fix: bypass OPTIONS

Signed-off-by: Innei <i@innei.in>
mx-space · May 7, 2024 · 1a85d54 · 1a85d54
1 parent 7c56488
commit 1a85d54
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 3 deletions.
diff --git a/apps/core/src/bootstrap.ts b/apps/core/src/bootstrap.ts
@@ -62,6 +62,8 @@ export async function bootstrap() {
               callback(null, allow)
             },
             credentials: true,
+            preflightContinue: false,
+            optionsSuccessStatus: 204,
           }
         : undefined,
   )

diff --git a/apps/core/src/common/filters/any-exception.filter.ts b/apps/core/src/common/filters/any-exception.filter.ts
@@ -71,6 +71,7 @@ export class AllExceptionsFilter implements ExceptionFilter {
     const response = ctx.getResponse<FastifyReply>()
     const request = ctx.getRequest<FastifyRequest>()
 
+    if (request.method === 'OPTIONS') return response.status(204).send()
     const ip = getIp(request)
 
     const status =
@@ -86,6 +87,7 @@ export class AllExceptionsFilter implements ExceptionFilter {
       ''
     const url = request.raw?.url || request.url || 'Unknown URL'
     if (status === HttpStatus.TOO_MANY_REQUESTS) {
+      this.logger.warn(`IP: ${ip} 疑似遭到攻击 Path: ${decodeURI(url)}`)
       this.barkService.throttlePush({
         title: '疑似遭到攻击',
         body: `IP: ${ip} Path: ${decodeURI(url)}`,

diff --git a/apps/core/src/modules/serverless/serverless.controller.ts b/apps/core/src/modules/serverless/serverless.controller.ts
@@ -63,9 +63,6 @@ export class ServerlessController {
     @Request() req: FastifyRequest,
     @Response() reply: FastifyReply,
   ) {
-    if (req.method === 'OPTIONS') {
-      return reply.send()
-    }
     return this.runServerlessFunction(param, isAuthenticated, req, reply)
   }