return 204 for cross-origin OPTIONS

return 405 for bad method
2024-08-12 11:41:36 -07:00 · 2024-08-12 11:41:36 -07:00
1 changed files with 6 additions and 0 deletions
--- a/server/routes.go
+++ b/server/routes.go
@ -1043,6 +1043,11 @@ func allowedHostsMiddleware(addr net.Addr) gin.HandlerFunc {

 		if addr, err := netip.ParseAddr(host); err == nil {
 			if addr.IsLoopback() || addr.IsPrivate() || addr.IsUnspecified() || isLocalIP(addr) {
+				if c.Request.Method == http.MethodOptions {
+					c.AbortWithStatus(http.StatusNoContent)
+					return
+				}
+
 				c.Next()
 				return
 			}
@ -1074,6 +1079,7 @@ func (s *Server) GenerateRoutes() http.Handler {
 	config.AllowOrigins = envconfig.Origins()

 	r := gin.Default()
+	r.HandleMethodNotAllowed = true
 	r.Use(
 		cors.New(config),
 		allowedHostsMiddleware(s.addr),
Author	SHA1	Message	Date
Roy Han	781585d9bd	return 204 for cross-origin OPTIONS	2024-08-12 11:41:36 -07:00
Roy Han	b84a54be05	return 405 for bad method	2024-08-12 11:41:36 -07:00