Add CORS support

Author: blainsadler

index.js

@@ -7,6 +7,7 @@ const http = require("http")
 const https = process.env.NODE_ENV === "production"
   ? require("spdy") : require("https")
 const express = require("express")
+const cors = require("cors")
 const getCerts = require(path.resolve(__dirname, "certs.js")).getCerts
 
 /* CONFIGURE THE SERVER */
@@ -16,6 +17,9 @@ const createServer = (domain = "localhost") => {
   // create a server with express
   const app = express()
 
+  // add CORS headers to all responses
+  app.use(cors())
+
   // add getCerts to app
   app.getCerts = getCerts
 

package-lock.json

@@ -46,6 +46,7 @@
   "dependencies": {
     "appdata-path": "^1.0.0",
     "compression": "^1.7.4",
+    "cors": "^2.8.5",
     "express": "^4.17.1",
     "express-minify": "^1.0.0",
     "spdy": "^4.0.2"

package.json

@@ -199,6 +199,20 @@ describe("Testing serve", () => {
     })()
   })
 
+  it("includes access-control-allow-origin header", function(done) {
+    (async() => {
+      // set the environment port
+      process.env.PORT = HTTPS_PORT
+      // start the server (serving the default folder)
+      app.serve("test")
+      // make the request and check the output
+      await makeRequest("/static.html")
+        .then(res => assert(res.headers["access-control-allow-origin"] ===
+          "*"))
+      done()
+    })()
+  })
+
   it("doesn't crash on 404", function(done) {
     (async() => {
       // set the environment port