Function wrapCallbackWithErrorCorsHeaders

lib/api/api.js:135–182

(callback, request, response, log)

// improve that ceiling; the unit test in tests/unit/api/corsErrorHeaders.js
// asserts it.
function wrapCallbackWithErrorCorsHeaders(callback, request, response, log) {
    function applyHeadersFromBucket(bucket) {
        if (!bucket || response.headersSent) {
            return;
        }
        const headers = collectCorsHeaders(
            request.headers.origin, request.method, bucket);
        Object.keys(headers).forEach(key => {
            try {
                response.setHeader(key, headers[key]);
            } catch (e) {
                log.debug('could not set CORS header on error', {
                    header: key, error: e.message,
                });
            }
        });
    }

    return (err, ...callbackArgs) => {
        if (!err || !request.headers || !request.headers.origin
            || !request.bucketName) {
            return callback(err, ...callbackArgs);
        }
        // Fast path: most post-auth failures come back with corsHeaders
        // already computed by the handler. The route will forward them
        // to responseXMLBody/responseNoBody, so no extra lookup is needed.
        if (hasCorsHeaders(callbackArgs)) {
            return callback(err, ...callbackArgs);
        }
        // Fallback: either the bucket was never loaded (pre-handler
        // failure like auth.server.doAuth denial, header-size check,
        // copy-source parse error) or the handler returned without
        // surfacing CORS headers. Re-fetch the bucket using the
        // request's bucketName (the destination on copy operations) so
        // we evaluate CORS against the right bucket.
        return metadata.getBucket(request.bucketName, log, (mdErr, bucket) => {
            if (mdErr) {
                log.warn('could not fetch bucket CORS config for error response', {
                    bucketName: request.bucketName,
                    error: mdErr.code || mdErr.message,
                });
                return callback(err, ...callbackArgs);
            }
            applyHeadersFromBucket(bucket);
            return callback(err, ...callbackArgs);
        });
    };
}

function checkAuthResults(authResults, apiMethod, log) {
    let returnTagCount = true;