jsql-neo 5.1.0 → 5.1.1

package/README.md

@@ -13,6 +13,8 @@
 
 ## Why JSQL-NEO?
 
+My web ： https://jsql.vexify.top/
+
 Most embedded databases make you choose: *native speed*, *portable WASM*, or *a familiar file format*.
 JSQL-NEO gives you **all three in one install** — plus drop-in compatibility with the **two most popular
 database protocols in the world**.

package/bin/jsql

@@ -21,7 +21,7 @@ const manager = new ModuleManager();
 
 const RAW_ARGV = process.argv.slice(2);
 
-const cli = yaggs()
+const cli = yaggs({ pkg: require('../package.json') })
   .usage('jsql <command> [options]')
   .option('help', { alias: ['h'], type: 'boolean', description: 'Show help' })
   .command('mod', 'Module management', (sub) => {

package/index.js

@@ -1,5 +1,5 @@
 /**
- * JSQL-NEO v5.1.0 — Rust-Powered Embedded Database (WASM + HTTP)
+ * JSQL-NEO v5.1.1 — Rust-Powered Embedded Database (WASM + HTTP)
  *
  * @example
  * const jsql = require('jsql-neo');

package/lib/web_ui.js

@@ -116,7 +116,8 @@ class WebUI {
     this.readonly = !!opts.readonly;
     this.host = opts.host || '127.0.0.1';
     this.authToken = opts.authToken || null;
-    this.allowOrigin = opts.allowOrigin || (this.authToken ? null : '*');
+    this.allowOrigin = opts.allowOrigin || null;
+    this.echoOrigin = !opts.allowOrigin && !!this.authToken;
     this.cache = new Map();
   }
 
@@ -157,12 +158,16 @@ class WebUI {
   async handle(req, res) {
     const url = new URL(req.url, 'http://x');
     const reqOrigin = req.headers.origin;
-    const corsOrigin = this.allowOrigin === null && reqOrigin ? reqOrigin : (this.allowOrigin || '*');
+    let corsOrigin = null;
+    if (this.allowOrigin) corsOrigin = this.allowOrigin;
+    else if (this.echoOrigin && reqOrigin) corsOrigin = reqOrigin;
     const send = (code, obj) => {
       const body = JSON.stringify(obj);
       const headers = { 'Content-Type': 'application/json' };
-      if (this.allowOrigin !== null || reqOrigin) headers['Access-Control-Allow-Origin'] = corsOrigin;
-      if (this.allowOrigin !== null || reqOrigin) headers['Vary'] = 'Origin';
+      if (corsOrigin) {
+        headers['Access-Control-Allow-Origin'] = corsOrigin;
+        headers['Vary'] = 'Origin';
+      }
       res.writeHead(code, headers);
       res.end(body);
     };
@@ -173,12 +178,14 @@ class WebUI {
         return res.end(PAGE);
       }
       if (req.method === 'OPTIONS' && url.pathname.startsWith('/api/')) {
-        res.writeHead(204, {
-          'Access-Control-Allow-Origin': corsOrigin,
-          'Access-Control-Allow-Methods': 'GET,POST,OPTIONS',
-          'Access-Control-Allow-Headers': 'Authorization,Content-Type',
-          'Vary': 'Origin',
-        });
+        const h = {};
+        if (corsOrigin) {
+          h['Access-Control-Allow-Origin'] = corsOrigin;
+          h['Access-Control-Allow-Methods'] = 'GET,POST,OPTIONS';
+          h['Access-Control-Allow-Headers'] = 'Authorization,Content-Type';
+          h['Vary'] = 'Origin';
+        }
+        res.writeHead(204, h);
         return res.end();
       }
       if (this.authToken && url.pathname.startsWith('/api/')) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jsql-neo",
-  "version": "5.1.0",
+  "version": "5.1.1",
   "description": "JSQL-NEO — Rust-powered embedded database with WASM, REST API, B-Tree indexes, WAL, crash recovery",
   "main": "index.js",
   "types": "index.d.ts",