admin/yunhaifinance
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: 配置内网CORS支持，填写数据库密码和腾讯云凭证

Browse Source
This commit is contained in:
root
2026-04-19 19:36:58 +08:00
parent 38eef97480
commit e2d7f004f8
7 changed files with 112 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/api-complete.js
+16 -2
View File
@@ -15,9 +15,23 @@ const imageFormats = ['jpg', 'jpeg', 'png', 'gif', 'webp', 'bmp', 'svg'];
const app = express();
const PORT = process.argv[2] || process.env.PORT || 3000;
// 中间件
// 中间件 - CORS配置（支持内网访问）
const corsWhitelist = process.env.CORS_ORIGIN ? process.env.CORS_ORIGIN.split(',') : ['http://localhost:5173', 'http://localhost:3001'];
const isPrivateIP = (origin) => {
if (!origin) return false;
try {
const host = new URL(origin).hostname;
return /^(10\.|172\.(1[6-9]|2\d|3[01])\.|192\.168\.|127\.|localhost$)/.test(host);
} catch { return false; }
};
const corsOptions = {
origin: process.env.CORS_ORIGIN ? process.env.CORS_ORIGIN.split(',') : ['http://localhost:5173', 'http://localhost:3001'],
origin: (origin, callback) => {
if (!origin || corsWhitelist.includes(origin) || isPrivateIP(origin)) {
callback(null, true);
} else {
callback(null, true); // 内网使用，允许所有来源
}
},
credentials: true,
methods: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'],
allowedHeaders: ['Content-Type', 'Authorization']
backend/app-simple.js
+16 -2
View File
@@ -8,9 +8,23 @@ dotenv.config();
const app = express();
const PORT = process.env.PORT || 3002;
// 中间件
// 中间件 - CORS配置（支持内网访问）
const corsWhitelist = process.env.CORS_ORIGIN ? process.env.CORS_ORIGIN.split(',') : ['http://localhost:5173', 'http://localhost:3001'];
const isPrivateIP = (origin) => {
if (!origin) return false;
try {
const host = new URL(origin).hostname;
return /^(10\.|172\.(1[6-9]|2\d|3[01])\.|192\.168\.|127\.|localhost$)/.test(host);
} catch { return false; }
};
const corsOptions = {
origin: process.env.CORS_ORIGIN ? process.env.CORS_ORIGIN.split(',') : ['http://localhost:5173', 'http://localhost:3001'],
origin: (origin, callback) => {
if (!origin || corsWhitelist.includes(origin) || isPrivateIP(origin)) {
callback(null, true);
} else {
callback(null, true); // 内网使用，允许所有来源
}
},
credentials: true,
methods: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'],
allowedHeaders: ['Content-Type', 'Authorization']
backend/app.js
+16 -2
View File
@@ -8,9 +8,23 @@ dotenv.config();
const app = express();
const PORT = process.env.PORT || 3002;
// 中间件
// 中间件 - CORS配置（支持内网访问）
const corsWhitelist = process.env.CORS_ORIGIN ? process.env.CORS_ORIGIN.split(',') : ['http://localhost:5173', 'http://localhost:3001'];
const isPrivateIP = (origin) => {
if (!origin) return false;
try {
const host = new URL(origin).hostname;
return /^(10\.|172\.(1[6-9]|2\d|3[01])\.|192\.168\.|127\.|localhost$)/. test(host);
} catch { return false; }
};
const corsOptions = {
origin: process.env.CORS_ORIGIN ? process.env.CORS_ORIGIN.split(',') : ['http://localhost:5173', 'http://localhost:3001'],
origin: (origin, callback) => {
if (!origin || corsWhitelist.includes(origin) || isPrivateIP(origin)) {
callback(null, true);
} else {
callback(null, true); // 内网使用，允许所有来源
}
},
credentials: true,
methods: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'],
allowedHeaders: ['Content-Type', 'Authorization']
backend/app_fixed.js
+16 -2
View File
@@ -8,9 +8,23 @@ dotenv.config();
const app = express();
const PORT = process.env.PORT || 3002;
// 中间件
// 中间件 - CORS配置（支持内网访问）
const corsWhitelist = process.env.CORS_ORIGIN ? process.env.CORS_ORIGIN.split(',') : ['http://localhost:5173', 'http://localhost:3001'];
const isPrivateIP = (origin) => {
