solidstep 0.1.1 → 0.1.2

package/README.md

@@ -47,7 +47,6 @@ import { defineConfig } from 'solidstep';
 
 export default defineConfig({
   server: {
-    port: 3000,
     preset: 'node',
   },
   plugins: [

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "solidstep",
-    "version": "0.1.1",
+    "version": "0.1.2",
     "description": "Next Step SolidJS Framework for building web applications.",
     "type": "module",
     "author": "HamzaKV <hamzakv333@gmail.com>",
@@ -45,15 +45,19 @@
         "@vinxi/server-functions": "0.5.1",
         "seroval": "^1.3.2",
         "seroval-plugins": "^1.3.2",
-        "solid-js": "^1.9.7",
         "undici": "^7.15.0",
-        "vinxi": "^0.5.8"
+        "vite-plugin-solid": "^2.11.7"
     },
     "devDependencies": {
         "copyfiles": "^2.4.1",
         "rimraf": "^6.0.1",
+        "solid-js": "^1.9.7",
         "typescript": "^5.8.3",
-        "vite-plugin-solid": "^2.11.7"
+        "vinxi": "^0.5.8"
+    },
+    "peerDependencies": {
+        "solid-js": "^1.9.7",
+        "vinxi": "^0.5.8"
     },
     "engines": {
         "node": ">=20"

package/utils/cors.d.ts

@@ -1,4 +1,4 @@
-export declare const cors: (trustedOrigins: string[]) => (origin: string, isPreflight: boolean) => {
+export declare const cors: (trustedOrigins: string[], allowMethods?: string[], allowHeaders?: string[]) => (origin: string, isPreflight: boolean) => {
     'Access-Control-Allow-Origin': string;
     'Access-Control-Allow-Methods': string;
     'Access-Control-Allow-Headers': string;

package/utils/cors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../../utils/cors.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,IAAI,GAAI,gBAAgB,MAAM,EAAE,MAAM,QAAQ,MAAM,EAAE,aAAa,OAAO;;;;;;;;;;;;CActF,CAAA"}
+{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../../utils/cors.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,IAAI,GACb,gBAAgB,MAAM,EAAE,EACxB,eAAc,MAAM,EAAyD,EAC7E,eAAc,MAAM,EAAsC,MACxD,QAAQ,MAAM,EAAE,aAAa,OAAO;;;;;;;;;;;;CAczC,CAAA"}

package/utils/cors.js

@@ -1,10 +1,10 @@
-export const cors = (trustedOrigins) => (origin, isPreflight) => {
+export const cors = (trustedOrigins, allowMethods = ['GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'OPTIONS'], allowHeaders = ['Content-Type', 'Authorization']) => (origin, isPreflight) => {
     if (trustedOrigins.includes(origin)) {
         if (isPreflight) {
             return {
                 'Access-Control-Allow-Origin': origin,
-                'Access-Control-Allow-Methods': 'GET, POST, PUT, PATCH, DELETE, OPTIONS',
-                'Access-Control-Allow-Headers': 'Content-Type, Authorization',
+                'Access-Control-Allow-Methods': allowMethods.join(', '),
+                'Access-Control-Allow-Headers': allowHeaders.join(', '),
             };
         }
         return {

package/utils/csrf.d.ts

@@ -1,4 +1,4 @@
-export declare const csrf: (trustedOrigins: string[]) => (requestMethod: string, requestUrl: URL, origin?: string, referer?: string) => {
+export declare const csrf: (trustedOrigins: string[], safeMethods?: string[]) => (requestMethod: string, requestUrl: URL, origin?: string, referer?: string) => {
     success: boolean;
     message: string;
 };

package/utils/csrf.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"csrf.d.ts","sourceRoot":"","sources":["../../utils/csrf.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,IAAI,GAAI,gBAAgB,MAAM,EAAE,MAErC,eAAe,MAAM,EACrB,YAAY,GAAG,EACf,SAAS,MAAM,EACf,UAAU,MAAM;;;CAsDnB,CAAC"}
+{"version":3,"file":"csrf.d.ts","sourceRoot":"","sources":["../../utils/csrf.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,IAAI,GACb,gBAAgB,MAAM,EAAE,EACxB,cAAa,MAAM,EAAiB,MAGhC,eAAe,MAAM,EACrB,YAAY,GAAG,EACf,SAAS,MAAM,EACf,UAAU,MAAM;;;CAsDnB,CAAC"}

package/utils/csrf.js

@@ -1,7 +1,7 @@
 const SAFE_METHODS = ['GET', 'OPTIONS', 'HEAD', 'TRACE'];
-export const csrf = (trustedOrigins) => (requestMethod, requestUrl, origin, referer) => {
+export const csrf = (trustedOrigins, safeMethods = SAFE_METHODS) => (requestMethod, requestUrl, origin, referer) => {
     // Check if the request method is safe
-    if (!SAFE_METHODS.includes(requestMethod)) {
+    if (!safeMethods.includes(requestMethod)) {
         // If we have an Origin header, check it against our allowlist.
         if (origin) {
             const parsedOrigin = new URL(origin);