node_modules ignore

server/node_modules/@koa/cors/LICENSE

@@ -0,0 +1,21 @@
+This software is licensed under the MIT License.
+
+Copyright (c) 2015 - present koajs and other contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

server/node_modules/@koa/cors/README.md

@@ -0,0 +1,87 @@
+# @koa/cors
+
+[![NPM version][npm-image]][npm-url]
+[![Node.js CI](https://github.com/koajs/cors/actions/workflows/nodejs.yml/badge.svg)](https://github.com/koajs/cors/actions/workflows/nodejs.yml)
+[![Test coverage][codecov-image]][codecov-url]
+[![npm download][download-image]][download-url]
+
+[npm-image]: https://img.shields.io/npm/v/@koa/cors.svg?style=flat-square
+[npm-url]: https://npmjs.org/package/@koa/cors
+[codecov-image]: https://codecov.io/github/koajs/cors/coverage.svg?branch=v2.x
+[codecov-url]: https://codecov.io/github/koajs/cors?branch=v2.x
+[download-image]: https://img.shields.io/npm/dm/@koa/cors.svg?style=flat-square
+[download-url]: https://npmjs.org/package/@koa/cors
+
+[Cross-Origin Resource Sharing(CORS)](https://developer.mozilla.org/en/docs/Web/HTTP/Access_control_CORS) for koa
+
+## Installation
+
+```bash
+$ npm install @koa/cors --save
+```
+
+## Quick start
+
+Enable cors with default options:
+
+- origin: request Origin header
+- allowMethods: GET,HEAD,PUT,POST,DELETE,PATCH
+
+```js
+const Koa = require('koa');
+const cors = require('@koa/cors');
+
+const app = new Koa();
+app.use(cors());
+```
+
+## cors(options)
+
+```js
+/**
+ * CORS middleware
+ *
+ * @param {Object} [options]
+ *  - {String|Function(ctx)} origin `Access-Control-Allow-Origin`, default is '*'
+ *    If `credentials` set and return `true, the `origin` default value will set to the request `Origin` header
+ *  - {String|Array} allowMethods `Access-Control-Allow-Methods`, default is 'GET,HEAD,PUT,POST,DELETE,PATCH'
+ *  - {String|Array} exposeHeaders `Access-Control-Expose-Headers`
+ *  - {String|Array} allowHeaders `Access-Control-Allow-Headers`
+ *  - {String|Number} maxAge `Access-Control-Max-Age` in seconds
+ *  - {Boolean|Function(ctx)} credentials `Access-Control-Allow-Credentials`, default is false.
+ *  - {Boolean} keepHeadersOnError Add set headers to `err.header` if an error is thrown
+ *  - {Boolean} secureContext `Cross-Origin-Opener-Policy` & `Cross-Origin-Embedder-Policy` headers.', default is false
+ *  - {Boolean} privateNetworkAccess handle `Access-Control-Request-Private-Network` request by return `Access-Control-Allow-Private-Network`, default to false
+ * @return {Function} cors middleware
+ * @api public
+ */
+```
+
+## Breaking change between 5.0 and 4.0
+
+The default `origin` is set to `*`, if you want to keep the 4.0 behavior, you can set the `origin` handler like this:
+
+```js
+app.use(cors({
+  origin(ctx) {
+    return ctx.get('Origin') || '*';
+  },
+}));
+```
+
+## License
+
+[MIT](./LICENSE)
+
+<!-- GITCONTRIBUTOR_START -->
+
+## Contributors
+
+|[<img src="https://avatars.githubusercontent.com/u/156269?v=4" width="100px;"/><br/><sub><b>fengmk2</b></sub>](https://github.com/fengmk2)<br/>|[<img src="https://avatars.githubusercontent.com/u/985607?v=4" width="100px;"/><br/><sub><b>dead-horse</b></sub>](https://github.com/dead-horse)<br/>|[<img src="https://avatars.githubusercontent.com/u/1127384?v=4" width="100px;"/><br/><sub><b>omsmith</b></sub>](https://github.com/omsmith)<br/>|[<img src="https://avatars.githubusercontent.com/u/643505?v=4" width="100px;"/><br/><sub><b>jonathanong</b></sub>](https://github.com/jonathanong)<br/>|[<img src="https://avatars.githubusercontent.com/u/5622516?v=4" width="100px;"/><br/><sub><b>AlphaWong</b></sub>](https://github.com/AlphaWong)<br/>|[<img src="https://avatars.githubusercontent.com/u/55783048?v=4" width="100px;"/><br/><sub><b>cma-skedulo</b></sub>](https://github.com/cma-skedulo)<br/>|
+| :---: | :---: | :---: | :---: | :---: | :---: |
+|[<img src="https://avatars.githubusercontent.com/u/6992588?v=4" width="100px;"/><br/><sub><b>CleberRossi</b></sub>](https://github.com/CleberRossi)<br/>|[<img src="https://avatars.githubusercontent.com/u/178720?v=4" width="100px;"/><br/><sub><b>erikfried</b></sub>](https://github.com/erikfried)<br/>|[<img src="https://avatars.githubusercontent.com/u/1217939?v=4" width="100px;"/><br/><sub><b>j-waaang</b></sub>](https://github.com/j-waaang)<br/>|[<img src="https://avatars.githubusercontent.com/u/4184677?v=4" width="100px;"/><br/><sub><b>ltomes</b></sub>](https://github.com/ltomes)<br/>|[<img src="https://avatars.githubusercontent.com/u/372420?v=4" width="100px;"/><br/><sub><b>lfreneda</b></sub>](https://github.com/lfreneda)<br/>|[<img src="https://avatars.githubusercontent.com/u/170299?v=4" width="100px;"/><br/><sub><b>matthewmueller</b></sub>](https://github.com/matthewmueller)<br/>|
+[<img src="https://avatars.githubusercontent.com/u/6006498?v=4" width="100px;"/><br/><sub><b>PlasmaPower</b></sub>](https://github.com/PlasmaPower)<br/>|[<img src="https://avatars.githubusercontent.com/u/14932834?v=4" width="100px;"/><br/><sub><b>swain</b></sub>](https://github.com/swain)<br/>|[<img src="https://avatars.githubusercontent.com/u/49938086?v=4" width="100px;"/><br/><sub><b>TyrealHu</b></sub>](https://github.com/TyrealHu)<br/>|[<img src="https://avatars.githubusercontent.com/u/8369011?v=4" width="100px;"/><br/><sub><b>xg-wang</b></sub>](https://github.com/xg-wang)<br/>|[<img src="https://avatars.githubusercontent.com/u/12003270?v=4" width="100px;"/><br/><sub><b>lishengzxc</b></sub>](https://github.com/lishengzxc)<br/>|[<img src="https://avatars.githubusercontent.com/u/514097?v=4" width="100px;"/><br/><sub><b>mcohen75</b></sub>](https://github.com/mcohen75)<br/>
+
+This project follows the git-contributor [spec](https://github.com/xudafeng/git-contributor), auto updated at `Sat Oct 08 2022 21:35:10 GMT+0800`.
+
+<!-- GITCONTRIBUTOR_END -->

