cors-extend

Cors-Extend

Cors-extend is a package which provides the configuration to the existing Cors nodejs package and which enables to configure cors according to the environments.

Installation

• Cors-Extend
• Installation
  • Usage
    • Simple Usage (define environments & global configuration)
  • Configuration By Environment Variable
    • Configure the Origin

$ npm install cors-extend

Usage

Simple Usage (define environments & global configuration)

import cors from "cors";
import { corsExtend } from "cors-extend";

cors(
	corsExtend({
		env: {
			development: {
				origins: [
					{
						origin: "http://localhost:3000",
						methods: ["GET"],
					},
				],
				routes: [
					{
						endpoint: "/characters",
						methods: ["GET", "POST"],
						origins: ["http://localhost:5000"],
					},
				],
			},
		},
		global: {
			blockHttpClient: true,
		},
	}),
);

Configuration By Environment Variable

Cors-Extend is capable of loading specific configuration according to Environment variable, ENVIRONMENT. The variable can be pass either by dotenv cli, .env file or any other way.

Note that both environment variable value and configuration name should be equal*

After configuring environment variable in configuration file under the env object specify the environment name

cors(corsExtend({
  env{
    development:{

    }
  }
}))

The endpoints can be configured in two ways

Configure the Origin

By using this configuration we can specify the origins and methods that are allowed for that origins, for the entire application.

origins is an array of object which has a template of

{
  origin:"Origin Name",
  methods:["GET","POST","PUT","DELETE","PATCH"]
}

Example:

env: {
	development: {
		origins: [
			{
				origin: "http://localhost:3000",
				methods: ["GET"],
			},
		];
	}
}

So, according to the above configuration the application will only accept GET requests from the client http://localhost:3000

Note When the origins param or configuration for the certain environment is unspecified, all the requests from all origins will be accepted (Not recommended).