aws-cdk-lib/aws-cloudfront/lib/response-headers-policy.js

Version 2 of the AWS Cloud Development Kit library

"use strict";var __esDecorate=exports&&exports.__esDecorate||function(ctor,descriptorIn,decorators,contextIn,initializers,extraInitializers){function accept(f){if(f!==void 0&&typeof f!="function")throw new TypeError("Function expected");return f}for(var kind=contextIn.kind,key=kind==="getter"?"get":kind==="setter"?"set":"value",target=!descriptorIn&&ctor?contextIn.static?ctor:ctor.prototype:null,descriptor=descriptorIn||(target?Object.getOwnPropertyDescriptor(target,contextIn.name):{}),_,done=!1,i=decorators.length-1;i>=0;i--){var context={};for(var p in contextIn)context[p]=p==="access"?{}:contextIn[p];for(var p in contextIn.access)context.access[p]=contextIn.access[p];context.addInitializer=function(f){if(done)throw new TypeError("Cannot add initializers after decoration has completed");extraInitializers.push(accept(f||null))};var result=(0,decorators[i])(kind==="accessor"?{get:descriptor.get,set:descriptor.set}:descriptor[key],context);if(kind==="accessor"){if(result===void 0)continue;if(result===null||typeof result!="object")throw new TypeError("Object expected");(_=accept(result.get))&&(descriptor.get=_),(_=accept(result.set))&&(descriptor.set=_),(_=accept(result.init))&&initializers.unshift(_)}else(_=accept(result))&&(kind==="field"?initializers.unshift(_):descriptor[key]=_)}target&&Object.defineProperty(target,contextIn.name,descriptor),done=!0},__runInitializers=exports&&exports.__runInitializers||function(thisArg,initializers,value){for(var useValue=arguments.length>2,i=0;i<initializers.length;i++)value=useValue?initializers[i].call(thisArg,value):initializers[i].call(thisArg);return useValue?value:void 0};Object.defineProperty(exports,"__esModule",{value:!0}),exports.HeadersReferrerPolicy=exports.HeadersFrameOption=exports.ResponseHeadersPolicy=void 0;var jsiiDeprecationWarnings=()=>{var tmp=require("../../.warnings.jsii.js");return jsiiDeprecationWarnings=()=>tmp,tmp};const JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti");var cloudfront_generated_1=()=>{var tmp=require("./cloudfront.generated");return cloudfront_generated_1=()=>tmp,tmp},core_1=()=>{var tmp=require("../../core");return core_1=()=>tmp,tmp},metadata_resource_1=()=>{var tmp=require("../../core/lib/metadata-resource");return metadata_resource_1=()=>tmp,tmp},detached_construct_1=()=>{var tmp=require("../../core/lib/private/detached-construct");return detached_construct_1=()=>tmp,tmp},prop_injectable_1=()=>{var tmp=require("../../core/lib/prop-injectable");return prop_injectable_1=()=>tmp,tmp};let ResponseHeadersPolicy=(()=>{let _classDecorators=[prop_injectable_1().propertyInjectable],_classDescriptor,_classExtraInitializers=[],_classThis,_classSuper=core_1().Resource;var ResponseHeadersPolicy2=class extends _classSuper{static{_classThis=this}static{const _metadata=typeof Symbol=="function"&&Symbol.metadata?Object.create(_classSuper[Symbol.metadata]??null):void 0;__esDecorate(null,_classDescriptor={value:_classThis},_classDecorators,{kind:"class",name:_classThis.name,metadata:_metadata},null,_classExtraInitializers),ResponseHeadersPolicy2=_classThis=_classDescriptor.value,_metadata&&Object.defineProperty(_classThis,Symbol.metadata,{enumerable:!0,configurable:!0,writable:!0,value:_metadata})}static[JSII_RTTI_SYMBOL_1]={fqn:"aws-cdk-lib.aws_cloudfront.ResponseHeadersPolicy",version:"2.233.0"};static