51 lines
1.3 KiB
TypeScript
51 lines
1.3 KiB
TypeScript
|
import {
|
||
|
|
buildRelayRequest,
|
||
|
|
createRelayResponse,
|
||
|
|
normalizeTargetUrl,
|
||
|
|
stripRelayHeaders,
|
||
|
|
isAllowedTarget,
|
||
|
|
} from "../relay-utils";
|
||
|
|
|
||
|
|
export const config = { runtime: "edge" };
|
||
|
|
|
||
|
|
const ALLOWED_METHODS = new Set(["GET", "POST", "PUT", "DELETE", "PATCH", "HEAD", "OPTIONS"]);
|
||
|
|
|
||
|
|
export default async function handler(req: Request): Promise<Response> {
|
||
|
|
if (!ALLOWED_METHODS.has(req.method)) {
|
||
|
|
return new Response(JSON.stringify({ error: "Method not allowed" }), {
|
||
|
|
status: 405,
|
||
|
|
headers: { "content-type": "application/json" },
|
||
|
|
});
|
||
|
|
}
|
||
|
|
|
||
|
|
const target = req.headers.get("x-relay-target");
|
||
|
|
const relayPath = req.headers.get("x-relay-path") || "/";
|
||
|
|
|
||
|
|
const targetUrl = normalizeTargetUrl(target, relayPath);
|
||
|
|
if (!targetUrl) {
|
||
|
|
return new Response(
|
||
|
|
JSON.stringify({ error: "Missing x-relay-target header" }),
|
||
|
|
{
|
||
|
|
status: 400,
|
||
|
|
headers: { "content-type": "application/json" },
|
||
|
|
},
|
||
|
|
);
|
||
|
|
}
|
||
|
|
|
||
|
|
if (!isAllowedTarget(targetUrl)) {
|
||
|
|
return new Response(
|
||
|
|
JSON.stringify({ error: "Target domain not allowed" }),
|
||
|
|
{
|
||
|
|
status: 403,
|
||
|
|
headers: { "content-type": "application/json" },
|
||
|
|
},
|
||
|
|
);
|
||
|
|
}
|
||
|
|
|
||
|
|
const headers = stripRelayHeaders(new Headers(req.headers));
|
||
|
|
const fetchOptions = buildRelayRequest(req, headers);
|
||
|
|
|
||
|
|
const response = await fetch(targetUrl, fetchOptions);
|
||
|
|
return createRelayResponse(response);
|
||
|
|
}
|