admtracksteel/SteelCheck
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: correct API URL pathname parsing and CORS methods in server.js

Browse Source
This commit is contained in:
admtracksteel
2026-06-23 18:15:41 +00:00
parent 094fc8aa1a
commit 1dc136d650
1 changed files with 8 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server.js
+8 -6
View File
@@ -31,7 +31,7 @@ const MIME_TYPES = {
const server = http.createServer((req, res) => { const server = http.createServer((req, res) => {
// CORS headers // CORS headers
res.setHeader('Access-Control-Allow-Origin', '*'); res.setHeader('Access-Control-Allow-Origin', '*');
res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS'); res.setHeader('Access-Control-Allow-Methods', 'GET, POST, PUT, DELETE, OPTIONS');
res.setHeader('Access-Control-Allow-Headers', 'Content-Type'); res.setHeader('Access-Control-Allow-Headers', 'Content-Type');
if (req.method === 'OPTIONS') { if (req.method === 'OPTIONS') {
@@ -40,8 +40,11 @@ const server = http.createServer((req, res) => {
return; return;
} }
const parsedUrl = new URL(req.url, `http://${req.headers.host || 'localhost'}`);
const pathname = parsedUrl.pathname;
// API Config GET // API Config GET
if (req.url === '/api/config' && req.method === 'GET') { if (pathname === '/api/config' && req.method === 'GET') {
res.writeHead(200, { 'Content-Type': 'application/json' }); res.writeHead(200, { 'Content-Type': 'application/json' });
if (fs.existsSync(CONFIG_FILE)) { if (fs.existsSync(CONFIG_FILE)) {
try { try {
@@ -57,7 +60,7 @@ const server = http.createServer((req, res) => {
} }
// API Config POST // API Config POST
if (req.url === '/api/config' && req.method === 'POST') { if (pathname === '/api/config' && req.method === 'POST') {
let body = ''; let body = '';
req.on('data', chunk => { req.on('data', chunk => {
body += chunk.toString(); body += chunk.toString();
@@ -85,7 +88,7 @@ const server = http.createServer((req, res) => {
return []; return [];
}; };
if (req.url.startsWith('/api/categories')) { if (pathname === '/api/categories') {
if (req.method === 'GET') { if (req.method === 'GET') {
res.writeHead(200, { 'Content-Type': 'application/json' }); res.writeHead(200, { 'Content-Type': 'application/json' });
res.end(JSON.stringify(readCategories())); res.end(JSON.stringify(readCategories()));
@@ -119,8 +122,7 @@ const server = http.createServer((req, res) => {
} }
if (req.method === 'DELETE') { if (req.method === 'DELETE') {
const urlParams = new URL(req.url, `http://${req.headers.host}`); const id = parsedUrl.searchParams.get('id');
const id = urlParams.searchParams.get('id');
if (id) { if (id) {
let categories = readCategories(); let categories = readCategories();
categories = categories.filter(c => c.id !== id); categories = categories.filter(c => c.id !== id);