naystack 1.5.33 → 1.5.35
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/auth/email/index.cjs.js +12 -19
- package/dist/auth/email/index.esm.js +12 -19
- package/dist/auth/index.cjs.js +12 -19
- package/dist/auth/index.esm.js +12 -19
- package/dist/graphql/index.cjs.js +16 -31
- package/dist/graphql/index.esm.js +16 -31
- package/dist/graphql/init.cjs.js +16 -31
- package/dist/graphql/init.d.mts +1 -1
- package/dist/graphql/init.d.ts +1 -1
- package/dist/graphql/init.esm.js +16 -31
- package/dist/utils/route.cjs.js +12 -19
- package/dist/utils/route.d.mts +1 -1
- package/dist/utils/route.d.ts +1 -1
- package/dist/utils/route.esm.js +12 -19
- package/package.json +1 -1
|
@@ -57,26 +57,19 @@ function getCorsHeaders(origin, allowedOrigins) {
|
|
|
57
57
|
}
|
|
58
58
|
function withCors(handler, allowedOrigins) {
|
|
59
59
|
if (!allowedOrigins?.length) return handler;
|
|
60
|
-
return ((req) => {
|
|
61
|
-
|
|
62
|
-
|
|
63
|
-
|
|
64
|
-
|
|
65
|
-
|
|
66
|
-
|
|
67
|
-
|
|
68
|
-
|
|
69
|
-
|
|
70
|
-
|
|
71
|
-
headers: new Headers(response.headers)
|
|
72
|
-
});
|
|
73
|
-
Object.entries(corsHeaders).forEach(([key, value]) => {
|
|
74
|
-
newResponse.headers.set(key, value);
|
|
75
|
-
});
|
|
76
|
-
return newResponse;
|
|
77
|
-
}
|
|
78
|
-
return response;
|
|
60
|
+
return (async (req) => {
|
|
61
|
+
const origin = req.headers.get("origin");
|
|
62
|
+
const isSameOrigin = origin === req.nextUrl.origin;
|
|
63
|
+
const corsHeaders = isSameOrigin ? null : getCorsHeaders(origin, allowedOrigins);
|
|
64
|
+
if (origin && !isSameOrigin && !corsHeaders) {
|
|
65
|
+
return new import_server.NextResponse(null, { status: 403 });
|
|
66
|
+
}
|
|
67
|
+
const response = await handler(req);
|
|
68
|
+
if (!response || !corsHeaders) return response;
|
|
69
|
+
Object.entries(corsHeaders).forEach(([key, value]) => {
|
|
70
|
+
response.headers.set(key, value);
|
|
79
71
|
});
|
|
72
|
+
return response;
|
|
80
73
|
});
|
|
81
74
|
}
|
|
82
75
|
|
|
@@ -20,26 +20,19 @@ function getCorsHeaders(origin, allowedOrigins) {
|
|
|
20
20
|
}
|
|
21
21
|
function withCors(handler, allowedOrigins) {
|
|
22
22
|
if (!allowedOrigins?.length) return handler;
|
|
23
|
-
return ((req) => {
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
headers: new Headers(response.headers)
|
|
35
|
-
});
|
|
36
|
-
Object.entries(corsHeaders).forEach(([key, value]) => {
|
|
37
|
-
newResponse.headers.set(key, value);
|
|
38
|
-
});
|
|
39
|
-
return newResponse;
|
|
40
|
-
}
|
|
41
|
-
return response;
|
|
23
|
+
return (async (req) => {
|
|
24
|
+
const origin = req.headers.get("origin");
|
|
25
|
+
const isSameOrigin = origin === req.nextUrl.origin;
|
|
26
|
+
const corsHeaders = isSameOrigin ? null : getCorsHeaders(origin, allowedOrigins);
|
|
27
|
+
if (origin && !isSameOrigin && !corsHeaders) {
|
|
28
|
+
return new NextResponse(null, { status: 403 });
|
|
29
|
+
}
|
|
30
|
+
const response = await handler(req);
|
|
31
|
+
if (!response || !corsHeaders) return response;
|
|
32
|
+
Object.entries(corsHeaders).forEach(([key, value]) => {
|
|
33
|
+
response.headers.set(key, value);
|
|
42
34
|
});
|
|
35
|
+
return response;
|
|
43
36
|
});
|
|
44
