@supabase/supabase-js/dist/cors.cjs

Isomorphic Javascript SDK for Supabase

//#region src/cors.ts
/**
* Canonical CORS configuration for Supabase Edge Functions
*
* This module exports CORS headers that stay synchronized with the Supabase SDK.
* When new headers are added to the SDK, they are automatically included here,
* preventing CORS errors in Edge Functions.
*
* @example Basic usage
* ```typescript
* import { corsHeaders } from '@supabase/supabase-js/cors'
*
* Deno.serve(async (req) => {
*   if (req.method === 'OPTIONS') {
*     return new Response('ok', { headers: corsHeaders })
*   }
*
*   return new Response(
*     JSON.stringify({ data: 'Hello' }),
*     { headers: { ...corsHeaders, 'Content-Type': 'application/json' } }
*   )
* })
* ```
*
* @module cors
*/
/**
* All custom headers sent by the Supabase SDK.
* These headers need to be included in CORS configuration to prevent preflight failures.
*
* Headers:
* - authorization: Bearer token for authentication
* - x-client-info: Library version information
* - apikey: Project API key
* - content-type: Standard HTTP content type
*/
const SUPABASE_HEADERS = [
	"authorization",
	"x-client-info",
	"apikey",
	"content-type"
].join(", ");
/**
* All HTTP methods used by the Supabase SDK
*/
const SUPABASE_METHODS = [
	"GET",
	"POST",
	"PUT",
	"PATCH",
	"DELETE",
	"OPTIONS"
].join(", ");
/**
* Default CORS headers for Supabase Edge Functions.
*
* Includes all headers sent by Supabase client libraries and allows all standard HTTP methods.
* Use this for simple CORS configurations with wildcard origin.
*
* @example
* ```typescript
* import { corsHeaders } from '@supabase/supabase-js/cors'
*
* Deno.serve(async (req) => {
*   if (req.method === 'OPTIONS') {
*     return new Response('ok', { headers: corsHeaders })
*   }
*
*   return new Response(
*     JSON.stringify({ data: 'Hello' }),
*     { headers: { ...corsHeaders, 'Content-Type': 'application/json' } }
*   )
* })
* ```
*/
const corsHeaders = {
	"Access-Control-Allow-Origin": "*",
	"Access-Control-Allow-Headers": SUPABASE_HEADERS,
	"Access-Control-Allow-Methods": SUPABASE_METHODS
};

//#endregion
exports.corsHeaders = corsHeaders;
//# sourceMappingURL=cors.cjs.map