npmpackage.info

egg-cors

CORS plugin for egg

3.0.1

152

MIT

JavaScript

7.47 kB

5,153,970 4.6

Installations

npm install egg-cors

Developer Guide

BETA

Typescript

Yes

Module System

N/A

Min. Node Version

>=14.0.0

Node Version

18.20.2

NPM Version

10.5.0 Score

86.8

Supply Chain

90.6

Quality

82.8

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

0

Total

29

Closed

6

Merged

23

Issues

Open

0

Total

0

Closed

0

Releases

v3.0.1

Published on 25 Apr 2024

v2.2.4

Published on 25 Apr 2024

v3.0.0

Published on 11 Dec 2023

v2.2.3

Published on 11 Dec 2023

View all 4 releases

Contributors

Unable to fetch Contributors

View all 29 contributors

Languages

JavaScript

JavaScript (100%)

Developer

eggjs

Download Statistics

Total Downloads

5,153,970

Last Day

1,880

Last Week

9,574

Last Month

41,304

Last Year

514,389

GitHub Statistics

152 Stars

39 Commits

12 Forks

10 Watching

3 Branches

29 Contributors

Maintainers

Package Meta Information

Latest Version

3.0.1

Package Id

egg-cors@3.0.1

Unpacked Size

7.47 kB

Size

3.25 kB

File Count

NPM Version

10.5.0

Node Version

18.20.2

Publised On

25 Apr 2024

Total Downloads

Cumulative downloads

Total Downloads

5,153,970

Last day

28.1%

1,880

Compared to previous day

Last week

1.2%

9,574

Compared to previous week

Last month

-0.4%

41,304

Compared to previous month

Last year

-71.4%

514,389

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@koa/cors

Dev Dependencies

egg egg-bin egg-mock egg-security eslint eslint-config-egg git-contributor

Versions

egg-cors

CORS plugin for egg, based on @koa/cors.

Install

1$ npm i egg-cors --save

Usage

1// {app_root}/config/plugin.js
2exports.cors = {
3  enable: true,
4  package: 'egg-cors',
5};

egg-cors works internally with egg-security. By defining the property of domainWhiteList on object security, you have successfully informed the framework to whitelist the passed domains.

When you make a request from client side, egg should return an Access-Control-Allow-Origin response header with the domain that you passed in along with the payload and status code 200.

1exports.security = {
2  domainWhiteList: [ 'http://localhost:4200' ],
3};

Configuration

Support all configurations in @koa/cors.

1// {app_root}/config/config.default.js
2exports.cors = {
3  // {string|Function} origin: '*',
4  // {string|Array} allowMethods: 'GET,HEAD,PUT,POST,DELETE,PATCH'
5};

If the origin is set, the plugin will follow it to set the Access-Control-Allow-Origin and ignore the security.domainWhiteList. Otherwise, the security.domainWhiteList which is default will take effect as described above.

Security

Only in safe domain list support CORS when security plugin enabled.

Questions & Suggestions

Please open an issue here.

License

MIT

Contributors

_atian25	_dead-horse	_fengmk2	_brickyang	_sinchang	_XadillaX
_mattma	_SoraYama	_Yelmor	_angela-1	_waitingsong

This project follows the git-contributor spec, auto updated at Mon Dec 11 2023 13:25:00 GMT+0800.

No vulnerabilities found.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

10

License

Determines if the project has defined a license.

7

SAST

Determines if the project uses static code analysis.

3

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Maintained

Determines if the project is "actively maintained".

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Fuzzing

Determines if the project uses fuzzing.

0

Security-Policy

Determines if the project has published a security policy.

Score

4.6

/10

Last Scanned on 2024-12-16

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to egg-cors

egg-super-cors

1.0.4

set

pwegg

1.0.1

egg egg-cors egg-mysql crypto加密 jsonwebtoken生成token vali ------------------------------------------------------------------ 在config/plugin.js 开启插件