graphql-yoga/cjs/plugins/allowed-headers.js

"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
exports.useAllowedResponseHeaders = useAllowedResponseHeaders;
exports.useAllowedRequestHeaders = useAllowedRequestHeaders;
function useAllowedResponseHeaders(allowedHeaders) {
    return {
        onResponse({ response }) {
            removeDisallowedHeaders(response.headers, allowedHeaders);
        },
    };
}
function useAllowedRequestHeaders(allowedHeaders) {
    return {
        onRequest({ request }) {
            removeDisallowedHeaders(request.headers, allowedHeaders);
        },
    };
}
function removeDisallowedHeaders(headers, allowedHeaders) {
    for (const headerName of headers.keys()) {
        if (!allowedHeaders.includes(headerName)) {
            headers.delete(headerName);
        }
    }
}