37
|
}
|
|
45
38
|
|
package/dist/auth/index.cjs.js
CHANGED
|
@@ -63,26 +63,19 @@ function getCorsHeaders(origin, allowedOrigins) {
|
|
|
63
63
|
}
|
|
64
64
|
function withCors(handler, allowedOrigins) {
|
|
65
65
|
if (!allowedOrigins?.length) return handler;
|
|
66
|
-
return ((req) => {
|
|
67
|
-
|
|
68
|
-
|
|
69
|
-
|
|
70
|
-
|
|
71
|
-
|
|
72
|
-
|
|
73
|
-
|
|
74
|
-
|
|
75
|
-
|
|
76
|
-
|
|
77
|
-
headers: new Headers(response.headers)
|
|
78
|
-
});
|
|
79
|
-
Object.entries(corsHeaders).forEach(([key, value]) => {
|
|
80
|
-
newResponse.headers.set(key, value);
|
|
81
|
-
});
|
|
82
|
-
return newResponse;
|
|
83
|
-
}
|
|
84
|
-
return response;
|
|
66
|
+
return (async (req) => {
|
|
67
|
+
const origin = req.headers.get("origin");
|
|
68
|
+
const isSameOrigin = origin === req.nextUrl.origin;
|
|
69
|
+
const corsHeaders = isSameOrigin ? null : getCorsHeaders(origin, allowedOrigins);
|
|
70
|
+
if (origin && !isSameOrigin && !corsHeaders) {
|
|
71
|
+
return new import_server.NextResponse(null, { status: 403 });
|
|
72
|
+
}
|
|
73
|
+
const response = await handler(req);
|
|
74
|
+
if (!response || !corsHeaders) return response;
|
|
75
|
+
Object.entries(corsHeaders).forEach(([key, value]) => {
|
|
76
|
+
response.headers.set(key, value);
|
|
85
77
|
});
|
|
78
|
+
return response;
|
|
86
79
|
});
|
|
87
80
|
}
|
|
88
81
|
|
package/dist/auth/index.esm.js
CHANGED
|
@@ -20,26 +20,19 @@ function getCorsHeaders(origin, allowedOrigins) {
|
|
|
20
20
|
}
|
|
21
21
|
function withCors(handler, allowedOrigins) {
|
|
22
22
|
if (!allowedOrigins?.length) return handler;
|
|
23
|
-
return ((req) => {
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
headers: new Headers(response.headers)
|
|
35
|
-
});
|
|
36
|
-
Object.entries(corsHeaders).forEach(([key, value]) => {
|
|
37
|
-
newResponse.headers.set(key, value);
|
|
38
|
-
});
|
|
39
|
-
return newResponse;
|
|
40
|
-
}
|
|
41
|
-
return response;
|
|
23
|
+
return (async (req) => {
|
|
24
|
+
const origin = req.headers.get("origin");
|
|
25
|
+
const isSameOrigin = origin === req.nextUrl.origin;
|
|
26
|
+
const corsHeaders = isSameOrigin ? null : getCorsHeaders(origin, allowedOrigins);
|
|
27
|
+
if (origin && !isSameOrigin && !corsHeaders) {
|
|
28
|
+
return new NextResponse(null, { status: 403 });
|
|
29
|
+
}
|
|
30
|
+
const response = await handler(req);
|
|
31
|
+
if (!response || !corsHeaders) return response;
|
|
32
|
+
Object.entries(corsHeaders).forEach(([key, value]) => {
|
|
33
|
+
response.headers.set(key, value);
|
|
42
34
|
});
|
|
35
|
+
return response;
|
|
43
36
|
});
|
|
44
37
|
}
|
|
45
38
|
|
|
@@ -645,26 +645,19 @@ function getCorsHeaders(origin, allowedOrigins) {
|
|
|
645
645
|
}
|
|
646
646
|
function withCors(handler, allowedOrigins) {
|
|
647
647
|
if (!allowedOrigins?.length) return handler;
|
|
648
|
-
return ((req) => {
|
|
649
|
-
|
|
650
|
-
|
|
651
|
-
|
|
652
|
-
|
|
653
|
-
|
|
654
|
-
|
|
655
|
-
|
|
656
|
-
|
|
657
|
-
|
|
658
|
-
|
|
659
|
-
headers: new Headers(response.headers)
|
|
660
|
-
});
|
|
661
|
-
Object.entries(corsHeaders).forEach(([key, value]) => {
|
|
662
|
-
newResponse.headers.set(key, value);
|
|
663
|
-
});
