Package cors

import "github.com/iris-contrib/middleware/cors"

Overview
Index

Overview

Index

func AllowAll() iris.Handler
func Default() iris.Handler
func New(options Options) iris.Handler
type Cors
func (c *Cors) Serve(ctx iris.Context)
type Options

Package files

cors.go util.go

func AllowAll

func AllowAll() iris.Handler

AllowAll create a new Cors handler with permissive configuration allowing all origins with all standard methods with any header and credentials.

func Default

func Default() iris.Handler

Default creates a new Cors handler with default options.

func New

func New(options Options) iris.Handler

New creates a new Cors handler with the provided options. Use the Application.UseRouter method to register it globally, this is the best option as it enables all the middleware's features. Or to register it per group of routes use: the Party.AllowMethods(iris.MethodOptions) and Party.Use methods instead.

type Cors

Cors http handler

type Cors struct {
    // Debug logger
    Log *log.Logger
    // contains filtered or unexported fields
}

func (*Cors) Serve

func (c *Cors) Serve(ctx iris.Context)

Serve apply the CORS specification on the request, and add relevant CORS headers as necessary.

type Options

Options is a configuration container to setup the CORS middleware.

type Options struct {
    // AllowedOrigins is a list of origins a cross-domain request can be executed from.
    // If the special "*" value is present in the list, all origins will be allowed.
    // An origin may contain a wildcard (*) to replace 0 or more characters
    // (i.e.: http://*.domain.com). Usage of wildcards implies a small performance penalty.
    // Only one wildcard can be used per origin.
    // Default value is ["*"]
    AllowedOrigins []string
    // AllowOriginFunc is a custom function to validate the origin. It take the origin
    // as argument and returns true if allowed or false otherwise. If this option is
    // set, the content of AllowedOrigins is ignored.
    AllowOriginFunc func(origin string) bool
    // AllowedMethods is a list of methods the client is allowed to use with
    // cross-domain requests. Default value is simple methods (HEAD, GET and POST).
    AllowedMethods []string
    // AllowedHeaders is list of non simple headers the client is allowed to use with
    // cross-domain requests.
    // If the special "*" value is present in the list, all headers will be allowed.
    // Default value is [] but "Origin" is always appended to the list.
    AllowedHeaders []string
    // ExposedHeaders indicates which headers are safe to expose to the API of a CORS
    // API specification
    ExposedHeaders []string
    // MaxAge indicates how long (in seconds) the results of a preflight request
    // can be cached
    MaxAge int
    // AllowCredentials indicates whether the request can include user credentials like
    // cookies, HTTP authentication or client side SSL certificates.
    AllowCredentials bool
    // OptionsPassthrough instructs preflight to let other potential next handlers to
    // process the OPTIONS method. Turn this on if your application handles OPTIONS.
    OptionsPassthrough bool
    // Debugging flag adds additional output to debug server side CORS issues
    Debug bool
}

github.com/iris-contrib/middleware/cors