hono 0.0.15 → 0.0.16

package/dist/middleware/cors/cors.d.ts

@@ -0,0 +1,11 @@
+import type { Context } from '../../context';
+declare type CORSOptions = {
+    origin: string;
+    allowMethods?: string[];
+    allowHeaders?: string[];
+    maxAge?: number;
+    credentials?: boolean;
+    exposeHeaders?: string[];
+};
+export declare const cors: (options?: CORSOptions) => (c: Context, next: Function) => Promise<void>;
+export {};

package/dist/middleware/cors/cors.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.cors = void 0;
+const cors = (options) => {
+    const defaults = {
+        origin: '*',
+        allowMethods: ['GET', 'HEAD', 'PUT', 'POST', 'DELETE', 'PATCH'],
+        allowHeaders: [],
+        exposeHeaders: [],
+    };
+    const opts = Object.assign(Object.assign({}, defaults), options);
+    return async (c, next) => {
+        await next();
+        function set(key, value) {
+            c.res.headers.append(key, value);
+        }
+        set('Access-Control-Allow-Origin', opts.origin);
+        // Suppose the server sends a response with an Access-Control-Allow-Origin value with an explicit origin (rather than the "*" wildcard).
+        // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Origin
+        if (opts.origin !== '*') {
+            set('Vary', 'Origin');
+        }
+        if (opts.credentials) {
+            set('Access-Control-Allow-Credentials', 'true');
+        }
+        if (opts.exposeHeaders.length) {
+            set('Access-Control-Expose-Headers', opts.exposeHeaders.join(','));
+        }
+        if (c.req.method === 'OPTIONS') {
+            // Preflight
+            if (opts.maxAge != null) {
+                set('Access-Control-Max-Age', opts.maxAge.toString());
+            }
+            if (opts.allowMethods.length) {
+                set('Access-Control-Allow-Methods', opts.allowMethods.join(','));
+            }
+            let headers = opts.allowHeaders;
+            if (!headers.length) {
+                const requestHeaders = c.req.headers.get('Access-Control-Request-Headers');
+                if (requestHeaders) {
+                    headers = requestHeaders.split(/\s*,\s*/);
+                }
+            }
+            if (headers.length) {
+                set('Access-Control-Allow-Headers', headers.join(','));
+                set('Vary', 'Access-Control-Request-Headers');
+            }
+            c.res = new Response(null, {
+                headers: c.res.headers,
+                status: 204,
+                statusText: c.res.statusText,
+            });
+        }
+    };
+};
+exports.cors = cors;

package/dist/middleware/default.js

@@ -8,9 +8,21 @@ const defaultMiddleware = async (c, next) => {
         return url.searchParams.get(key);
     };
     await next();
+    /*
+    TODO:
+    Adding Content-Length header make it more slower.
+    This should not be default middleware...
     if (c.res.body) {
-        const buff = await c.res.clone().arrayBuffer();
-        c.res.headers.append('Content-Length', buff.byteLength.toString());
+      // Do not clone Response, ex: c.res.clone().arrayBuffer()
+      const response = new Response(c.res.body, {
+        status: c.res.status,
+        statusText: c.res.statusText,
+        headers: c.res.headers,
+      })
+      c.res = response
+      const buff = await c.res.clone().arrayBuffer()
+      c.res.headers.append('Content-Length', buff.byteLength.toString())
     }
+    */
 };
 exports.defaultMiddleware = defaultMiddleware;

package/dist/middleware.d.ts

@@ -12,4 +12,12 @@ export declare class Middleware {
         realm?: string;
     }) => (ctx: import("./context").Context, next: Function) => Promise<any>;
     static bodyParse: () => (ctx: import("./context").Context, next: Function) => Promise<void>;
+    static cors: (options?: {
+        origin: string;
+        allowMethods?: string[];
+        allowHeaders?: string[];
+        maxAge?: number;
+        credentials?: boolean;
+        exposeHeaders?: string[];
+    }) => (c: import("./context").Context, next: Function) => Promise<void>;
 }

package/dist/middleware.js

@@ -6,6 +6,7 @@ const powered_by_1 = require("./middleware/powered-by/powered-by");
 const logger_1 = require("./middleware/logger/logger");
 const basic_auth_1 = require("./middleware/basic-auth/basic-auth");
 const body_parse_1 = require("./middleware/body-parse/body-parse");
+const cors_1 = require("./middleware/cors/cors");
 class Middleware {
 }
 exports.Middleware = Middleware;
@@ -14,3 +15,4 @@ Middleware.poweredBy = powered_by_1.poweredBy;
 Middleware.logger = logger_1.logger;
 Middleware.basicAuth = basic_auth_1.basicAuth;
 Middleware.bodyParse = body_parse_1.bodyParse;
+Middleware.cors = cors_1.cors;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hono",
-  "version": "0.0.15",
+  "version": "0.0.16",
   "description": "[炎] Ultrafast web framework for Cloudflare Workers.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",