|
|
664
|
-
return newResponse;
|
|
665
|
-
}
|
|
666
|
-
return response;
|
|
648
|
+
return (async (req) => {
|
|
649
|
+
const origin = req.headers.get("origin");
|
|
650
|
+
const isSameOrigin = origin === req.nextUrl.origin;
|
|
651
|
+
const corsHeaders = isSameOrigin ? null : getCorsHeaders(origin, allowedOrigins);
|
|
652
|
+
if (origin && !isSameOrigin && !corsHeaders) {
|
|
653
|
+
return new import_server.NextResponse(null, { status: 403 });
|
|
654
|
+
}
|
|
655
|
+
const response = await handler(req);
|
|
656
|
+
if (!response || !corsHeaders) return response;
|
|
657
|
+
Object.entries(corsHeaders).forEach(([key, value]) => {
|
|
658
|
+
response.headers.set(key, value);
|
|
667
659
|
});
|
|
660
|
+
return response;
|
|
668
661
|
});
|
|
669
662
|
}
|
|
670
663
|
|
|
@@ -751,18 +744,10 @@ async function initGraphQLServer({
|
|
|
751
744
|
return {
|
|
752
745
|
GET: withCors((request) => handler(request), allowedOrigins),
|
|
753
746
|
POST: withCors((request) => handler(request), allowedOrigins),
|
|
754
|
-
|
|
755
|
-
|
|
756
|
-
|
|
757
|
-
|
|
758
|
-
allowedOrigins
|
|
759
|
-
);
|
|
760
|
-
return new import_server5.NextResponse(null, {
|
|
761
|
-
status: 204,
|
|
762
|
-
headers: corsHeaders ?? void 0
|
|
763
|
-
});
|
|
764
|
-
}
|
|
765
|
-
} : {}
|
|
747
|
+
OPTIONS: withCors(
|
|
748
|
+
() => new import_server5.NextResponse(null, { status: 204 }),
|
|
749
|
+
allowedOrigins
|
|
750
|
+
)
|
|
766
751
|
};
|
|
767
752
|
}
|
|
768
753
|
|
|
@@ -632,26 +632,19 @@ function getCorsHeaders(origin, allowedOrigins) {
|
|
|
632
632
|
}
|
|
633
633
|
function withCors(handler, allowedOrigins) {
|
|
634
634
|
if (!allowedOrigins?.length) return handler;
|
|
635
|
-
return ((req) => {
|
|
636
|
-
|
|
637
|
-
|
|
638
|
-
|
|
639
|
-
|
|
640
|
-
|
|
641
|
-
|
|
642
|
-
|
|
643
|
-
|
|
644
|
-
|
|
645
|
-
|
|
646
|
-
headers: new Headers(response.headers)
|
|
647
|
-
});
|
|
648
|
-
Object.entries(corsHeaders).forEach(([key, value]) => {
|
|
649
|
-
newResponse.headers.set(key, value);
|
|
650
|
-
});
|
|
651
|
-
return newResponse;
|
|
652
|
-
}
|
|
653
|
-
return response;
|
|
635
|
+
return (async (req) => {
|
|
636
|
+
const origin = req.headers.get("origin");
|
|
637
|
+
const isSameOrigin = origin === req.nextUrl.origin;
|
|
638
|
+
const corsHeaders = isSameOrigin ? null : getCorsHeaders(origin, allowedOrigins);
|
|
639
|
+
if (origin && !isSameOrigin && !corsHeaders) {
|
|
640
|
+
return new NextResponse(null, { status: 403 });
|
|
641
|
+
}
|
|
642
|
+
const response = await handler(req);
|
|
643
|
+
if (!response || !corsHeaders) return response;
|
|
644
|
+
Object.entries(corsHeaders).forEach(([key, value]) => {
|
|
645
|
+
response.headers.set(key, value);
|
|
654
646
|
});
|
|
647
|
+
return response;
|
|
655
648
|
});
|
|
656
649
|
}
|
|
657
650
|
|
|
@@ -738,18 +731,10 @@ async function initGraphQLServer({
|
|
|
738
731
|
return {
|
|
739
732
|
GET: withCors((request) => handler(request), allowedOrigins),
|
|
740
733
|
POST: withCors((request) => handler(request), allowedOrigins),
|
|
741
|
-
|
|
742
|
-
|
|
743
|
-
|
|
744
|
-
|
|
745
|
-
allowedOrigins
|
|
746
|
-
);
|
|
747
|
-
return new NextResponse4(null, {
