Node-Red
/
node-red
mirror of https://github.com/node-red/node-red.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge 9729323363 into 89fe24929e

pull/5361/merge
Caleb M 2026-03-24 10:15:09 -04:00 committed by GitHub
parent 89fe24929e 9729323363
commit 016de908cb
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 20 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
packages/node_modules/@node-red/editor-api/lib/index.js vendored
View File

@ -47,13 +47,26 @@ function init(settings,_server,storage,runtimeAPI) {
if (settings.httpAdminRoot !== false) {
adminApp = apiUtil.createExpressApp(settings);
var cors = require('cors');
var corsHandler = cors({
origin: "*",
methods: "GET,PUT,POST,DELETE"
const cors = require('cors');
//CORS fix for OPTIONS preflight
// Reads allowed methods from runtime settings, defaults to standard methods
const httpNodeCors = settings.httpNodeCors || {};
let allowedMethods = httpNodeCors.methods || "GET,PUT,POST,DELETE";
// Ensure PATCH is included in preflight response
if (!allowedMethods.includes("PATCH")) {
allowedMethods += ",PATCH";
}
// Apply CORS handler for admin API
const corsHandler = cors({
origin: httpNodeCors.origin || "*",
methods: allowedMethods
});
adminApp.use(corsHandler);
if (settings.httpAdminMiddleware) {
if (typeof settings.httpAdminMiddleware === "function" || Array.isArray(settings.httpAdminMiddleware)) {
adminApp.use(settings.httpAdminMiddleware);
@ -92,10 +105,11 @@ function init(settings,_server,storage,runtimeAPI) {
}
if (settings.httpAdminCors) {
var corsHandler = cors(settings.httpAdminCors);
adminApp.use(corsHandler);
const extraCorsHandler = cors(settings.httpAdminCors);
adminApp.use(extraCorsHandler); // avoids declaring CorsHandler twice
}
var adminApiApp = require("./admin").init(settings, runtimeAPI);
adminApp.use(adminApiApp);
} else {