PROPERTY_INJECTION_ID="aws-cdk-lib.aws-cloudfront.ResponseHeadersPolicy";static CORS_ALLOW_ALL_ORIGINS=ResponseHeadersPolicy2.fromManagedResponseHeadersPolicy("60669652-455b-4ae9-85a4-c4c02393f86c");static CORS_ALLOW_ALL_ORIGINS_WITH_PREFLIGHT=ResponseHeadersPolicy2.fromManagedResponseHeadersPolicy("5cc3b908-e619-4b99-88e5-2cf7f45965bd");static SECURITY_HEADERS=ResponseHeadersPolicy2.fromManagedResponseHeadersPolicy("67f7725c-6f97-4210-82d7-5512b31e9d03");static CORS_ALLOW_ALL_ORIGINS_AND_SECURITY_HEADERS=ResponseHeadersPolicy2.fromManagedResponseHeadersPolicy("e61eb60c-9c35-4d20-a928-2b84e02af89c");static CORS_ALLOW_ALL_ORIGINS_WITH_PREFLIGHT_AND_SECURITY_HEADERS=ResponseHeadersPolicy2.fromManagedResponseHeadersPolicy("eaab4381-ed33-4a86-88ca-d9558dc6cd63");static fromResponseHeadersPolicyId(scope,id,responseHeadersPolicyId){class Import extends core_1().Resource{responseHeadersPolicyId=responseHeadersPolicyId;responseHeadersPolicyRef={responseHeadersPolicyId}}return new Import(scope,id)}static fromManagedResponseHeadersPolicy(managedResponseHeadersPolicyId){return new class extends detached_construct_1().DetachedConstruct{responseHeadersPolicyId=managedResponseHeadersPolicyId;responseHeadersPolicyRef={responseHeadersPolicyId:managedResponseHeadersPolicyId};constructor(){super("The result of fromManagedResponseHeadersPolicy can not be used in this API")}}}responseHeadersPolicyId;responseHeadersPolicyRef;constructor(scope,id,props={}){super(scope,id,{physicalName:props.responseHeadersPolicyName});try{jsiiDeprecationWarnings().aws_cdk_lib_aws_cloudfront_ResponseHeadersPolicyProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,ResponseHeadersPolicy2),error}(0,metadata_resource_1().addConstructMetadata)(this,props);const responseHeadersPolicyName=props.responseHeadersPolicyName??core_1().Names.uniqueResourceName(this,{maxLength:128}),resource=new(cloudfront_generated_1()).CfnResponseHeadersPolicy(this,"Resource",{responseHeadersPolicyConfig:{name:responseHeadersPolicyName,comment:props.comment,corsConfig:props.corsBehavior?this._renderCorsConfig(props.corsBehavior):void 0,customHeadersConfig:props.customHeadersBehavior?this._renderCustomHeadersConfig(props.customHeadersBehavior):void 0,securityHeadersConfig:props.securityHeadersBehavior?this._renderSecurityHeadersConfig(props.securityHeadersBehavior):void 0,removeHeadersConfig:props.removeHeaders?this._renderRemoveHeadersConfig(props.removeHeaders):void 0,serverTimingHeadersConfig:props.serverTimingSamplingRate?this._renderServerTimingHeadersConfig(props.serverTimingSamplingRate):void 0}});this.responseHeadersPolicyRef=resource.responseHeadersPolicyRef,this.responseHeadersPolicyId=resource.ref}_renderCorsConfig(behavior){return(0,core_1().withResolved)(behavior.accessControlAllowMethods,methods=>{const allowedMethods=["GET","DELETE","HEAD","OPTIONS","PATCH","POST","PUT","ALL"];if(methods.includes("ALL")&&methods.length!