|
|
748
|
-
status: 204,
|
|
749
|
-
headers: corsHeaders ?? void 0
|
|
750
|
-
});
|
|
751
|
-
}
|
|
752
|
-
} : {}
|
|
734
|
+
OPTIONS: withCors(
|
|
735
|
+
() => new NextResponse4(null, { status: 204 }),
|
|
736
|
+
allowedOrigins
|
|
737
|
+
)
|
|
753
738
|
};
|
|
754
739
|
}
|
|
755
740
|
|
package/dist/graphql/init.cjs.js
CHANGED
|
@@ -98,26 +98,19 @@ function getCorsHeaders(origin, allowedOrigins) {
|
|
|
98
98
|
}
|
|
99
99
|
function withCors(handler, allowedOrigins) {
|
|
100
100
|
if (!allowedOrigins?.length) return handler;
|
|
101
|
-
return ((req) => {
|
|
102
|
-
|
|
103
|
-
|
|
104
|
-
|
|
105
|
-
|
|
106
|
-
|
|
107
|
-
|
|
108
|
-
|
|
109
|
-
|
|
110
|
-
|
|
111
|
-
|
|
112
|
-
headers: new Headers(response.headers)
|
|
113
|
-
});
|
|
114
|
-
Object.entries(corsHeaders).forEach(([key, value]) => {
|
|
115
|
-
newResponse.headers.set(key, value);
|
|
116
|
-
});
|
|
117
|
-
return newResponse;
|
|
118
|
-
}
|
|
119
|
-
return response;
|
|
101
|
+
return (async (req) => {
|
|
102
|
+
const origin = req.headers.get("origin");
|
|
103
|
+
const isSameOrigin = origin === req.nextUrl.origin;
|
|
104
|
+
const corsHeaders = isSameOrigin ? null : getCorsHeaders(origin, allowedOrigins);
|
|
105
|
+
if (origin && !isSameOrigin && !corsHeaders) {
|
|
106
|
+
return new import_server.NextResponse(null, { status: 403 });
|
|
107
|
+
}
|
|
108
|
+
const response = await handler(req);
|
|
109
|
+
if (!response || !corsHeaders) return response;
|
|
110
|
+
Object.entries(corsHeaders).forEach(([key, value]) => {
|
|
111
|
+
response.headers.set(key, value);
|
|
120
112
|
});
|
|
113
|
+
return response;
|
|
121
114
|
});
|
|
122
115
|
}
|
|
123
116
|
|
|
@@ -204,18 +197,10 @@ async function initGraphQLServer({
|
|
|
204
197
|
return {
|
|
205
198
|
GET: withCors((request) => handler(request), allowedOrigins),
|
|
206
199
|
POST: withCors((request) => handler(request), allowedOrigins),
|
|
207
|
-
|
|
208
|
-
|
|
209
|
-
|
|
210
|
-
|
|
211
|
-
allowedOrigins
|
|
212
|
-
);
|
|
213
|
-
return new import_server5.NextResponse(null, {
|
|
214
|
-
status: 204,
|
|
215
|
-
headers: corsHeaders ?? void 0
|
|
216
|
-
});
|
|
217
|
-
}
|
|
218
|
-
} : {}
|
|
200
|
+
OPTIONS: withCors(
|
|
201
|
+
() => new import_server5.NextResponse(null, { status: 204 }),
|
|
202
|
+
allowedOrigins
|
|
203
|
+
)
|
|
219
204
|
};
|
|
220
205
|
}
|
|
221
206
|
// Annotate the CommonJS export names for ESM import in node:
|
package/dist/graphql/init.d.mts
CHANGED
|
@@ -42,9 +42,9 @@ declare function initGraphQLServer({ authChecker, resolvers, plugins, getContext
|
|
|
42
42
|
getContext?: (req: NextRequest) => Promise<any> | any;
|
|
43
43
|
allowedOrigins?: string[];
|
|
44
44
|
}): Promise<{
|
|
45
|
-
OPTIONS?: ((req: NextRequest) => NextResponse<unknown>) | undefined;
|
|
46
45
|
GET: (request: NextRequest) => Promise<Response>;
|
|
47
46
|
POST: (request: NextRequest) => Promise<Response>;
|
|
47
|
+
OPTIONS: () => NextResponse<unknown>;
|
|
48
48
|
}>;
|
|
49
49
|
|
|
50
50
|
export { initGraphQLServer };
|
package/dist/graphql/init.d.ts
CHANGED
|
@@ -42,9 +42,9 @@ declare function initGraphQLServer({ authChecker, resolvers, plugins, getContext
