From 2e87c6f4daa4acffe697162a0c6daae4d5e5f000 Mon Sep 17 00:00:00 2001
From: PuerNya <safarier@outlook.com>
Date: Wed, 27 Dec 2023 16:20:40 +0800
Subject: [PATCH] chore: add a new cors response header

---
 hub/route/server.go | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/hub/route/server.go b/hub/route/server.go
index a3a387c9..8e7f225f 100644
--- a/hub/route/server.go
+++ b/hub/route/server.go
@@ -63,6 +63,7 @@ func Start(addr string, tlsAddr string, secret string,
 		AllowedHeaders: []string{"Content-Type", "Authorization"},
 		MaxAge:         300,
 	})
+	r.Use(setPrivateNetworkAccess)
 	r.Use(corsM.Handler)
 	if isDebug {
 		r.Mount("/debug", func() http.Handler {
@@ -149,6 +150,15 @@ func Start(addr string, tlsAddr string, secret string,
 
 }
 
+func setPrivateNetworkAccess(next http.Handler) http.Handler {
+	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		if r.Method == http.MethodOptions && r.Header.Get("Access-Control-Request-Method") != "" {
+			w.Header().Add("Access-Control-Allow-Private-Network", "true")
+		}
+		next.ServeHTTP(w, r)
+	})
+}
+
 func safeEuqal(a, b string) bool {
 	aBuf := utils.ImmutableBytesFromString(a)
 	bBuf := utils.ImmutableBytesFromString(b)