieExtractor = class {
       extract(cookie) {
-        if (!import_shared47.Guards.isDefined(cookie.header))
-          return void 0;
+        if (!import_shared47.Guards.isDefined(cookie.header)) return void 0;
         for (const rawCookie of cookie.header.split(";")) {
           const separatorIndex = rawCookie.indexOf("=");
-          if (separatorIndex <= 0)
-            continue;
+          if (separatorIndex <= 0) continue;
           const name = rawCookie.slice(0, separatorIndex).trim();
-          if (name !== cookie.name)
-            continue;
+          if (name !== cookie.name) continue;
           const value = rawCookie.slice(separatorIndex + 1).trim();
           try {
             return decodeURIComponent(value);
@@ -2111,12 +2099,10 @@ var init_http_header_extractor = __esm({
         const expiration = import_shared48.StringHelper.getSingleValue(headers["x-expiration"]);
         const csrf = import_shared48.StringHelper.getSingleValue(headers["x-csrf-token"]);
         const cookieHeader = import_shared48.StringHelper.getSingleValue(headers["cookie"]);
-        const csrfCookie = this._cookieExtractor.extract(
-          {
-            header: cookieHeader,
-            name: this._cookieName
-          }
-        );
+        const csrfCookie = this._cookieExtractor.extract({
+          header: cookieHeader,
+          name: this._cookieName
+        });
         const origin = import_shared48.StringHelper.getSingleValue(headers["origin"]);
         const cleanOrigin = import_shared48.HttpHelper.sanitizeOriginUrl(origin);
         const referer = import_shared48.StringHelper.getSingleValue(headers["referer"]);
@@ -2236,10 +2222,8 @@ var init_client_ip_resolver = __esm({
         if (!import_shared51.Guards.isDefined(socketIp))
           return !import_shared51.Guards.isNullOrEmpty(clientIp) ? clientIp.split(",")[0].trim() : void 0;
         const isTrustedProxy = this._trustedProxies.includes(socketIp);
-        if (!isTrustedProxy)
-          return socketIp;
-        if (import_shared51.Guards.isDefined(clientIp))
-          return clientIp.split(",")[0].trim();
+        if (!isTrustedProxy) return socketIp;
+        if (import_shared51.Guards.isDefined(clientIp)) return clientIp.split(",")[0].trim();
         return socketIp;
       }
     };
@@ -2784,8 +2768,8 @@ var init_auth_utils = __esm({
         const { TOKENS: TOKENS4 } = await import("@xeno-js/shared");
         const pipelines = [];
         const strategies = [];
-        const { Guards: Guards45 } = await import("@xeno-js/shared");
-        if (Guards45.isDefined(opts.policies)) {
+        const { Guards: Guards46 } = await import("@xeno-js/shared");
+        if (Guards46.isDefined(opts.policies)) {
           const { PolicyRegistry: PolicyRegistry2 } = await Promise.resolve().then(() => (init_application(), application_exports));
           container.addSingleton(TOKENS4.POLICY_REGISTRY, () => new PolicyRegistry2());
           const policyRegistry = opts.policies;
@@ -2794,16 +2778,16 @@ var init_auth_utils = __esm({
           for (const [intent, policy] of Object.entries(policyRegistry)) {
             const intentLower = intent.toLowerCase();
             registryInstance.addPolicy(intentLower, policy);
-            if (!Guards45.isNullOrEmpty(policy.roles)) {
+            if (!Guards46.isNullOrEmpty(policy.roles)) {
               Policies.add("roles");
             }
-            if (!Guards45.isNullOrEmpty(policy.permissions)) {
+            if (!Guards46.isNullOrEmpty(policy.permissions)) {
               Policies.add("permissions");
             }
-            if (!Guards45.isNullOrEmpty(policy.userId)) {
+            if (!Guards46.isNullOrEmpty(policy.userId)) {
               Policies.add("userId");
             }
-            if (!Guards45.isNullOrEmpty(policy.tenantId)) {
+            if (!Guards46.isNullOrEmpty(policy.tenantId)) {
               Policies.add("tenantId");
             }
           }
@@ -2852,10 +2836,10 @@ var init_auth_utils = __esm({
             strategies.push(TOKENS4.TENANT_AUTHORIZATION_PIPELINE);
           }
         }
-        if (!Guards45.isNullOrEmpty(opts.customAuthorizationStrategy)) {
+        if (!Guards46.isNullOrEmpty(opts.customAuthorizationStrategy)) {
           const customStrategies = opts.customAuthorizationStrategy;
