xtr.dev/rondevu-server
1
0
Fork 0
mirror of https://github.com/xtr-dev/rondevu-server.git synced 2025-12-10 19:03:24 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add support for global origin via X-Rondevu-Global header

Browse Source 
- Add getOrigin() helper function to check for X-Rondevu-Global header
- When X-Rondevu-Global: true, use https://ronde.vu as origin for session isolation
- Update all endpoints to use getOrigin() instead of reading Origin header directly
- Add X-Rondevu-Global to CORS allowed headers
- This enables browser clients to connect to global sessions

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
Bas van den Aakster
2025-11-07 23:50:47 +01:00
parent 2bc6359b73
commit f9aa4b486d
1 changed files with 20 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
src/app.ts
View File

@@ -1,12 +1,26 @@
import { Hono } from 'hono';
import { cors } from 'hono/cors';
import { Storage } from './storage/types.ts';
import type { Context } from 'hono';
export interface AppConfig {
sessionTimeout: number;
corsOrigins: string[];
}
/**
* Determines the origin for session isolation.
* If X-Rondevu-Global header is set to 'true', returns the global origin (https://ronde.vu).
* Otherwise, returns the request's Origin header.
*/
function getOrigin(c: Context): string {
const globalHeader = c.req.header('X-Rondevu-Global');
if (globalHeader === 'true') {
return 'https://ronde.vu';
}
return c.req.header('Origin') || c.req.header('origin') || 'unknown';
}
/**
* Creates the Hono application with WebRTC signaling endpoints
*/
@@ -28,7 +42,7 @@ export function createApp(storage: Storage, config: AppConfig) {
return config.corsOrigins[0];
},
allowMethods: ['GET', 'POST', 'OPTIONS'],
allowHeaders: ['Content-Type', 'Origin'],
allowHeaders: ['Content-Type', 'Origin', 'X-Rondevu-Global'],
exposeHeaders: ['Content-Type'],
maxAge: 600,
credentials: true,
@@ -41,7 +55,7 @@ export function createApp(storage: Storage, config: AppConfig) {
*/
app.get('/', async (c) => {
try {
const origin = c.req.header('Origin') || c.req.header('origin') || 'unknown';
const origin = getOrigin(c);
const page = parseInt(c.req.query('page') || '1', 10);
const limit = parseInt(c.req.query('limit') || '100', 10);
@@ -60,7 +74,7 @@ export function createApp(storage: Storage, config: AppConfig) {
*/
app.get('/:topic/sessions', async (c) => {
try {
const origin = c.req.header('Origin') || c.req.header('origin') || 'unknown';
const origin = getOrigin(c);
const topic = c.req.param('topic');
if (!topic) {
@@ -96,7 +110,7 @@ export function createApp(storage: Storage, config: AppConfig) {
*/
app.post('/:topic/offer', async (c) => {
try {
const origin = c.req.header('Origin') || c.req.header('origin') || 'unknown';
const origin = getOrigin(c);
const topic = c.req.param('topic');
const body = await c.req.json();
const { peerId, offer, code: customCode } = body;
@@ -138,7 +152,7 @@ export function createApp(storage: Storage, config: AppConfig) {
*/
app.post('/answer', async (c) => {
try {
const origin = c.req.header('Origin') || c.req.header('origin') || 'unknown';
const origin = getOrigin(c);
const body = await c.req.json();
const { code, answer, candidate, side } = body;
@@ -192,7 +206,7 @@ export function createApp(storage: Storage, config: AppConfig) {
*/
app.post('/poll', async (c) => {
try {
const origin = c.req.header('Origin') || c.req.header('origin') || 'unknown';
const origin = getOrigin(c);
const body = await c.req.json();
const { code, side } = body;