https://github.com/evert0n/koa-cors

CORS middleware for Koa
https://github.com/evert0n/koa-cors

Last synced: 2 months ago
JSON representation

CORS middleware for Koa

• Host: GitHub
• URL: https://github.com/evert0n/koa-cors
• Owner: evert0n
• License: mit
• Created: 2013-12-21T21:48:38.000Z (almost 11 years ago)
• Default Branch: master
• Last Pushed: 2017-09-30T08:06:16.000Z (about 7 years ago)
• Last Synced: 2024-10-01T02:21:45.267Z (2 months ago)
• Language: JavaScript
• Homepage:
• Size: 34.2 KB
• Stars: 243
• Watchers: 9
• Forks: 48
• Open Issues: 13
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-koa - koa-cors - Koa 的 CORS 中间件。   (仓库 / 中间件)

README

        
koa-cors

========

CORS middleware for Koa

Inspired by the great [node-cors](https://github.com/troygoode/node-cors) module.

## Installation (via [npm](https://npmjs.org/package/koa-cors))

```bash

$ npm install koa-cors

```

## Usage

```javascript

var koa = require('koa');

var route = require('koa-route');

var cors = require('koa-cors');

var app = koa();

app.use(cors());

app.use(route.get('/', function() {

  this.body = { msg: 'Hello World!' };

}));

app.listen(3000);

```

## Options

### origin

Configures the **Access-Control-Allow-Origin** CORS header. Expects a string

(ex: http://example.com). Set to `true` to reflect the

[request origin](http://tools.ietf.org/html/draft-abarth-origin-09), as defined

by `req.header('Origin')`. Set to `false` to disable CORS. Can also be set to a

function, which takes the request as the first parameter.

### expose

Configures the **Access-Control-Expose-Headers** CORS header. Expects a

comma-delimited string (ex: 'WWW-Authenticate,Server-Authorization') or an array

(ex: `['WWW-Authenticate', 'Server-Authorization']`). Set this to pass the

header, otherwise it is omitted.

### maxAge

Configures the **Access-Control-Max-Age** CORS header. Set to an integer to pass

the header, otherwise it is omitted.

### credentials

Configures the **Access-Control-Allow-Credentials** CORS header. Set to `true`

to pass the header, otherwise it is omitted.

### methods

Configures the **Access-Control-Allow-Methods** CORS header. Expects a

comma-delimited string (ex: 'GET,PUT,POST') or an array (ex: `['GET', 'PUT',

'POST']`).

### headers

Configures the **Access-Control-Allow-Headers** CORS header. Expects a

comma-delimited string (ex: 'Content-Type,Authorization') or an array (ex:

`['Content-Type', 'Authorization']`). If not specified, defaults to reflecting

the headers specified in the request's **Access-Control-Request-Headers**

header.

For details on the effect of each CORS header,

[read this article on HTML5 Rocks](http://www.html5rocks.com/en/tutorials/cors/).

## License

[MIT License](http://www.opensource.org/licenses/mit-license.php)