server/node_modules/@koa/cors/index.js

@@ -0,0 +1,167 @@
+const vary = require('vary');
+
+/**
+ * CORS middleware
+ *
+ * @param {Object} [options]
+ *  - {String|Function(ctx)} origin `Access-Control-Allow-Origin`, default is '*'
+ *    If `credentials` set and return `true, the `origin` default value will set to the request `Origin` header
+ *  - {String|Array} allowMethods `Access-Control-Allow-Methods`, default is 'GET,HEAD,PUT,POST,DELETE,PATCH'
+ *  - {String|Array} exposeHeaders `Access-Control-Expose-Headers`
+ *  - {String|Array} allowHeaders `Access-Control-Allow-Headers`
+ *  - {String|Number} maxAge `Access-Control-Max-Age` in seconds
+ *  - {Boolean|Function(ctx)} credentials `Access-Control-Allow-Credentials`
+ *  - {Boolean} keepHeadersOnError Add set headers to `err.header` if an error is thrown
+ *  - {Boolean} secureContext `Cross-Origin-Opener-Policy` & `Cross-Origin-Embedder-Policy` headers.', default is false
+ *    @see https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/SharedArrayBuffer/Planned_changes
+ *  - {Boolean} privateNetworkAccess handle `Access-Control-Request-Private-Network` request by return `Access-Control-Allow-Private-Network`, default to false
+ *    @see https://wicg.github.io/private-network-access/
+ * @return {Function} cors middleware
+ * @public
+ */
+module.exports = function(options) {
+  const defaults = {
+    allowMethods: 'GET,HEAD,PUT,POST,DELETE,PATCH',
+    secureContext: false,
+  };
+
+  options = {
+    ...defaults,
+    ...options,
+  };
+
+  if (Array.isArray(options.exposeHeaders)) {
+    options.exposeHeaders = options.exposeHeaders.join(',');
+  }
+
+  if (Array.isArray(options.allowMethods)) {
+    options.allowMethods = options.allowMethods.join(',');
+  }
+
+  if (Array.isArray(options.allowHeaders)) {
+    options.allowHeaders = options.allowHeaders.join(',');
+  }
+
+  if (options.maxAge) {
+    options.maxAge = String(options.maxAge);
+  }
+
+  options.keepHeadersOnError = options.keepHeadersOnError === undefined || !!options.keepHeadersOnError;
+
+  return async function cors(ctx, next) {
+    // If the Origin header is not present terminate this set of steps.
+    // The request is outside the scope of this specification.
+    const requestOrigin = ctx.get('Origin');
+
+    // Always set Vary header
+    // https://github.com/rs/cors/issues/10
+    ctx.vary('Origin');
+
+    let origin;
+    if (typeof options.origin === 'function') {
+      origin = await options.origin(ctx);
+      if (!origin) {
+        return await next();
+      }
+    } else {
+      origin = options.origin || '*';
+    }
+
+    let credentials;
+    if (typeof options.credentials === 'function') {
+      credentials = await options.credentials(ctx);
+    } else {
+      credentials = !!options.credentials;
+    }
+
+    if (credentials && origin === '*') {
+      origin = requestOrigin;
+    }
+
+    const headersSet = {};
+
+    function set(key, value) {
+      ctx.set(key, value);
+      headersSet[key] = value;
+    }
+
+    if (ctx.method !== 'OPTIONS') {
+      // Simple Cross-Origin Request, Actual Request, and Redirects
+      set('Access-Control-Allow-Origin', origin);
+
+      if (credentials === true) {
+        set('Access-Control-Allow-Credentials', 'true');
+      }
+
+      if (options.exposeHeaders) {
+        set('Access-Control-Expose-Headers', options.exposeHeaders);
+      }
+
+      if (options.secureContext) {
