Package Exports
- hapi-modern-cors
This package does not declare an exports field, so the exports above have been automatically detected and optimized by JSPM instead. If any package subpath is missing, it is recommended to post an issue to the original package (hapi-modern-cors) to support the "exports" field. If that is not possible, create a JSPM override to customize the exports field for this package.
Readme
hapi-modern-cors
Dead simple CORS responses for hapi.
https://www.npmjs.com/package/hapi-modern-cors
Description
As of this writing (March 2019) there are no other working CORS npm packages available for the latest versions of hapi. There was a major refactor of the hapi project in v17+ that broke previous paradigms.
How does it work?
This plugin, by default, will append open and permissive CORS headers on all of your existing endpoints and responses.
Additionally, OPTIONS will be enabled on all of your existing routes in order to ensure CORS pre-flight works.
Installation
npm install hapi-modern-cors --saveUsage
Add this to your hapi initialization:
// ...
const cors = require('hapi-modern-cors');
// ...
await server.register(...);
// routes and config should go here BEFORE calling the plugin
// and finally...
// ...
await server.register({
plugin: cors,
options: {},
});
await server.start();Notes
How do CORS pre-flight work?
Before requests can begin to use CORS a pre-flight request is typically sent to the server at the same path you're requesting. However, the request will use OPTIONS rather than GET, POST, etc. The response to this request should contain some default CORS headers. This plugin will automatically create all OPTIONS routes to enable pre-flight requests to all your existing endpoints.
What happens when the origin is set?
When origin is set in the request header then the response will set the origin from * to that origin and
Allow-Credentials will be set from false to true. For security reasons, Allow-Credentials cannot be set to
true when * is used for origin.
What's next?
The next features and goals for this plugin are to allow customization of headers/values from within your own application.
License
Licensed under the GNU GENERAL PUBLIC LICENSE (Version 3, 29th June 2007)