routeOPTIONS.ts

import { RequestLogger } from 'werelogs';

import * as routesUtils from '../routesUtils';
import errors from '../../errors';
import * as http from 'http';
import StatsClient from '../../metrics/StatsClient';

export default function routeOPTIONS(
    request: http.IncomingMessage,
    response: http.ServerResponse,
    api: routesUtils.ApiMethods,
    log: RequestLogger,
    statsClient?: StatsClient,
) {
    log.debug('routing request', { method: 'routeOPTION' });

    const corsMethod = request.headers['access-control-request-method'] || null;

    if (!request.headers.origin) {
        const msg = 'Insufficient information. Origin request header needed.';
        const err = errors.BadRequest.customizeDescription(msg);
        log.debug('missing origin', { method: 'routeOPTIONS', error: err });
        return routesUtils.responseXMLBody(err, null, response, log);
    }
    if (['GET', 'PUT', 'HEAD', 'POST', 'DELETE'].indexOf(corsMethod ?? '') < 0) {
        const msg = `Invalid Access-Control-Request-Method: ${corsMethod}`;
        const err = errors.BadRequest.customizeDescription(msg);
        log.debug('invalid Access-Control-Request-Method',
            { method: 'routeOPTIONS', error: err });
        return routesUtils.responseXMLBody(err, null, response, log);
    }

    return api.callApiMethod('corsPreflight', request, response, log,
        (err, resHeaders) => {
            routesUtils.statsReport500(err, statsClient);
            return routesUtils.responseNoBody(err, resHeaders, response, 200,
                log);
        });
}