Security News
Weekly Downloads Now Available in npm Package Search Results
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.
@middy/http-cors
Advanced tools
CORS (Cross-Origin Resource Sharing) middleware for the middy framework
CORS middleware for the middy framework, the stylish Node.js middleware engine for AWS Lambda
This middleware sets HTTP CORS headers (Access-Control-Allow-Origin
, Access-Control-Allow-Headers
, Access-Control-Allow-Credentials
), necessary for making cross-origin requests, to the response object.
Sets headers in after
and onError
phases.
To install this middleware you can use NPM:
npm install --save @middy/http-cors
getOrigin
(function(incomingOrigin:string, options)) (optional): take full control of the generating the returned origin. Defaults to using the origin or origins option.origin
(string) (optional): origin to put in the header (default: "*
")origins
(array) (optional): An array of allowed origins. The incoming origin is matched against the list and is returned if present.headers
(string) (optional): value to put in Access-Control-Allow-Headers (default: null
)credentials
(bool) (optional): if true, sets the Access-Control-Allow-Origin
as request header Origin
, if present (default false
)maxAge
(string) (optional): value to put in Access-Control-Max-Age header (default: null
)cacheControl
(string) (optional): value to put in Cache-Control header on pre-flight (OPTIONS) requests (default: null
)NOTES:
httpErrorHandler
middleware before the cors
middleware like this:const middy = require('@middy/core')
const httpErrorHandler = require('@middy/http-error-handler')
const cors = require('@middy/http-cors')
const handler = middy((event, context, cb) => {
throw new createError.UnprocessableEntity()
})
handler.use(httpErrorHandler())
.use(cors())
// when Lambda runs the handler...
handler({}, {}, (_, response) => {
expect(response.headers['Access-Control-Allow-Origin']).toEqual('*')
expect(response).toEqual({
statusCode: 422,
body: 'Unprocessable Entity'
})
})
const middy = require('@middy/core')
const cors = require('@middy/http-cors')
const handler = middy((event, context, cb) => {
cb(null, {})
})
handler.use(cors())
// when Lambda runs the handler...
handler({}, {}, (_, response) => {
expect(response.headers['Access-Control-Allow-Origin']).toEqual('*')
})
For more documentation and examples, refers to the main Middy monorepo on GitHub or Middy official website.
Everyone is very welcome to contribute to this repository. Feel free to raise issues or to submit Pull Requests.
Licensed under MIT License. Copyright (c) 2017-2018 Luciano Mammino and the Middy team.
FAQs
CORS (Cross-Origin Resource Sharing) middleware for the middy framework
The npm package @middy/http-cors receives a total of 87,729 weekly downloads. As such, @middy/http-cors popularity was classified as popular.
We found that @middy/http-cors demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.
Security News
A Stanford study reveals 9.5% of engineers contribute almost nothing, costing tech $90B annually, with remote work fueling the rise of "ghost engineers."
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.