ordinary-app 0.8.0

Application server for Ordinary
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112

// Copyright (C) 2026 Ordinary Labs, LLC.
//
// SPDX-License-Identifier: AGPL-3.0-only

use crate::server::OrdinaryAppServerState;
use axum::http::{HeaderName, HeaderValue, Method};
use axum::routing::MethodRouter;
use ordinary_config::{
    HttpCors, HttpCorsAllowHeaders, HttpCorsAllowMethods, HttpCorsAllowOrigin,
    HttpCorsExposeHeaders,
};
use std::str::FromStr;
use std::sync::Arc;
use std::time::Duration;
use tower_http::cors::{Any, CorsLayer};

#[allow(clippy::ref_option)]
pub(super) fn apply_to_route(
    base_cors: &Option<HttpCors>,
    route_cors: &Option<HttpCors>,
    route: MethodRouter<Arc<OrdinaryAppServerState>>,
) -> MethodRouter<Arc<OrdinaryAppServerState>> {
    if let Some(cors_config) = &route_cors {
        let cors_config = if let Some(base_cors) = &base_cors {
            cors_config.overwrite(base_cors)
        } else {
            cors_config.clone()
        };

        let mut cors_layer = CorsLayer::new();

        if let Some(allow_credentials) = cors_config.allow_credentials {
            cors_layer = cors_layer.allow_credentials(allow_credentials);
        }

        if let Some(allow_headers) = cors_config.allow_headers {
            match allow_headers {
                HttpCorsAllowHeaders::Any => {
                    cors_layer = cors_layer.allow_headers(Any);
                }
                HttpCorsAllowHeaders::Headers(headers) => {
                    cors_layer = cors_layer.allow_headers(
                        headers
                            .iter()
                            .filter_map(|v| HeaderName::from_str(v.as_str()).ok())
                            .collect::<Vec<_>>(),
                    );
                }
            }
        }

        if let Some(max_age) = cors_config.max_age {
            cors_layer = cors_layer.max_age(Duration::from_secs(u64::from(max_age)));
        }

        if let Some(allow_methods) = cors_config.allow_methods {
            match allow_methods {
                HttpCorsAllowMethods::Any => {
                    cors_layer = cors_layer.allow_methods(Any);
                }
                HttpCorsAllowMethods::Methods(methods) => {
                    cors_layer = cors_layer.allow_methods(
                        methods
                            .iter()
                            .filter_map(|v| Method::from_str(v.as_str()).ok())
                            .collect::<Vec<_>>(),
                    );
                }
            }
        }

        if let Some(allow_origin) = cors_config.allow_origin {
            match allow_origin {
                HttpCorsAllowOrigin::Any => {
                    cors_layer = cors_layer.allow_origin(Any);
                }
                HttpCorsAllowOrigin::Origins(origins) => {
                    cors_layer = cors_layer.allow_origin(
                        origins
                            .iter()
                            .filter_map(|v| HeaderValue::from_str(v.as_str()).ok())
                            .collect::<Vec<_>>(),
                    );
                }
            }
        }

        if let Some(expose_headers) = cors_config.expose_headers {
            match expose_headers {
                HttpCorsExposeHeaders::Any => {
                    cors_layer = cors_layer.expose_headers(Any);
                }
                HttpCorsExposeHeaders::Headers(headers) => {
                    cors_layer = cors_layer.expose_headers(
                        headers
                            .iter()
                            .filter_map(|v| HeaderName::from_str(v.as_str()).ok())
                            .collect::<Vec<_>>(),
                    );
                }
            }
        }

        if let Some(allow_private_network) = cors_config.allow_private_network {
            cors_layer = cors_layer.allow_private_network(allow_private_network);
        }

        return route.route_layer(cors_layer);
    }

    route
}