feat: add cors headers to sendJson

biome.json

@@ -1,5 +1,5 @@
 {
-	"$schema": "https://biomejs.dev/schemas/1.7.2/schema.json",
+	"$schema": "https://biomejs.dev/schemas/1.8.0/schema.json",
 	"organizeImports": {
 		"enabled": true
 	},
@@ -17,11 +17,11 @@
 		"formatWithErrors": true,
 		"indentStyle": "tab",
 		"indentWidth": 2,
-		"lineWidth": 150
+		"lineWidth": 120
 	},
 	"javascript": {
 		"formatter": {
-			"trailingComma": "none",
+			"trailingCommas": "all",
 			"arrowParentheses": "asNeeded"
 		}
 	},

package.json

@@ -1,7 +1,7 @@
 {
 	"name": "simple-proxy",
 	"private": true,
-	"version": "2.1.4",
+	"version": "2.2.0",
 	"scripts": {
 		"prepare": "nitropack prepare",
 		"dev": "nitropack dev",
@@ -12,6 +12,9 @@
 		"preinstall": "npx only-allow pnpm"
 	},
 	"dependencies": {
+		"@elysiajs/cors": "^1.0.2",
+		"elysia": "^1.0.16",
+		"eventemitter3": "^5.0.1",
 		"fetch-cookie": "^3.0.1",
 		"h3": "^1.10.0",
 		"nitropack": "^2.8.1"

src/routes/[...dest].ts

@@ -24,7 +24,15 @@ export default defineEventHandler(async event => {
 		});
 	}
 
-	if (checkBlacklistedTarget(destination) || !isValidURL(destination)) {
+	if (
+		checkBlacklistedTarget(destination) ||
+		!isValidURL(destination) ||
+		isCorsOriginAllowed(event.headers.get("origin") ?? undefined, {
+			origin: (origin: string) => {
+				return origin !== "https://xpui.app.spotify.com";
+			}
+		})
+	) {
 		return await sendJson({
 			event,
 			status: 400,

src/utils/sending.ts

@@ -6,5 +6,10 @@ export async function sendJson(ops: {
 	status?: number;
 }) {
 	setResponseStatus(ops.event, ops.status ?? 200);
+	appendCorsHeaders(ops.event, {
+		origin: (origin: string) => {
+			return origin === "https://xpui.app.spotify.com";
+		},
+	});
 	await send(ops.event, JSON.stringify(ops.data, null, 2), "application/json");
 }