adminizer 4.3.0-build.126 → 4.3.0-build.127

package/interfaces/adminpanelConfig.d.ts

@@ -191,6 +191,13 @@ export interface AdminpanelConfig {
     notifications?: {
         enabled: boolean;
     };
+    cors?: {
+        enabled: boolean;
+        origin?: string;
+        credentials?: boolean;
+        methods?: string[];
+        allowedHeaders?: string[];
+    };
 }
 export interface ModelConfig {
     adapter?: string;

package/lib/Adminizer.js

@@ -150,16 +150,9 @@ export class Adminizer {
             chalk.blue('\nAccess your app at http://localhost:3000'));
     }
     async init(config) {
-        // set cookie parser
-        this.app.use(cookieParser());
         if (!config || Object.keys(config).length === 0) {
             Adminizer.log.warn(`Adminizer init > Adminizer config is emtpy`);
         }
-        // Set vite middleware
-        const isViteDev = process.env.VITE_ENV === "dev";
-        if (isViteDev)
-            await this.viteMiddleware();
-        this.emitter.emit('adminizer:init');
         if (this.config && Object.keys(this.config).length > 0) {
             throw new Error("Config has already been initialized");
         }
@@ -184,6 +177,31 @@ export class Adminizer {
                 set: configForms.set ?? defaultForms.set
             }
         };
+        // Middleware для всех API маршрутов
+        const allowedOrigin = process.env.FRONTEND_URL || 'http://localhost:8080';
+        if (config?.cors?.enabled) {
+            const corsConfig = config.cors;
+            this.app.all(`${this.config.routePrefix}/api/*`, (req, res, next) => {
+                // Устанавливаем CORS заголовки
+                res.header('Access-Control-Allow-Origin', corsConfig.origin || allowedOrigin);
+                res.header('Access-Control-Allow-Credentials', corsConfig.credentials !== false ? 'true' : 'false');
+                res.header('Access-Control-Allow-Methods', corsConfig.methods?.join(',') || 'GET,POST,PUT,DELETE,OPTIONS');
+                res.header('Access-Control-Allow-Headers', corsConfig.allowedHeaders?.join(',') || 'Content-Type,Authorization,X-Requested-With,X-CSRF-Token,x-xsrf-token');
+                // Если это OPTIONS запрос - сразу отвечаем
+                if (req.method === 'OPTIONS') {
+                    return res.status(200).end();
+                }
+                next();
+            });
+            console.log('✅  API CORS middleware enabled');
+        }
+        // set cookie parser
+        this.app.use(cookieParser());
+        // Set vite middleware
+        const isViteDev = process.env.VITE_ENV === "dev";
+        if (isViteDev)
+            await this.viteMiddleware();
+        this.emitter.emit('adminizer:init');
         this.modelHandler = new ModelHandler();
         // TODO: 'hot reload' unbind models & unbind forms
         await bindModels(this);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "adminizer",
   "type": "module",
-  "version": "4.3.0-build.126",
+  "version": "4.3.0-build.127",
   "main": "index.js",
   "exports": {
     ".": "./index.js",

package/system/bindInertia.js

@@ -102,7 +102,7 @@ export function bindInertia(adminizer) {
             enabled: true,
             cookieName: 'XSRF-TOKEN',
             headerName: 'x-xsrf-token'
-        },
+        }
     }));
     adminizer.app.use((req, _, next) => {
         checkAuth(req, adminizer);

package/system/defaults.js

@@ -141,6 +141,9 @@ let adminpanelConfig = {
     notifications: {
         enabled: false
     },
+    cors: {
+        enabled: false,
+    },
     mediamanager: {
         fileStoragePath: '.tmp/public',
     }