aboutsummaryrefslogtreecommitdiff
path: root/src/utils
diff options
context:
space:
mode:
authorFuwn <[email protected]>2022-03-20 01:28:42 -0700
committerFuwn <[email protected]>2022-03-20 01:28:42 -0700
commit03f2c8e35ba70c9d9496fd5ad5403520f7ebdc53 (patch)
tree568e508aff6db6325719abcb2c601520264c5de4 /src/utils
downloadgraphql-api-03f2c8e35ba70c9d9496fd5ad5403520f7ebdc53.tar.xz
graphql-api-03f2c8e35ba70c9d9496fd5ad5403520f7ebdc53.zip
feat: 0.1.0 :star:
Diffstat (limited to 'src/utils')
-rw-r--r--src/utils/setCors.js23
1 files changed, 23 insertions, 0 deletions
diff --git a/src/utils/setCors.js b/src/utils/setCors.js
new file mode 100644
index 0000000..70773a5
--- /dev/null
+++ b/src/utils/setCors.js
@@ -0,0 +1,23 @@
+const setCorsHeaders = (response, config) => {
+ const corsConfig = config instanceof Object ? config : false;
+
+ response.headers.set(
+ "Access-Control-Allow-Credentials",
+ corsConfig ? corsConfig.allowCredentials : "true"
+ );
+ response.headers.set(
+ "Access-Control-Allow-Headers",
+ corsConfig ? corsConfig.allowHeaders : "application/json, Content-type"
+ );
+ response.headers.set(
+ "Access-Control-Allow-Methods",
+ corsConfig ? corsConfig.allowMethods : "GET, POST"
+ );
+ response.headers.set(
+ "Access-Control-Allow-Origin",
+ corsConfig ? corsConfig.allowOrigin : "*"
+ );
+ response.headers.set("X-Content-Type-Options", "nosniff");
+};
+
+module.exports = setCorsHeaders;