Function isAllowedOrigin

apps/local/src/serve-shared.ts:53–57

(origin: string, allowed: ReadonlySet<string>)

 * from handing an authenticated cross-origin channel to any web page.
 */
export const isAllowedOrigin = (origin: string, allowed: ReadonlySet<string>): boolean => {
  const hostname = hostnameFromOrigin(origin);
  if (hostname === null) return false;
  return allowed.has(hostname) || allowed.has(`[${hostname}]`);
};

export const hasBearerToken = (request: Request, token: string): boolean => {
  const authorization = request.headers.get("authorization");