azurajs 3.0.7 → 3.0.8

package/dist/index.mjs

@@ -807,6 +807,54 @@ function buildOpenApiDocument(routes, options) {
   };
 }
 
+// src/plugins/CORSPlugin.ts
+var DEFAULT_METHODS = ["GET", "POST", "PUT", "DELETE", "PATCH", "HEAD", "OPTIONS"];
+var DEFAULT_HEADERS = ["Content-Type", "Authorization", "Accept", "X-Requested-With"];
+function CORSPlugin(options = {}) {
+  const {
+    origins = "*",
+    methods = DEFAULT_METHODS,
+    allowedHeaders = DEFAULT_HEADERS,
+    exposedHeaders = [],
+    credentials = false,
+    maxAge = 86400,
+    preflightContinue = false
+  } = options;
+  const methodsStr = methods.join(", ");
+  const headersStr = allowedHeaders.join(", ");
+  const exposedStr = exposedHeaders.length > 0 ? exposedHeaders.join(", ") : "";
+  const isAllowedOrigin = (origin) => {
+    if (origins === "*") return credentials ? origin : "*";
+    if (typeof origins === "function") return origins(origin) ? origin : false;
+    if (typeof origins === "string") return origin === origins ? origin : false;
+    if (Array.isArray(origins)) return origins.includes(origin) ? origin : false;
+    return false;
+  };
+  return (ctx, next) => {
+    const { req, res } = ctx;
+    const origin = req.headers.origin ?? "";
+    const allowedOrigin = isAllowedOrigin(origin);
+    if (allowedOrigin) {
+      res.setHeader("Access-Control-Allow-Origin", allowedOrigin);
+      if (credentials) res.setHeader("Access-Control-Allow-Credentials", "true");
+      if (exposedStr) res.setHeader("Access-Control-Expose-Headers", exposedStr);
+      if (allowedOrigin !== "*") res.setHeader("Vary", "Origin");
+    }
+    if (req.method === "OPTIONS") {
+      res.setHeader("Access-Control-Allow-Methods", methodsStr);
+      res.setHeader("Access-Control-Allow-Headers", headersStr);
+      res.setHeader("Access-Control-Max-Age", String(maxAge));
+      if (!preflightContinue) {
+        res.sent = true;
+        res.statusCode = 204;
+        res.end();
+        return;
+      }
+    }
+    next();
+  };
+}
+
 // src/core/server.ts
 function isRouteDocumentMeta(o) {
   if (!o || typeof o !== "object" || Array.isArray(o)) return false;
@@ -853,6 +901,15 @@ var AzuraServer = class {
       colors: this.config.logging?.colors,
       timestamp: this.config.logging?.timestamp
     });
+    this.registerPluginsFromConfig();
+  }
+  /** Activa plugins declarados em `config.plugins` (ex.: CORS). */
+  registerPluginsFromConfig() {
+    const corsCfg = this.config.plugins?.cors;
+    if (corsCfg && corsCfg.enabled !== false) {
+      const { enabled: _e, ...corsOptions } = corsCfg;
+      this.plugins.push(CORSPlugin(corsOptions));
+    }
   }
   use(handler) {
     this.compiledChain = null;
@@ -1170,7 +1227,7 @@ var AzuraServer = class {
     try {
       const chain = this.compileMiddlewareChain();
       await chain(azReq, azRes);
-      if (azRes.sent) return;
+      if (azRes.sent || res.headersSent) return;
       const method = (req.method ?? "GET").toUpperCase();
       const match = this.router.find(method, pathname);
       if (!match) {
@@ -1456,53 +1513,6 @@ function ApiOperation(meta) {
   };
 }
 
-// src/plugins/CORSPlugin.ts
-var DEFAULT_METHODS = ["GET", "POST", "PUT", "DELETE", "PATCH", "HEAD", "OPTIONS"];
-var DEFAULT_HEADERS = ["Content-Type", "Authorization", "Accept", "X-Requested-With"];
-function CORSPlugin(options = {}) {
-  const {
-    origins = "*",
-    methods = DEFAULT_METHODS,
-    allowedHeaders = DEFAULT_HEADERS,
-    exposedHeaders = [],
-    credentials = false,
-    maxAge = 86400,
-    preflightContinue = false
-  } = options;
-  const methodsStr = methods.join(", ");
-  const headersStr = allowedHeaders.join(", ");
-  const exposedStr = exposedHeaders.length > 0 ? exposedHeaders.join(", ") : "";
-  const isAllowedOrigin = (origin) => {
-    if (origins === "*") return credentials ? origin : "*";
-    if (typeof origins === "function") return origins(origin) ? origin : false;
-    if (typeof origins === "string") return origin === origins ? origin : false;
-    if (Array.isArray(origins)) return origins.includes(origin) ? origin : false;
-    return false;
-  };
-  return (ctx, next) => {
-    const { req, res } = ctx;
-    const origin = req.headers.origin ?? "";
-    const allowedOrigin = isAllowedOrigin(origin);
-    if (allowedOrigin) {
-      res.setHeader("Access-Control-Allow-Origin", allowedOrigin);
-      if (credentials) res.setHeader("Access-Control-Allow-Credentials", "true");
-      if (exposedStr) res.setHeader("Access-Control-Expose-Headers", exposedStr);
-      if (allowedOrigin !== "*") res.setHeader("Vary", "Origin");
-    }
-    if (req.method === "OPTIONS") {
-      res.setHeader("Access-Control-Allow-Methods", methodsStr);
-      res.setHeader("Access-Control-Allow-Headers", headersStr);
-      res.setHeader("Access-Control-Max-Age", String(maxAge));
-      if (!preflightContinue) {
-        res.statusCode = 204;
-        res.end();
-        return;
-      }
-    }
-    next();
-  };
-}
-
 // src/plugins/RateLimitPlugin.ts
 var MemoryStore = class {
   store = /* @__PURE__ */ new Map();