Initial commit

lib/barong/cors/validations.rb

@@ -0,0 +1,35 @@
+# frozen_string_literal: true
+
+# Provides CORS variables validation.
+module Barong
+  module CORS
+    # Main CORS policy logic
+    module Validations
+      Error = Class.new(StandardError)
+
+      class << self
+        def validate_origins(origins)
+          origins.split(',').each_with_object([]) do |origin, domains|
+            if origin == '*'
+              Rails.logger.info { "WARNING: API_CORS_ORIGIN is set to '*'" }
+              return '*'
+            elsif origin.match? %r{https?:\/\/([a-zA-Z0-9]+)(\.[a-zA-Z0-9]+)*(:^[0-9]*$+)?}
+              domains << origin
+            else
+              raise CORS::Validations::Error, "Set right origin domain name instead of #{origin}"
+            end
+          end
+        end
+
+        def validate_max_age(max_age)
+          if max_age.present? && max_age.match?(/^[0-9]*$/)
+            max_age
+          else
+            Rails.logger.info { 'WARNING: Incorect or missing API_CORS_MAX_AGE value. Using default value: 3600' }
+            '3600'
+          end
+        end
+      end
+    end
+  end
+end