You're Invited:Meet the Socket Team at BlackHat and DEF CON in Las Vegas, Aug 4-6.RSVP
Socket
Book a DemoInstallSign in
Socket

cors-extends

Package Overview
Dependencies
Maintainers
1
Versions
1
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

cors-extends

Configure the Cors Options with Ease

1.0.0
latest
Source
npmnpm
Version published
Weekly downloads
0
Maintainers
1
Weekly downloads
 
Created
Source

Cors-Extends

Cors-Extend is a package which provides the configuration to the existing Cors nodejs package and which enables to configure cors according to the environments.

Installation

$ npm install cors-extends

Usage

Simple Usage (define environments & global configuration)

import cors from "cors";
import { corsExtends } from "cors-extend";

cors(
	corsExtends({
		env: {
			development: {
				origins: [
					{
						origin: "http://localhost:3000",
						methods: ["GET"],
					},
				],
				routes: [
					{
						endpoint: "/characters",
						methods: ["GET", "POST"],
						origins: ["http://localhost:5000"],
					},
				],
			},
		},
		global: {
			blockHttpClient: true,
		},
	}),
);

Configuration By Environment Variable

Cors-Extend is capable of loading specific configuration according to Environment variable, ENVIRONMENT. The variable can be pass either by dotenv cli, .env file or any other way.

Note that both environment variable value and configuration name should be equal*

After configuring environment variable in configuration file under the env object specify the environment name

cors(corsExtends({
  env{
    development:{

    }
  }
}))

The endpoints can be configured in two ways

Configure the Origin

By using this configuration we can specify the origins and methods that are allowed for that origins, for the entire application.

origins is an array of object which has a template of

{
  origin:"Origin Name",
  methods:["GET","POST","PUT","DELETE","PATCH"]
}

Example:

env: {
	development: {
		origins: [
			{
				origin: "http://localhost:3000",
				methods: ["GET"],
			},
		];
	}
}

So, according to the above configuration the application will only accept GET requests from the client http://localhost:3000

Note When the origins param or configuration for the certain environment is unspecified, all the requests from all origins will be accepted (Not recommended).

Configure the Routes

Routes configuration is used to specify the cors configuration for certain routes.

routes is an array of object which has a template of

PropertyTypeOptionalDescription
endpointStringfalseSpecify the Route that needs to be configured
methodsString[]trueSpecify the Methods that would be allowed to the route
originsString[]falseSpecify the Origins that would be allowed to the route
blockHttpClientBooleantrueSpecify whether to block requests from non Browser Clients

Example:

env: {
	development: {
	  origins: [
	   {
	    endpoint: "/route",
	    methods: ["GET","POST"],
	    origins: [
		"http://localhost:1000",
		"http://web.sankalpafernando"
	    ],
	    blockHttpClient: false,
	   },
	  ];
	}
}

Keywords

cors

FAQs

Package last updated on 09 Mar 2022

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

About

Packages

Stay in touch

Get open source security insights delivered straight into your inbox.

  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc

U.S. Patent No. 12,346,443 & 12,314,394. Other pending.