+        set('Cross-Origin-Opener-Policy', 'same-origin');
+        set('Cross-Origin-Embedder-Policy', 'require-corp');
+      }
+
+      if (!options.keepHeadersOnError) {
+        return await next();
+      }
+      try {
+        return await next();
+      } catch (err) {
+        const errHeadersSet = err.headers || {};
+        const varyWithOrigin = vary.append(errHeadersSet.vary || errHeadersSet.Vary || '', 'Origin');
+        delete errHeadersSet.Vary;
+
+        err.headers = {
+          ...errHeadersSet,
+          ...headersSet,
+          ...{ vary: varyWithOrigin },
+        };
+        throw err;
+      }
+    } else {
+      // Preflight Request
+
+      // If there is no Access-Control-Request-Method header or if parsing failed,
+      // do not set any additional headers and terminate this set of steps.
+      // The request is outside the scope of this specification.
+      if (!ctx.get('Access-Control-Request-Method')) {
+        // this not preflight request, ignore it
+        return await next();
+      }
+
+      ctx.set('Access-Control-Allow-Origin', origin);
+
+      if (credentials === true) {
+        ctx.set('Access-Control-Allow-Credentials', 'true');
+      }
+
+      if (options.maxAge) {
+        ctx.set('Access-Control-Max-Age', options.maxAge);
+      }
+
+      if (options.privateNetworkAccess && ctx.get('Access-Control-Request-Private-Network')) {
+        ctx.set('Access-Control-Allow-Private-Network', 'true');
+      }
+
+      if (options.allowMethods) {
+        ctx.set('Access-Control-Allow-Methods', options.allowMethods);
+      }
+
+      if (options.secureContext) {
+        set('Cross-Origin-Opener-Policy', 'same-origin');
+        set('Cross-Origin-Embedder-Policy', 'require-corp');
+      }
+
+      let allowHeaders = options.allowHeaders;
+      if (!allowHeaders) {
+        allowHeaders = ctx.get('Access-Control-Request-Headers');
+      }
+      if (allowHeaders) {
+        ctx.set('Access-Control-Allow-Headers', allowHeaders);
+      }
+
+      ctx.status = 204;
+    }
+  };
+};

server/node_modules/@koa/cors/package.json

@@ -0,0 +1,54 @@
+{
+  "name": "@koa/cors",
+  "version": "5.0.0",
+  "description": "Cross-Origin Resource Sharing(CORS) for koa",
+  "main": "index.js",
+  "files": [
+    "index.js"
+  ],
+  "scripts": {
+    "contributor": "git-contributor",
+    "test": "NODE_ENV=test mocha --check-leaks -R spec -t 5000 test/*.test.js",
+    "test-cov": "NODE_ENV=test istanbul cover _mocha -- --check-leaks -t 5000 test/*.test.js",
+    "ci": "npm run lint && npm run test-cov",
+    "lint": "eslint index.js test"
+  },
+  "dependencies": {
+    "vary": "^1.1.2"
+  },
+  "devDependencies": {
+    "egg-ci": "^2.1.0",
+    "eslint": "^8.25.0",
+    "eslint-config-egg": "^12.0.0",
+    "git-contributor": "^1.0.10",
+    "istanbul": "*",
+    "koa": "^2.5.1",
+    "mocha": "^3.5.3",
+    "supertest": "^3.1.0"
+  },
+  "homepage": "https://github.com/koajs/cors",
+  "repository": {
+    "type": "git",
+    "url": "git://github.com/koajs/cors.git"
+  },
+  "bugs": {
+    "url": "https://github.com/koajs/cors/issues"
+  },
+  "keywords": [
+    "cors",
+    "koa-cors",
+    "Cross-Origin Resource Sharing",
+    "@koa/cors",
+    "koa",
+    "koajs"
+  ],
+  "engines": {
+    "node": ">= 14.0.0"
+  },
+  "ci": {
+    "version": "14, 16, 18, 20",
+    "os": "linux"
+  },
+  "author": "fengmk2 <fengmk2@gmail.com> (http://github.com/fengmk2)",
+  "license": "MIT"
+}