           customStrategies.forEach((strategyToken, index) => {
-            if (Guards45.isDefined(strategyToken)) {
+            if (Guards46.isDefined(strategyToken)) {
               const token = `CUSTOM_AUTHORIZATION_STRATEGY_${index}`;
               container.addSingleton(token, (c) => {
                 return strategyToken(c);
@@ -3058,7 +3042,7 @@ var init_db_module = __esm({
     "use strict";
     DbModule = class {
       async configure(container, opts) {
-        const { Guards: Guards45, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
+        const { Guards: Guards46, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
         const { DbUtils: DbUtils2 } = await Promise.resolve().then(() => (init_db_utils(), db_utils_exports));
         const db = opts.enableSqlLite ? await DbUtils2.addSqlLite(opts) : await DbUtils2.addDbClient(opts);
         const { TransactionState: TransactionState2 } = await Promise.resolve().then(() => (init_transaction_state(), transaction_state_exports));
@@ -3075,7 +3059,7 @@ var init_db_module = __esm({
           return new Proxy(db, {
             get(_target, prop, receiver) {
               const activeState = ttx.state;
-              if (Guards45.isDefined(activeState)) {
+              if (Guards46.isDefined(activeState)) {
                 if (prop === "transaction") {
                   return activeState.transaction.bind(activeState);
                 }
@@ -3112,14 +3096,14 @@ var init_http_utils = __esm({
        */
       async addAxios(container, opts) {
         const { NodeAxiosFactory: NodeAxiosFactory2 } = await Promise.resolve().then(() => (init_factories(), factories_exports));
-        const { Guards: Guards45 } = await import("@xeno-js/shared");
-        if (!Guards45.isDefined(opts.token)) {
+        const { Guards: Guards46 } = await import("@xeno-js/shared");
+        if (!Guards46.isDefined(opts.token)) {
           throw new Error("HttpConfig.token is required and must be defined.");
         }
         container.addSingleton(opts.token, () => {
           const factory = new NodeAxiosFactory2();
           const instance = factory.create(opts.client);
-          if (!Guards45.hasMethod(instance, "get") || !Guards45.hasMethod(instance, "post") || !Guards45.hasMethod(instance, "put") || !Guards45.hasMethod(instance, "patch") || !Guards45.hasMethod(instance, "delete")) {
+          if (!Guards46.hasMethod(instance, "get") || !Guards46.hasMethod(instance, "post") || !Guards46.hasMethod(instance, "put") || !Guards46.hasMethod(instance, "patch") || !Guards46.hasMethod(instance, "delete")) {
             throw new Error(
               "The created HTTP client instance does not implement the required methods of IHttpClient."
             );
@@ -3146,8 +3130,8 @@ var init_http_utils = __esm({
         });
       },
       async addAllowOrigin(container, opts) {
-        const { Guards: Guards45 } = await import("@xeno-js/shared");
-        if (Guards45.isNullOrEmpty(opts)) throw new Error("At least an allow origin must be passed");
+        const { Guards: Guards46 } = await import("@xeno-js/shared");
+        if (Guards46.isNullOrEmpty(opts)) throw new Error("At least an allow origin must be passed");
         const { TOKENS: TOKENS4 } = await import("@xeno-js/shared");
         const { AllowOrigin: AllowOrigin2 } = await Promise.resolve().then(() => (init_services(), services_exports));
         const allowOrigin = [];
@@ -3207,13 +3191,13 @@ var init_validation_utils = __esm({
        * @link https://github.com/xeno-js/xeno-js
        */
       async addValidation(container, opts, logger) {
-        const { Guards: Guards45, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
-        if (!Guards45.isDefined(opts.zod) && Guards45.isNullOrEmpty(opts.customValidationStrategy)) {
+        const { Guards: Guards46, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
+        if (!Guards46.isDefined(opts.zod) && Guards46.isNullOrEmpty(opts.customValidationStrategy)) {
           return [];
         }
         const pipelines = [];
         const validationStrategies = [];
-        if (Guards45.isDefined(opts.zod)) {
+        if (Guards46.isDefined(opts.zod)) {
           const config = opts.zod;
           const { ZodValidatorFactory: ZodValidatorFactory2 } = await Promise.resolve().then(() => (init_zod_validator_factory(), zod_validator_factory_exports));
