PCSX2/archived-web-api
1
0
Fork 0
mirror of https://github.com/PCSX2/web-api.git synced 2026-01-31 01:15:16 +01:00
Code Issues Packages Projects Releases Wiki Activity

Allow CORS to be flexibly configured (#28)

Browse Source
This commit is contained in:
Tyler Wilding
2022-03-18 21:17:03 -04:00
committed by GitHub
parent 8a229e588b
commit e34b96e87a
1 changed files with 37 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

38
index.ts
View File

@@ -18,8 +18,44 @@ if (ghWebhookSecret == undefined) {
exit(1);
}
// explicit list of origins to allow
let corsAllowedOriginWhitelist: string[] = [];
if (process.env.CORS_ALLOWED_ORIGINS != undefined) {
corsAllowedOriginWhitelist = process.env.CORS_ALLOWED_ORIGINS.split(",");
}
// allowed origins via regex patterns
let corsAllowedOriginPatterns: string[] = [];
if (process.env.CORS_ALLOWED_ORIGIN_PATTERNS != undefined) {
corsAllowedOriginPatterns =
process.env.CORS_ALLOWED_ORIGIN_PATTERNS.split(",");
}
// if we are in a dev environment, allow local origins
if (devEnv) {
corsAllowedOriginPatterns.push("^https?:\\/\\/localhost:\\d+");
}
const corsOptions = {
origin: devEnv ? "http://localhost:8080" : process.env.CORS_FRONTEND_URL,
// @typescript-eslint/no-explicit-any
origin: function (origin: any, callback: any) {
if (origin == undefined) {
// Request did not originate from a browser, allow it
callback(null, true);
} else if (corsAllowedOriginWhitelist.indexOf(origin) !== -1) {
callback(null, true);
} else {
// check the regex's, this is to support things like cloudflare pages that subdomain with the commit sha
for (let i = 0; i < corsAllowedOriginPatterns.length; i++) {
if (origin.match(corsAllowedOriginPatterns[i]) != null) {
callback(null, true);
return;
}
}
callback(new Error(`'${origin}' not matched by CORS whitelist`));
}
},
methods: "GET,POST,OPTIONS",
optionsSuccessStatus: 200, // some legacy browsers (IE11, various SmartTVs) choke on 204
};