"use strict" Object.defineProperty(exports, "__esModule", { value: true }) const DEFAULT_MAX_AGE = 180 * 24 * 60 * 60 function parseMaxAge(value = DEFAULT_MAX_AGE) { if (value >= 0 && Number.isFinite(value)) { return Math.floor(value) } else { throw new Error(`Strict-Transport-Security: ${JSON.stringify(value)} is not a valid value for maxAge. Please choose a positive integer.`) } } function getHeaderValueFromOptions(options) { if ("maxage" in options) { throw new Error("Strict-Transport-Security received an unsupported property, `maxage`. Did you mean to pass `maxAge`?") } if ("includeSubdomains" in options) { console.warn('Strict-Transport-Security middleware should use `includeSubDomains` instead of `includeSubdomains`. (The correct one has an uppercase "D".)') } if ("setIf" in options) { console.warn("Strict-Transport-Security middleware no longer supports the `setIf` parameter. See the documentation and if you need help replicating this behavior.") } const directives = [`max-age=${parseMaxAge(options.maxAge)}`] if (options.includeSubDomains === undefined || options.includeSubDomains) { directives.push("includeSubDomains") } if (options.preload) { directives.push("preload") } return directives.join("; ") } function strictTransportSecurity(options = {}) { const headerValue = getHeaderValueFromOptions(options) return function strictTransportSecurityMiddleware(_req, res, next) { res.setHeader("Strict-Transport-Security", headerValue) next() } } module.exports = strictTransportSecurity exports.default = strictTransportSecurity