mirror of
https://github.com/superseriousbusiness/gotosocial.git
synced 2024-12-11 09:30:59 +01:00
92 lines
2.2 KiB
Markdown
92 lines
2.2 KiB
Markdown
|
# CORS gin's middleware
|
||
|
|
||
|
[![Build Status](https://travis-ci.org/gin-contrib/cors.svg)](https://travis-ci.org/gin-contrib/cors)
|
||
|
[![codecov](https://codecov.io/gh/gin-contrib/cors/branch/master/graph/badge.svg)](https://codecov.io/gh/gin-contrib/cors)
|
||
|
[![Go Report Card](https://goreportcard.com/badge/github.com/gin-contrib/cors)](https://goreportcard.com/report/github.com/gin-contrib/cors)
|
||
|
[![GoDoc](https://godoc.org/github.com/gin-contrib/cors?status.svg)](https://godoc.org/github.com/gin-contrib/cors)
|
||
|
[![Join the chat at https://gitter.im/gin-gonic/gin](https://badges.gitter.im/Join%20Chat.svg)](https://gitter.im/gin-gonic/gin)
|
||
|
|
||
|
Gin middleware/handler to enable CORS support.
|
||
|
|
||
|
## Usage
|
||
|
|
||
|
### Start using it
|
||
|
|
||
|
Download and install it:
|
||
|
|
||
|
```sh
|
||
|
$ go get github.com/gin-contrib/cors
|
||
|
```
|
||
|
|
||
|
Import it in your code:
|
||
|
|
||
|
```go
|
||
|
import "github.com/gin-contrib/cors"
|
||
|
```
|
||
|
|
||
|
### Canonical example:
|
||
|
|
||
|
```go
|
||
|
package main
|
||
|
|
||
|
import (
|
||
|
"time"
|
||
|
|
||
|
"github.com/gin-contrib/cors"
|
||
|
"github.com/gin-gonic/gin"
|
||
|
)
|
||
|
|
||
|
func main() {
|
||
|
router := gin.Default()
|
||
|
// CORS for https://foo.com and https://github.com origins, allowing:
|
||
|
// - PUT and PATCH methods
|
||
|
// - Origin header
|
||
|
// - Credentials share
|
||
|
// - Preflight requests cached for 12 hours
|
||
|
router.Use(cors.New(cors.Config{
|
||
|
AllowOrigins: []string{"https://foo.com"},
|
||
|
AllowMethods: []string{"PUT", "PATCH"},
|
||
|
AllowHeaders: []string{"Origin"},
|
||
|
ExposeHeaders: []string{"Content-Length"},
|
||
|
AllowCredentials: true,
|
||
|
AllowOriginFunc: func(origin string) bool {
|
||
|
return origin == "https://github.com"
|
||
|
},
|
||
|
MaxAge: 12 * time.Hour,
|
||
|
}))
|
||
|
router.Run()
|
||
|
}
|
||
|
```
|
||
|
|
||
|
### Using DefaultConfig as start point
|
||
|
|
||
|
```go
|
||
|
func main() {
|
||
|
router := gin.Default()
|
||
|
// - No origin allowed by default
|
||
|
// - GET,POST, PUT, HEAD methods
|
||
|
// - Credentials share disabled
|
||
|
// - Preflight requests cached for 12 hours
|
||
|
config := cors.DefaultConfig()
|
||
|
config.AllowOrigins = []string{"http://google.com"}
|
||
|
// config.AllowOrigins == []string{"http://google.com", "http://facebook.com"}
|
||
|
|
||
|
router.Use(cors.New(config))
|
||
|
router.Run()
|
||
|
}
|
||
|
```
|
||
|
|
||
|
### Default() allows all origins
|
||
|
|
||
|
```go
|
||
|
func main() {
|
||
|
router := gin.Default()
|
||
|
// same as
|
||
|
// config := cors.DefaultConfig()
|
||
|
// config.AllowAllOrigins = true
|
||
|
// router.Use(cors.New(config))
|
||
|
router.Use(cors.Default())
|
||
|
router.Run()
|
||
|
}
|
||
|
```
|