Jakub Zych 5055e8bb61 feat(19.3-02): per-group CORS policies through cors:<profile> with router-registered preflights ...

- surf: LoadCORSProfiles reads http.cors_profiles.<name> (http.cors keys
  without paths, validated the same way); factory cors:<profile> sets the
  profile's headers; an unknown profile fails boot naming plugin and route
- BuildRouter registers OPTIONS <path> (owner surf, recovery only) for every
  path whose routes name cors:<profile>; two profiles on one path, an existing
  OPTIONS route or overlap with http.cors.paths fail boot
- docs: CORS profiles section, middleware table and README rows

2026-10-15 17:51:58 +02:00

14 KiB

Raw Blame History

View Raw