|
|
|
42
42
|
getContext?: (req: NextRequest) => Promise<any> | any;
|
|
43
43
|
allowedOrigins?: string[];
|
|
44
44
|
}): Promise<{
|
|
45
|
-
OPTIONS?: ((req: NextRequest) => NextResponse<unknown>) | undefined;
|
|
46
45
|
GET: (request: NextRequest) => Promise<Response>;
|
|
47
46
|
POST: (request: NextRequest) => Promise<Response>;
|
|
47
|
+
OPTIONS: () => NextResponse<unknown>;
|
|
48
48
|
}>;
|
|
49
49
|
|
|
50
50
|
export { initGraphQLServer };
|
package/dist/graphql/init.esm.js
CHANGED
|
@@ -79,26 +79,19 @@ function getCorsHeaders(origin, allowedOrigins) {
|
|
|
79
79
|
}
|
|
80
80
|
function withCors(handler, allowedOrigins) {
|
|
81
81
|
if (!allowedOrigins?.length) return handler;
|
|
82
|
-
return ((req) => {
|
|
83
|
-
|
|
84
|
-
|
|
85
|
-
|
|
86
|
-
|
|
87
|
-
|
|
88
|
-
|
|
89
|
-
|
|
90
|
-
|
|
91
|
-
|
|
92
|
-
|
|
93
|
-
headers: new Headers(response.headers)
|
|
94
|
-
});
|
|
95
|
-
Object.entries(corsHeaders).forEach(([key, value]) => {
|
|
96
|
-
newResponse.headers.set(key, value);
|
|
97
|
-
});
|
|
98
|
-
return newResponse;
|
|
99
|
-
}
|
|
100
|
-
return response;
|
|
82
|
+
return (async (req) => {
|
|
83
|
+
const origin = req.headers.get("origin");
|
|
84
|
+
const isSameOrigin = origin === req.nextUrl.origin;
|
|
85
|
+
const corsHeaders = isSameOrigin ? null : getCorsHeaders(origin, allowedOrigins);
|
|
86
|
+
if (origin && !isSameOrigin && !corsHeaders) {
|
|
87
|
+
return new NextResponse(null, { status: 403 });
|
|
88
|
+
}
|
|
89
|
+
const response = await handler(req);
|
|
90
|
+
if (!response || !corsHeaders) return response;
|
|
91
|
+
Object.entries(corsHeaders).forEach(([key, value]) => {
|
|
92
|
+
response.headers.set(key, value);
|
|
101
93
|
});
|
|
94
|
+
return response;
|
|
102
95
|
});
|
|
103
96
|
}
|
|
104
97
|
|
|
@@ -185,18 +178,10 @@ async function initGraphQLServer({
|
|
|
185
178
|
return {
|
|
186
179
|
GET: withCors((request) => handler(request), allowedOrigins),
|
|
187
180
|
POST: withCors((request) => handler(request), allowedOrigins),
|
|
188
|
-
|
|
189
|
-
|
|
190
|
-
|
|
191
|
-
|
|
192
|
-
allowedOrigins
|
|
193
|
-
);
|
|
194
|
-
return new NextResponse4(null, {
|
|
195
|
-
status: 204,
|
|
196
|
-
headers: corsHeaders ?? void 0
|
|
197
|
-
});
|
|
198
|
-
}
|
|
199
|
-
} : {}
|
|
181
|
+
OPTIONS: withCors(
|
|
182
|
+
() => new NextResponse4(null, { status: 204 }),
|
|
183
|
+
allowedOrigins
|
|
184
|
+
)
|
|
200
185
|
};
|
|
201
186
|
}
|
|
202
187
|
export {
|
package/dist/utils/route.cjs.js
CHANGED
|
@@ -41,26 +41,19 @@ function getCorsHeaders(origin, allowedOrigins) {
|
|
|
41
41
|
}
|
|
42
42
|
function withCors(handler, allowedOrigins) {
|
|
43
43
|
if (!allowedOrigins?.length) return handler;
|
|
44
|
-
return ((req) => {
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
|
|
54
|
-
|
|
55
|
-
headers: new Headers(response.headers)
|
|
56
|
-
});
|
|
57
|
-
Object.entries(corsHeaders).forEach(([key, value]) => {
|
|
58
|
-
newResponse.headers.set(key, value);
|
|
59
|
-
});
|
|
60
|
-
return newResponse;
|
|
61
|
-
}
|
|
62
|
-
return response;
|
|
44
|
+
return (async (req) => {
|
|
45
|
+
const origin = req.headers.get("origin");
|
|
46
|
+
