38 lines
913 B
Go
38 lines
913 B
Go
|
package middleware
|
||
|
|
|
||
|
|
import (
|
||
|
|
"net/http"
|
||
|
|
//"strings"
|
||
|
|
)
|
||
|
|
|
||
|
|
func CORS(allowedOrigins []string) func(next http.Handler) http.Handler {
|
||
|
|
return func(next http.Handler) http.Handler {
|
||
|
|
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
||
|
|
origin := r.Header.Get("Origin")
|
||
|
|
|
||
|
|
// Проверяем разрешен ли origin
|
||
|
|
allowed := false
|
||
|
|
for _, o := range allowedOrigins {
|
||
|
|
if o == "*" || o == origin {
|
||
|
|
allowed = true
|
||
|
|
break
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
if allowed {
|
||
|
|
w.Header().Set("Access-Control-Allow-Origin", origin)
|
||
|
|
}
|
||
|
|
|
||
|
|
w.Header().Set("Access-Control-Allow-Methods", "GET, POST, PUT, DELETE, OPTIONS")
|
||
|
|
w.Header().Set("Access-Control-Allow-Headers", "Content-Type, Authorization")
|
||
|
|
w.Header().Set("Access-Control-Allow-Credentials", "true")
|
||
|
|
|
||
|
|
if r.Method == "OPTIONS" {
|
||
|
|
w.WriteHeader(http.StatusOK)
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
next.ServeHTTP(w, r)
|
||
|
|
})
|
||
|
|
}
|
||
|
|
}
|