[WIP]cors support

Author: horike37

lib/deploy/events/apiGateway/cors.js

@@ -1,10 +1,11 @@
 'use strict';
-
+const NOT_FOUND = -1;
 const _ = require('lodash');
 
 module.exports = {
   httpValidate() {
     const events = [];
+    const corsPreflight = {};
 
     _.forEach(this.getAllStateMachines(), (stateMachineName) => {
       const stateMachineObj = this.getStateMachine(stateMachineName);
@@ -14,6 +15,20 @@ module.exports = {
           http.path = this.getHttpPath(http, stateMachineName);
           http.method = this.getHttpMethod(http, stateMachineName);
 
+          if (http.cors) {
+            http.cors = this.getCors(http);
+
+            const cors = corsPreflight[http.path] || {};
+
+            cors.headers = _.union(http.cors.headers, cors.headers);
+            cors.methods = _.union(http.cors.methods, cors.methods);
+            cors.origins = _.union(http.cors.origins, cors.origins);
+            cors.origin = http.cors.origin || '*';
+            cors.allowCredentials = cors.allowCredentials || http.cors.allowCredentials;
+
+            corsPreflight[http.path] = cors;
+          }
+
           events.push({
             stateMachineName,
             http,
@@ -24,6 +39,7 @@ module.exports = {
 
     return {
       events,
+      corsPreflight,
     };
   },
 
@@ -85,4 +101,27 @@ module.exports = {
     ].join('');
     throw new this.serverless.classes.Error(errorMessage);
   },
+
+  getCors(http) {
+    const headers = [
+      'Content-Type',
+      'X-Amz-Date',
+      'Authorization',
+      'X-Api-Key',
+      'X-Amz-Security-Token',
+      'X-Amz-User-Agent',
+    ];
+
+    const cors = {
+      origins: ['*'],
+      origin: '*',
+      methods: ['OPTIONS'],
+      headers,
+      allowCredentials: false,
+    };
+
+    cors.methods.push(http.method.toUpperCase());
+
+    return cors;
+  },
 };