elseware-nodejs 1.11.4 → 1.11.6

package/dist/index.cjs

@@ -27,8 +27,7 @@ var juice__default = /*#__PURE__*/_interopDefault(juice);
 var jwt__default = /*#__PURE__*/_interopDefault(jwt);
 var multer__default = /*#__PURE__*/_interopDefault(multer);
 
-// src/core/constants/defaultOrigins.ts
-var DEFAULT_ALLOWED_ORIGINS = ["http://localhost:3000"];
+// src/core/environment/loadEnv.ts
 
 // src/utils/errorToString.ts
 function errorToString(error) {
@@ -4863,41 +4862,52 @@ var SegmentTree = class {
   }
 };
 
-// src/infrastructure/cors/createAllowedOrigins.ts
-function createAllowedOrigins(options = {}) {
-  const { origins, defaults = DEFAULT_ALLOWED_ORIGINS } = options;
-  let allowedOrigins = [];
-  if (typeof origins === "string") {
-    allowedOrigins = origins.split(",").map((origin) => origin.trim()).filter(Boolean);
-  }
-  if (Array.isArray(origins)) {
-    allowedOrigins = origins.map((origin) => origin.trim()).filter(Boolean);
-  }
-  if (allowedOrigins.length === 0) {
-    allowedOrigins = [...defaults];
-  }
-  return allowedOrigins;
+// src/infrastructure/cors/isAllowedOrigin.ts
+function isAllowedOrigin(origin, allowedOrigins) {
+  return allowedOrigins.some((allowedOrigin) => {
+    if (allowedOrigin === "*") {
+      return true;
+    }
+    if (allowedOrigin === origin) {
+      return true;
+    }
+    if (allowedOrigin.startsWith("*.") && origin.endsWith(allowedOrigin.slice(1))) {
+      return true;
+    }
+    return false;
+  });
 }
 
 // src/infrastructure/cors/createCorsOptions.ts
-function createCorsOptions(allowedOrigins) {
+function createCorsOptions(config) {
+  const {
+    allowedOrigins,
+    allowCredentials = true,
+    allowedMethods = ["GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"],
+    allowedHeaders = [
+      "Content-Type",
+      "Authorization",
+      "X-Requested-With",
+      "Accept"
+    ],
+    exposedHeaders = ["Set-Cookie"],
+    optionsSuccessStatus = 204
+  } = config;
   return {
     origin(origin, callback) {
-      if (!origin || allowedOrigins.includes(origin)) {
+      if (!origin) {
+        return callback(null, true);
+      }
+      if (isAllowedOrigin(origin, allowedOrigins)) {
         return callback(null, true);
       }
       return callback(new Error(`CORS blocked: ${origin} is not allowed`));
     },
-    credentials: true,
-    methods: ["GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"],
-    allowedHeaders: [
-      "Content-Type",
-      "Authorization",
-      "X-Requested-With",
-      "Accept"
-    ],
-    exposedHeaders: ["Set-Cookie"],
-    optionsSuccessStatus: 204
+    credentials: allowCredentials,
+    methods: allowedMethods,
+    allowedHeaders,
+    exposedHeaders,
+    optionsSuccessStatus
   };
 }
 
@@ -6358,7 +6368,6 @@ exports.ConsistentHash = ConsistentHash;
 exports.CorrelationId = CorrelationId;
 exports.CountMinSketch = CountMinSketch;
 exports.CrudControllerFactory = CrudControllerFactory;
-exports.DEFAULT_ALLOWED_ORIGINS = DEFAULT_ALLOWED_ORIGINS;
 exports.DEFAULT_LIMIT = DEFAULT_LIMIT;
 exports.DEFAULT_PAGE = DEFAULT_PAGE;
 exports.DEFAULT_SORT_DIRECTION = DEFAULT_SORT_DIRECTION;
@@ -6427,12 +6436,12 @@ exports.TreeNode = TreeNode;
 exports.Trie = Trie;
 exports.ZodValidator = ZodValidator;
 exports.authMiddleware = authMiddleware;
-exports.createAllowedOrigins = createAllowedOrigins;
 exports.createCorsOptions = createCorsOptions;
 exports.createRequestContextMiddleware = createRequestContextMiddleware;
 exports.days = days;
 exports.errorToString = errorToString;
 exports.hours = hours;
+exports.isAllowedOrigin = isAllowedOrigin;
 exports.isJoiSchema = isJoiSchema;
 exports.isZodSchema = isZodSchema;
 exports.loadEnv = loadEnv;