setSimpleHeaders() — fiber Function Reference

Architecture documentation for the setSimpleHeaders() function in cors.go from the fiber codebase.

Function go FiberCore Adapters called by 2

Entity Profile

FiberCore→ Adapters→ setSimpleHeaders() — fiber Function Reference

Dependency Diagram

graph TD
  b209eb6c_c11b_418b_1c48_f62f26b25ccc["setSimpleHeaders()"]
  44855f15_c1df_ce6b_695f_24aa3cc78dd0["cors.go"]
  b209eb6c_c11b_418b_1c48_f62f26b25ccc -->|defined in| 44855f15_c1df_ce6b_695f_24aa3cc78dd0
  54c44c1d_58d3_cf2b_fb3c_32185916a214["New()"]
  54c44c1d_58d3_cf2b_fb3c_32185916a214 -->|calls| b209eb6c_c11b_418b_1c48_f62f26b25ccc
  79dd7047_b0c9_9b9a_33c3_fb5b58b10888["setPreflightHeaders()"]
  79dd7047_b0c9_9b9a_33c3_fb5b58b10888 -->|calls| b209eb6c_c11b_418b_1c48_f62f26b25ccc
  style b209eb6c_c11b_418b_1c48_f62f26b25ccc fill:#6366f1,stroke:#818cf8,color:#fff

Relationship Graph

Source Code

middleware/cors/cors.go lines 214–237

func setSimpleHeaders(c fiber.Ctx, allowOrigin string, cfg *Config) {
	if cfg == nil {
		return
	}

	if cfg.AllowCredentials {
		// When AllowCredentials is true, set the Access-Control-Allow-Origin to the specific origin instead of '*'
		if allowOrigin == "*" {
			c.Set(fiber.HeaderAccessControlAllowOrigin, allowOrigin)
			log.Warn("[CORS] 'AllowCredentials' is true, but 'AllowOrigins' cannot be set to '*'.")
		} else if allowOrigin != "" {
			c.Set(fiber.HeaderAccessControlAllowOrigin, allowOrigin)
			c.Set(fiber.HeaderAccessControlAllowCredentials, "true")
		}
	} else if allowOrigin != "" {
		// For non-credential requests, it's safe to set to '*' or specific origins
		c.Set(fiber.HeaderAccessControlAllowOrigin, allowOrigin)
	}

	// Set Expose-Headers if not empty
	if len(cfg.ExposeHeaders) > 0 {
		c.Set(fiber.HeaderAccessControlExposeHeaders, strings.Join(cfg.ExposeHeaders, ", "))
	}
}