           container.addSingleton(TOKENS4.ZOD_VALIDATOR, () => {
@@ -3227,9 +3211,9 @@ var init_validation_utils = __esm({
           validationStrategies.push(TOKENS4.SCHEMA_VALIDATION_STRATEGY);
         }
         const customValidationFactory = [];
-        if (!Guards45.isNullOrEmpty(opts.customValidationStrategy)) {
+        if (!Guards46.isNullOrEmpty(opts.customValidationStrategy)) {
           for (const strategyToken of opts.customValidationStrategy) {
-            if (Guards45.isDefined(strategyToken)) {
+            if (Guards46.isDefined(strategyToken)) {
               customValidationFactory.push(strategyToken);
             }
           }
@@ -3332,8 +3316,8 @@ var init_pipeline_utils = __esm({
        */
       async addCommand(container, opts) {
         const pipelines = [];
-        const { Guards: Guards45, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
-        if (Guards45.isDefined(opts.idempotency)) {
+        const { Guards: Guards46, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
+        if (Guards46.isDefined(opts.idempotency)) {
           const { IdempotencyStore: IdempotencyStore2 } = await Promise.resolve().then(() => (init_idempotency_store(), idempotency_store_exports));
           container.addSingleton(
             TOKENS4.IDEMPOTENCY_STORE,
@@ -3353,7 +3337,7 @@ var init_pipeline_utils = __esm({
           });
           pipelines.push(TOKENS4.IDEMPOTENCY_PIPELINE);
         }
-        if (Guards45.isDefined(opts.concurrency)) {
+        if (Guards46.isDefined(opts.concurrency)) {
           const { ConcurrencyRetryPipeline: ConcurrencyRetryPipeline2 } = await Promise.resolve().then(() => (init_application(), application_exports));
           container.addSingleton(TOKENS4.CONCURRENCY_RETRY_PIPELINE, () => {
             const config = opts.concurrency;
@@ -3433,13 +3417,13 @@ var init_cqrs_module = __esm({
           return new PerformancePipeline2(logger, thresholdMs);
         });
         pipelines.push(TOKENS4.PERFORMANCE_PIPELINE);
-        const { Guards: Guards45 } = await import("@xeno-js/shared");
-        if (Guards45.isDefined(opts.authorization.policies) || Guards45.isDefined(opts.authorization.customAuthorizationStrategy)) {
+        const { Guards: Guards46 } = await import("@xeno-js/shared");
+        if (Guards46.isDefined(opts.authorization.policies) || Guards46.isDefined(opts.authorization.customAuthorizationStrategy)) {
           const { AuthUtils: AuthUtils2 } = await Promise.resolve().then(() => (init_auth_utils(), auth_utils_exports));
           const authPipelines = await AuthUtils2.addAuthZ(container, opts.authorization);
           pipelines.push(...authPipelines);
         }
-        if (Guards45.isDefined(opts.validation.zod) || Guards45.isDefined(opts.validation.customValidationStrategy)) {
+        if (Guards46.isDefined(opts.validation.zod) || Guards46.isDefined(opts.validation.customValidationStrategy)) {
           const { ValidationUtils: ValidationUtils2 } = await Promise.resolve().then(() => (init_validation_utils(), validation_utils_exports));
           const logger = container.resolve(TOKENS4.LOGGER);
           const validationPipelines = await ValidationUtils2.addValidation(
@@ -3451,11 +3435,11 @@ var init_cqrs_module = __esm({
         }
         const commandPipelines = pipelines;
         const queryPipelines = pipelines;
-        if ((Guards45.isDefined(opts.commandBus.idempotency) || opts.queryBus.isEnabled) && opts.isCache) {
+        if ((Guards46.isDefined(opts.commandBus.idempotency) || opts.queryBus.isEnabled) && opts.isCache) {
           const { CacheUtils: CacheUtils2 } = await Promise.resolve().then(() => (init_cache_utils(), cache_utils_exports));
           await CacheUtils2.addCache(container, { inMemory: true, redis: void 0 });
         }
-        if (Guards45.isDefined(opts.commandBus.idempotency) || Guards45.isDefined(opts.commandBus.concurrency)) {
+        if (Guards46.isDefined(opts.commandBus.idempotency) || Guards46.isDefined(opts.commandBus.concurrency)) {
           const { PipelineUtils: PipelineUtils2 } = await Promise.resolve().then(() => (init_pipeline_utils(), pipeline_utils_exports));
           const newCommandPipelines = await PipelineUtils2.addCommand(container, {
             ...opts.commandBus,
@@ -3854,10 +3838,7 @@ var init_csrf_middleware = __esm({
