azurajs 3.0.7 → 3.0.8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "azurajs",
-  "version": "3.0.7",
+  "version": "3.0.8",
   "description": "Ultra-fast TypeScript-first web framework for Node.js and Bun with decorator-based routing, zero dependencies, and built-in plugin system",
   "main": "dist/index.js",
   "module": "dist/index.mjs",

package/src/core/server.ts

@@ -22,6 +22,7 @@ import type { ControllerMetadata, RouteMeta, RouteMetadata } from "../types/rout
 import type { BuildOpenApiOptions } from "../types/swagger.type.js";
 import { API_OPERATION_KEY, API_TAGS_KEY, METHOD_TAGS_KEY } from "../swagger/constants.js";
 import { buildOpenApiDocument } from "../swagger/openapi-builder.js";
+import { CORSPlugin } from "../plugins/CORSPlugin.js";
 
 function isRouteDocumentMeta(o: unknown): o is RouteMeta {
   if (!o || typeof o !== "object" || Array.isArray(o)) return false;
@@ -82,6 +83,17 @@ export class AzuraServer {
       colors: this.config.logging?.colors,
       timestamp: this.config.logging?.timestamp,
     });
+
+    this.registerPluginsFromConfig();
+  }
+
+  /** Activa plugins declarados em `config.plugins` (ex.: CORS). */
+  private registerPluginsFromConfig(): void {
+    const corsCfg = this.config.plugins?.cors;
+    if (corsCfg && corsCfg.enabled !== false) {
+      const { enabled: _e, ...corsOptions } = corsCfg;
+      this.plugins.push(CORSPlugin(corsOptions));
+    }
   }
 
   use(handler: MiddlewareHandler | PluginHandler): this {
@@ -457,7 +469,7 @@ export class AzuraServer {
       const chain = this.compileMiddlewareChain();
       await chain(azReq, azRes);
 
-      if (azRes.sent) return;
+      if (azRes.sent || res.headersSent) return;
 
       const method = (req.method ?? "GET").toUpperCase() as HttpMethod;
       const match = this.router.find(method, pathname);

package/src/plugins/CORSPlugin.ts

@@ -1,3 +1,4 @@
+import type { AzuraResponse } from "../types/common.type.js";
 import type { CORSOptions, PluginHandler } from "../types/plugins/plugin.type.js";
 
 const DEFAULT_METHODS = ["GET", "POST", "PUT", "DELETE", "PATCH", "HEAD", "OPTIONS"];
@@ -45,6 +46,7 @@ export function CORSPlugin(options: CORSOptions = {}): PluginHandler {
       res.setHeader("Access-Control-Max-Age", String(maxAge));
 
       if (!preflightContinue) {
+        (res as AzuraResponse).sent = true;
         res.statusCode = 204;
         res.end();
         return;