const isSameOrigin = origin === req.nextUrl.origin;
|
|
47
|
+
const corsHeaders = isSameOrigin ? null : getCorsHeaders(origin, allowedOrigins);
|
|
48
|
+
if (origin && !isSameOrigin && !corsHeaders) {
|
|
49
|
+
return new import_server.NextResponse(null, { status: 403 });
|
|
50
|
+
}
|
|
51
|
+
const response = await handler(req);
|
|
52
|
+
if (!response || !corsHeaders) return response;
|
|
53
|
+
Object.entries(corsHeaders).forEach(([key, value]) => {
|
|
54
|
+
response.headers.set(key, value);
|
|
63
55
|
});
|
|
56
|
+
return response;
|
|
64
57
|
});
|
|
65
58
|
}
|
|
66
59
|
// Annotate the CommonJS export names for ESM import in node:
|
package/dist/utils/route.d.mts
CHANGED
|
@@ -6,6 +6,6 @@ declare function getCorsHeaders(origin: string | null, allowedOrigins: string[])
|
|
|
6
6
|
"Access-Control-Allow-Headers": string;
|
|
7
7
|
"Access-Control-Allow-Credentials": string;
|
|
8
8
|
} | null;
|
|
9
|
-
declare function withCors<T extends (req: NextRequest) => Promise<NextResponse | Response | undefined
|
|
9
|
+
declare function withCors<T extends (req: NextRequest) => Promise<NextResponse | Response | undefined> | NextResponse | Response | undefined>(handler: T, allowedOrigins?: string[]): T;
|
|
10
10
|
|
|
11
11
|
export { getCorsHeaders, withCors };
|
package/dist/utils/route.d.ts
CHANGED
|
@@ -6,6 +6,6 @@ declare function getCorsHeaders(origin: string | null, allowedOrigins: string[])
|
|
|
6
6
|
"Access-Control-Allow-Headers": string;
|
|
7
7
|
"Access-Control-Allow-Credentials": string;
|
|
8
8
|
} | null;
|
|
9
|
-
declare function withCors<T extends (req: NextRequest) => Promise<NextResponse | Response | undefined
|
|
9
|
+
declare function withCors<T extends (req: NextRequest) => Promise<NextResponse | Response | undefined> | NextResponse | Response | undefined>(handler: T, allowedOrigins?: string[]): T;
|
|
10
10
|
|
|
11
11
|
export { getCorsHeaders, withCors };
|
package/dist/utils/route.esm.js
CHANGED
|
@@ -16,26 +16,19 @@ function getCorsHeaders(origin, allowedOrigins) {
|
|
|
16
16
|
}
|
|
17
17
|
function withCors(handler, allowedOrigins) {
|
|
18
18
|
if (!allowedOrigins?.length) return handler;
|
|
19
|
-
return ((req) => {
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
headers: new Headers(response.headers)
|
|
31
|
-
});
|
|
32
|
-
Object.entries(corsHeaders).forEach(([key, value]) => {
|
|
33
|
-
newResponse.headers.set(key, value);
|
|
34
|
-
});
|
|
35
|
-
return newResponse;
|
|
36
|
-
}
|
|
37
|
-
return response;
|
|
19
|
+
return (async (req) => {
|
|
20
|
+
const origin = req.headers.get("origin");
|
|
21
|
+
const isSameOrigin = origin === req.nextUrl.origin;
|
|
22
|
+
const corsHeaders = isSameOrigin ? null : getCorsHeaders(origin, allowedOrigins);
|
|
23
|
+
if (origin && !isSameOrigin && !corsHeaders) {
|
|
24
|
+
return new NextResponse(null, { status: 403 });
|
|
25
|
+
}
|
|
26
|
+
const response = await handler(req);
|
|
27
|
+
if (!response || !corsHeaders) return response;
|
|
28
|
+
Object.entries(corsHeaders).forEach(([key, value]) => {
|
|
29
|
+
response.headers.set(key, value);
|
|
38
30
|
});
|
|
31
|
+
return response;
|
|
39
32
|
});
|
|
40
33
|
}
|
|
41
34
|
export {
|