               }
             );
           }
-          if (!import_shared66.Guards.isDefined(identity?.userId) || !await this._csrfTokenService.validate(
-            headerToken,
-            identity?.userId
-          )) {
+          if (!import_shared66.Guards.isDefined(identity?.userId) || !await this._csrfTokenService.validate(headerToken, identity?.userId)) {
             return import_shared66.HttpHelper.error(
               {
                 success: false,
@@ -3905,10 +3886,8 @@ var init_csrf_cookie_middleware = __esm({
         const context = this._requestContext.getContext();
         const identity = context?.identity;
         const network = context?.network;
-        if (!import_shared67.Guards.isDefined(identity?.userId))
-          return response;
-        if (import_shared67.Guards.isDefined(network?.csrfCookie))
-          return response;
+        if (!import_shared67.Guards.isDefined(identity?.userId)) return response;
+        if (import_shared67.Guards.isDefined(network?.csrfCookie)) return response;
         const token = await this._csrfTokenService.generate(identity.userId);
         const cookieName = this._csrf.cookieName ?? "__Host-xeno-csrf";
         const maxAge = this._csrf.cookieMaxAgeSeconds ?? 3600;
@@ -3917,10 +3896,7 @@ var init_csrf_cookie_middleware = __esm({
         const existingCookies = response.headers["Set-Cookie"];
         response.headers = {
           ...response.headers ?? {},
-          "Set-Cookie": [
-            ...existingCookies ?? [],
-            cookie
-          ]
+          "Set-Cookie": [...existingCookies ?? [], cookie]
         };
         return response;
       }
@@ -3978,6 +3954,27 @@ var init_rate_limiter_middleware = __esm({
       _opts;
       async execute(req, _headers, next) {
         const { network, tracing } = this._ctxAccessor.getContext() ?? {};
+        if (!import_shared69.Guards.isDefined(network?.clientIp))
+          return import_shared69.HttpHelper.error(
+            {
+              success: false,
+              error: {
+                code: import_shared69.ERROR_CODES.SYSTEM_ERROR,
+                message: "IP undefined. Please contact the administrator.",
+                details: `IP undefined. Please contact the administrator.`,
+                path: req.path
+              },
+              correlationId: tracing?.correlationId ?? import_shared69.GuidHelper.generate(),
+              requestId: network?.requestId ?? import_shared69.GuidHelper.generate(),
+              spanId: tracing?.spanId ?? import_shared69.GuidHelper.generate(),
+              timestamp: (/* @__PURE__ */ new Date()).toISOString()
+            },
+            import_shared69.STATUS_CODES.SERVICE_UNAVAILABLE,
+            {
+              "Content-Type": [network?.formatIndicator ?? "application/json"],
+              "Retry-After": [String(this._opts.windowSeconds)]
+            }
+          );
         const clientIp = network?.clientIp;
         const cacheKey = `rate_limit:${clientIp}`;
         const currentHits = await this._cache.increment(cacheKey, this._opts.windowSeconds);
@@ -3997,7 +3994,7 @@ var init_rate_limiter_middleware = __esm({
               spanId: tracing?.spanId ?? import_shared69.GuidHelper.generate(),
               timestamp: (/* @__PURE__ */ new Date()).toISOString()
             },
-            429,
+            import_shared69.STATUS_CODES.TOO_MANY_REQUESTS,
             {
               "Content-Type": [network?.formatIndicator ?? "application/json"],
               "Retry-After": [String(this._opts.windowSeconds)]
@@ -4219,7 +4216,12 @@ var init_middleware_module = __esm({
         const { HttpHeaderExtractor: HttpHeaderExtractor2 } = await Promise.resolve().then(() => (init_services(), services_exports));
         container.addSingleton(
           TOKENS4.SERVICE_EXTRACTOR,
-          (c) => new HttpHeaderExtractor2(c.resolve(TOKENS4.BEARER_TOKEN_EXTRACTOR), c.resolve("COOKIE_EXTRACTOR"), opts.trustedIpHeader, opts.csrf?.cookieName ?? "__Host-xeno-csrf")
+          (c) => new HttpHeaderExtractor2(
+            c.resolve(TOKENS4.BEARER_TOKEN_EXTRACTOR),
+            c.resolve("COOKIE_EXTRACTOR"),
+            opts.trustedIpHeader,
+            opts.csrf?.cookieName ?? "__Host-xeno-csrf"
+          )
         );
         if (!opts.isLogger) {
