CORS

原文： https://docs.gofiber.io/api/middleware/cors

CORS

CORS middleware for Fiber that can be used to enable Cross-Origin Resource Sharing with various options.

​ 可用于启用跨源资源共享（具有各种选项）的 Fiber 的 CORS 中间件。

The middleware conforms to the access-control-allow-origin specification by parsing AllowOrigins. First, the middleware checks if there is a matching allowed origin for the requesting ‘origin’ header. If there is a match, it returns exactly one matching domain from the list of allowed origins.

​ 中间件通过解析 AllowOrigins 来符合 access-control-allow-origin 规范。首先，中间件检查请求的“origin”标头是否有匹配的允许来源。如果有匹配项，它将从允许来源列表中返回一个完全匹配的域。

For more control, AllowOriginsFunc can be used to programatically determine if an origin is allowed. If no match was found in AllowOrigins and if AllowOriginsFunc returns true then the ‘access-control-allow-origin’ response header is set to the ‘origin’ request header.

​ 为了更好地控制，可以使用 AllowOriginsFunc 来以编程方式确定是否允许来源。如果在 AllowOrigins 中未找到匹配项，并且如果 AllowOriginsFunc 返回 true，则将“access-control-allow-origin”响应标头设置为“origin”请求标头。

Signatures 签名

1

func New(config ...Config) fiber.Handler

Examples 示例

Import the middleware package that is part of the Fiber web framework

​ 导入 Fiber Web 框架的一部分中间件包

1
2
3
4

import (
  "github.com/gofiber/fiber/v2"
  "github.com/gofiber/fiber/v2/middleware/cors"
)

After you initiate your Fiber app, you can use the following possibilities:

​ 在启动 Fiber 应用后，您可以使用以下可能性：

1
2
3
4
5
6
7
8

// Initialize default config
app.Use(cors.New())

// Or extend your config for customization
app.Use(cors.New(cors.Config{
    AllowOrigins: "https://gofiber.io, https://gofiber.net",
    AllowHeaders:  "Origin, Content-Type, Accept",
}))

Using the AllowOriginsFunc function. In this example any origin will be allowed via CORS.

​ 使用 AllowOriginsFunc 函数。在此示例中，将通过 CORS 允许任何来源。

For example, if a browser running on http://localhost:3000 sends a request, this will be accepted and the access-control-allow-origin response header will be set to http://localhost:3000.

​ 例如，如果运行在 http://localhost:3000 上的浏览器发送请求，这将被接受，并且 access-control-allow-origin 响应标头将设置为 http://localhost:3000 。

Note: Using this feature is discouraged in production and it’s best practice to explicitly set CORS origins via AllowOrigins. 注意：不建议在生产中使用此功能，最好通过 AllowOrigins 显式设置 CORS 来源。

1
2
3
4
5
6
7

app.Use(cors.New())

app.Use(cors.New(cors.Config{
    AllowOriginsFunc: func(origin string) bool {
        return os.Getenv("ENVIRONMENT") == "development"
    },
}))

Config 配置

Default Config 默认配置

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17

var ConfigDefault = Config{
    Next:         nil,
    AllowOriginsFunc: nil,
    AllowOrigins: "*",
    AllowMethods: strings.Join([]string{
        fiber.MethodGet,
        fiber.MethodPost,
        fiber.MethodHead,
        fiber.MethodPut,
        fiber.MethodDelete,
        fiber.MethodPatch,
    }, ","),
    AllowHeaders:     "",
    AllowCredentials: false,
    ExposeHeaders:    "",
    MaxAge:           0,
}