package middleware

import (
	"github.com/gogf/gf/v2/frame/g"
	"github.com/gogf/gf/v2/net/ghttp"
)

// ============================== 跨域中间件 ==============================

// CORS 跨域处理
//
// 读取配置 cors.allowOrigin：为空或为 * 时使用框架内置默认策略；
// 配置为具体来源时显式回显，并对预检请求直接返回 204
func CORS(r *ghttp.Request) {
	origin := g.Cfg().MustGet(r.Context(), "cors.allowOrigin").String()
	if origin == "" || origin == "*" {
		r.Response.CORSDefault()
	} else {
		r.Response.Header().Set("Access-Control-Allow-Origin", origin)
		r.Response.Header().Set("Access-Control-Allow-Credentials", "true")
		r.Response.Header().Set("Access-Control-Allow-Headers", "Origin,Authorization,Content-Type,Accept,Token,X-Requested-With")
		r.Response.Header().Set("Access-Control-Allow-Methods", "GET,POST,PUT,DELETE,OPTIONS")
		if r.Method == "OPTIONS" {
			r.Response.WriteStatus(204)
			return
		}
	}
	r.Middleware.Next()
}