           const { LoggerUtils: LoggerUtils2 } = await Promise.resolve().then(() => (init_logger_utils(), logger_utils_exports));
@@ -4238,16 +4240,9 @@ var init_middleware_module = __esm({
             c.resolve(TOKENS4.LOGGER)
           )
         );
-        if (opts.optionsMiddleware) {
-          const { OptionsMiddleware: OptionsMiddleware2 } = await Promise.resolve().then(() => (init_presentation(), presentation_exports));
-          container.addSingleton(
-            TOKENS4.OPTIONS_MIDDLEWARE,
-            (c) => new OptionsMiddleware2(c.resolve(TOKENS4.NETWORK_CONTEXT_ACCESSOR))
-          );
-          middlewares.push(TOKENS4.OPTIONS_MIDDLEWARE);
-        }
         if (!import_shared72.Guards.isNullOrEmpty(opts.allowOrigins)) {
-          if (import_shared72.Guards.isDefined(opts.httpConfig.withCredentials) && opts.allowOrigins.includes("*"))
+          const withCredentials = import_shared72.Guards.isDefined(opts.httpConfig.withCredentials) ? opts.httpConfig.withCredentials : false;
+          if (withCredentials && opts.allowOrigins.includes("*"))
             throw new Error("Wildcard CORS origin is not allowed when withCredentials is set to true");
           const { AllowOrigin: AllowOrigin2 } = await Promise.resolve().then(() => (init_services(), services_exports));
           container.addSingleton("ALLOW_ORIGIN", () => {
@@ -4263,6 +4258,14 @@ var init_middleware_module = __esm({
           });
           middlewares.push(TOKENS4.ALLOW_ORIGIN_MIDDLEWARE);
         }
+        if (opts.optionsMiddleware) {
+          const { OptionsMiddleware: OptionsMiddleware2 } = await Promise.resolve().then(() => (init_presentation(), presentation_exports));
+          container.addSingleton(
+            TOKENS4.OPTIONS_MIDDLEWARE,
+            (c) => new OptionsMiddleware2(c.resolve(TOKENS4.NETWORK_CONTEXT_ACCESSOR))
+          );
+          middlewares.push(TOKENS4.OPTIONS_MIDDLEWARE);
+        }
         if (opts.cors) {
           const { CORSMiddleware: CORSMiddleware2 } = await Promise.resolve().then(() => (init_presentation(), presentation_exports));
           container.addSingleton(TOKENS4.CORS_MIDDLEWARE, (c) => {
@@ -4298,18 +4301,23 @@ var init_middleware_module = __esm({
           const csrf = opts.csrf;
           const { CsrfTokenService: CsrfTokenService2 } = await Promise.resolve().then(() => (init_services(), services_exports));
           container.addSingleton("CSRF_TOKEN_SERVICE", (c) => {
-            return new CsrfTokenService2(
-              csrf.secret,
-              c.resolve("CRYPTO_SERVICE")
-            );
+            return new CsrfTokenService2(csrf.secret, c.resolve("CRYPTO_SERVICE"));
           });
           const { CsrfCookieMiddleware: CsrfCookieMiddleware2 } = await Promise.resolve().then(() => (init_presentation(), presentation_exports));
           container.addSingleton("CSRF_COOKIE_MIDDLEWARE", (c) => {
-            return new CsrfCookieMiddleware2(c.resolve(TOKENS4.REQUEST_CONTEXT), c.resolve("CSRF_TOKEN_SERVICE"), csrf);
+            return new CsrfCookieMiddleware2(
+              c.resolve(TOKENS4.REQUEST_CONTEXT),
+              c.resolve("CSRF_TOKEN_SERVICE"),
+              csrf
+            );
           });
+          middlewares.push("CSRF_COOKIE_MIDDLEWARE");
           const { CsrfMiddleware: CsrfMiddleware2 } = await Promise.resolve().then(() => (init_presentation(), presentation_exports));
           container.addSingleton(TOKENS4.CSRF_MIDDLEWARE, (c) => {
-            return new CsrfMiddleware2(c.resolve(TOKENS4.REQUEST_CONTEXT), c.resolve("CSRF_TOKEN_SERVICE"));
+            return new CsrfMiddleware2(
+              c.resolve(TOKENS4.REQUEST_CONTEXT),
+              c.resolve("CSRF_TOKEN_SERVICE")
+            );
           });
           middlewares.push(TOKENS4.CSRF_MIDDLEWARE);
         }
@@ -4684,7 +4692,9 @@ var AppBuilder = class {
       () => new EnvironmentConfigurationService()
     );
     this._configuration = this._container.resolve(import_shared73.TOKENS.CONFIGURATION_SERVICE);
-    this._middlewareConfig.allowOrigins?.push(this._configuration.get("APP_URL") ?? `http://localhost:${this._configuration.getNumber("PORT", 3e3)}`);
+    this._middlewareConfig.allowOrigins?.push(
+      this._configuration.get("APP_URL") ?? `http://localhost:${this._configuration.getNumber("PORT", 3e3)}`
+    );
   }
   // --- Module Configurations ---
   _modules = [];