==1)throw new(core_1()).ValidationError("accessControlAllowMethods - 'ALL' cannot be combined with specific HTTP methods.",this);if(!methods.every(method=>core_1().Token.isUnresolved(method)||allowedMethods.includes(method)))throw new(core_1()).ValidationError(`accessControlAllowMethods contains unexpected method name; allowed values: ${allowedMethods.join(", ")}`,this)}),(0,core_1().withResolved)(behavior.accessControlAllowHeaders,headers=>{if(behavior.accessControlAllowCredentials&&headers.some(header=>!core_1().Token.isUnresolved(header)&&header.includes("*")))throw new(core_1()).ValidationError('accessControlAllowHeaders cannot contain "*" or headers with "*" when accessControlAllowCredentials is true',this)}),{accessControlAllowCredentials:behavior.accessControlAllowCredentials,accessControlAllowHeaders:{items:behavior.accessControlAllowHeaders},accessControlAllowMethods:{items:behavior.accessControlAllowMethods},accessControlAllowOrigins:{items:behavior.accessControlAllowOrigins},accessControlExposeHeaders:behavior.accessControlExposeHeaders?{items:behavior.accessControlExposeHeaders}:void 0,accessControlMaxAgeSec:behavior.accessControlMaxAge?behavior.accessControlMaxAge.toSeconds():void 0,originOverride:behavior.originOverride}}_renderCustomHeadersConfig(behavior){return{items:behavior.customHeaders}}_renderSecurityHeadersConfig(behavior){return{contentSecurityPolicy:behavior.contentSecurityPolicy,contentTypeOptions:behavior.contentTypeOptions,frameOptions:behavior.frameOptions,referrerPolicy:behavior.referrerPolicy,strictTransportSecurity:behavior.strictTransportSecurity?{...behavior.strictTransportSecurity,accessControlMaxAgeSec:behavior.strictTransportSecurity.accessControlMaxAge.toSeconds()}:void 0,xssProtection:behavior.xssProtection}}_renderRemoveHeadersConfig(headers){const readonlyHeaders=["content-encoding","content-length","transfer-encoding","warning","via"];return{items:headers.map(header=>{if(!core_1().Token.isUnresolved(header)&&readonlyHeaders.includes(header.toLowerCase()))throw new(core_1()).ValidationError(`Cannot remove read-only header ${header}`,this);return{header}})}}_renderServerTimingHeadersConfig(samplingRate){if(!core_1().Token.isUnresolved(samplingRate)){if(samplingRate<0||samplingRate>100)throw new(core_1()).ValidationError(`Sampling rate must be between 0 and 100 (inclusive), received ${samplingRate}`,this);if(!hasMaxDecimalPlaces(samplingRate,4))throw new(core_1()).ValidationError(`Sampling rate can have up to four decimal places, received ${samplingRate}`,this)}return{enabled:!0,samplingRate}}static{__runInitializers(_classThis,_classExtraInitializers)}};return ResponseHeadersPolicy2=_classThis})();exports.ResponseHeadersPolicy=ResponseHeadersPolicy;var HeadersFrameOption;(function(HeadersFrameOption2){HeadersFrameOption2.DENY="DENY",HeadersFrameOption2.SAMEORIGIN="SAMEORIGIN"})(HeadersFrameOption||(exports.HeadersFrameOption=HeadersFrameOption={}));var HeadersReferrerPolicy;(function(HeadersReferrerPolicy2){HeadersReferrerPolicy2.NO_REFERRER="no-referrer",HeadersReferrerPolicy2.NO_REFERRER_WHEN_DOWNGRADE="no-referrer-when-downgrade",HeadersReferrerPolicy2.ORIGIN="origin",HeadersReferrerPolicy2.ORIGIN_WHEN_CROSS_ORIGIN="origin-when-cross-origin",HeadersReferrerPolicy2.SAME_ORIGIN="same-origin",HeadersReferrerPolicy2.STRICT_ORIGIN="strict-origin",HeadersReferrerPolicy2.STRICT_ORIGIN_WHEN_CROSS_ORIGIN="strict-origin-when-cross-origin",HeadersReferrerPolicy2.UNSAFE_URL="unsafe-url"})(HeadersReferrerPolicy||(exports.HeadersReferrerPolicy=HeadersReferrerPolicy={}));function hasMaxDecimalPlaces(num,decimals){const parts=num.toString().split(".");return parts.length===1||parts[1].length<=decimals}