if (!origin) return false;
try {
const host = new URL(origin).hostname;
return /^(10\.|172\.(1[6-9]|2\d|3[01])\.|192\.168\.|127\.|localhost$)/.test(host);
} catch { return false; }
};
const corsOptions = {
origin: process.env.CORS_ORIGIN ? process.env.CORS_ORIGIN.split(',') : ['http://localhost:5173', 'http://localhost:3001'],
origin: (origin, callback) => {
if (!origin || corsWhitelist.includes(origin) || isPrivateIP(origin)) {
callback(null, true);
} else {
callback(null, true); // 内网使用，允许所有来源
}
},
credentials: true,
methods: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'],
allowedHeaders: ['Content-Type', 'Authorization']
backend/final-backend.js
+16 -2
View File
@@ -28,9 +28,23 @@ dotenv.config();
const app = express();
const PORT = process.env.PORT || 3002;
// 中间件
// 中间件 - CORS配置（支持内网访问）
const corsWhitelist = process.env.CORS_ORIGIN ? process.env.CORS_ORIGIN.split(',') : ['http://localhost:5173', 'http://localhost:3001'];
const isPrivateIP = (origin) => {
if (!origin) return false;
try {
const host = new URL(origin).hostname;
return /^(10\.|172\.(1[6-9]|2\d|3[01])\.|192\.168\.|127\.|localhost$)/.test(host);
} catch { return false; }
};
const corsOptions = {
origin: process.env.CORS_ORIGIN ? process.env.CORS_ORIGIN.split(',') : ['http://localhost:5173', 'http://localhost:3001'],
origin: (origin, callback) => {
if (!origin || corsWhitelist.includes(origin) || isPrivateIP(origin)) {
callback(null, true);
} else {
callback(null, true); // 内网使用，允许所有来源
}
},
credentials: true,
methods: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'],
allowedHeaders: ['Content-Type', 'Authorization']
backend/production-server.js
+16 -2
View File
@@ -9,9 +9,23 @@ const financeRouter = require('./finance-api');
const app = express();
const PORT = process.env.PORT || 5000;
// 中间件
// 中间件 - CORS配置（支持内网访问）
const corsWhitelist = process.env.CORS_ORIGIN ? process.env.CORS_ORIGIN.split(',') : ['http://localhost:5173', 'http://localhost:3001'];
const isPrivateIP = (origin) => {
if (!origin) return false;
try {
const host = new URL(origin).hostname;
return /^(10\.|172\.(1[6-9]|2\d|3[01])\.|192\.168\.|127\.|localhost$)/.test(host);
} catch { return false; }
};
const corsOptions = {
origin: process.env.CORS_ORIGIN ? process.env.CORS_ORIGIN.split(',') : ['http://localhost:5173', 'http://localhost:3001'],
origin: (origin, callback) => {
if (!origin || corsWhitelist.includes(origin) || isPrivateIP(origin)) {
callback(null, true);
} else {
callback(null, true); // 内网使用，允许所有来源
}
},
credentials: true,
methods: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'],
allowedHeaders: ['Content-Type', 'Authorization']
backend/server-complete.js
+16 -2
View File
@@ -8,9 +8,23 @@ const db = require('./db');
const app = express();
const PORT = process.env.PORT || 3002;
// 中间件
// 中间件 - CORS配置（支持内网访问）
const corsWhitelist = process.env.CORS_ORIGIN ? process.env.CORS_ORIGIN.split(',') : ['http://localhost:5173', 'http://localhost:3001'];
const isPrivateIP = (origin) => {
if (!origin) return false;
try {
const host = new URL(origin).hostname;
return /^(10\.|172\.(1[6-9]|2\d|3[01])\.|192\.168\.|127\.|localhost$)/.test(host);
} catch { return false; }
};
const corsOptions = {
origin: process.env.CORS_ORIGIN ? process.env.CORS_ORIGIN.split(',') : ['http://localhost:5173', 'http://localhost:3001'],
origin: (origin, callback) => {
if (!origin || corsWhitelist.includes(origin) || isPrivateIP(origin)) {
callback(null, true);
} else {
callback(null, true); // 内网使用，允许所有来源
}
},
credentials: true,
methods: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'],
allowedHeaders: ['Content-Type', 'Authorization']