bxo 0.0.5-dev.40 → 0.0.5-dev.42

package/package.json

@@ -1,12 +1,9 @@
 {
   "name": "bxo",
   "module": "index.ts",
-  "version": "0.0.5-dev.40",
+  "version": "0.0.5-dev.42",
   "description": "A simple and lightweight web framework for Bun",
   "type": "module",
-  "devDependencies": {
-    "@types/bun": "latest"
-  },
   "exports": {
     ".": "./index.ts",
     "./plugins": "./plugins/index.ts"
@@ -15,6 +12,7 @@
     "typescript": "^5"
   },
   "dependencies": {
-    "zod": "^3.25.76"
+    "zod": "^3.25.76",
+    "@types/bun": "latest"
   }
 }

package/plugins/cors.ts

@@ -60,67 +60,10 @@ export function cors(options: CORSOptions = {}): any {
   return {
     name: 'cors',
     onRequest: async (ctx: any) => {
-      // Handle preflight OPTIONS request
-      if (ctx.request.method === 'OPTIONS') {
-        const headers: Record<string, string> = {};
-
-        // Get and validate origin
-        const requestOrigin = getRequestOrigin(ctx.request);
-        const validatedOrigin = validateOrigin(requestOrigin, origin);
-
-        if (validatedOrigin) {
-          headers['Access-Control-Allow-Origin'] = validatedOrigin;
-        } else if (typeof origin === 'string' && origin === '*') {
-          headers['Access-Control-Allow-Origin'] = '*';
-        }
-
-        headers['Access-Control-Allow-Methods'] = methods.join(', ');
-        headers['Access-Control-Allow-Headers'] = allowedHeaders.join(', ');
-        
-        if (credentials) {
-          headers['Access-Control-Allow-Credentials'] = 'true';
-        }
-        
-        headers['Access-Control-Max-Age'] = maxAge.toString();
-
-        ctx.set.status = 204;
-        ctx.set.headers = { ...ctx.set.headers, ...headers };
-        
-        throw new Response(null, { status: 204, headers });
-      }
     },
     onResponse: async (ctx: any, response: any) => {
-      const headers: Record<string, string> = {};
-
-      // Get and validate origin for actual requests
-      const requestOrigin = getRequestOrigin(ctx.request);
-      const validatedOrigin = validateOrigin(requestOrigin, origin);
-
-      if (validatedOrigin) {
-        headers['Access-Control-Allow-Origin'] = validatedOrigin;
-      } else if (typeof origin === 'string' && origin === '*') {
-        headers['Access-Control-Allow-Origin'] = '*';
-      }
-
-      if (credentials) {
-        headers['Access-Control-Allow-Credentials'] = 'true';
-      }
-
-      // If response is a Response object, add headers to it
-      if (response instanceof Response) {
-        const newHeaders = new Headers(response.headers);
-        Object.entries(headers).forEach(([key, value]) => {
-          newHeaders.set(key, value);
-        });
-        return new Response(response.body, {
-          status: response.status,
-          statusText: response.statusText,
-          headers: newHeaders
-        });
-      }
-
-      // Otherwise, set headers in context for the framework to handle
-      ctx.set.headers = { ...ctx.set.headers, ...headers };
+      response.headers.set('Access-Control-Allow-Origin', '*');
+      response.headers.set('Access-Control-Allow-Methods', 'GET, POST, PUT, DELETE, OPTIONS');
       return response;
     }
   };