|
| 1 | +/*! coi-serviceworker v0.1.7 - Guido Zuidhof and contributors, licensed under MIT */ |
| 2 | + |
| 3 | +// This service worker is responsible for intercepting fetch requests to |
| 4 | +// assets hosted on the same origin, and attaching CORS headers that |
| 5 | +// allow SharedArrayBuffer to function (required by @rolldown/browser). |
| 6 | + |
| 7 | +let coepCredentialless = false; |
| 8 | +if (typeof window === 'undefined') { |
| 9 | + self.addEventListener('install', () => self.skipWaiting()); |
| 10 | + self.addEventListener( |
| 11 | + 'activate', |
| 12 | + (event) => event.waitUntil(self.clients.claim()), |
| 13 | + ); |
| 14 | + |
| 15 | + self.addEventListener('message', (ev) => { |
| 16 | + if (!ev.data) { |
| 17 | + return; |
| 18 | + } |
| 19 | + |
| 20 | + if (ev.data.type === 'deregister') { |
| 21 | + self.registration |
| 22 | + .unregister() |
| 23 | + .then(() => { |
| 24 | + return self.clients.matchAll(); |
| 25 | + }) |
| 26 | + .then((clients) => { |
| 27 | + for (const client of clients) { |
| 28 | + client.navigate(client.url); |
| 29 | + } |
| 30 | + }); |
| 31 | + } else if (ev.data.type === 'coepCredentialless') { |
| 32 | + coepCredentialless = ev.data.value; |
| 33 | + } |
| 34 | + }); |
| 35 | + |
| 36 | + self.addEventListener('fetch', (event) => { |
| 37 | + const r = event.request; |
| 38 | + if (r.cache === 'only-if-cached' && r.mode !== 'same-origin') { |
| 39 | + return; |
| 40 | + } |
| 41 | + |
| 42 | + const request = (coepCredentialless && r.mode === 'no-cors') |
| 43 | + ? new Request(r, { |
| 44 | + credentials: 'omit', |
| 45 | + }) |
| 46 | + : r; |
| 47 | + event.respondWith( |
| 48 | + fetch(request) |
| 49 | + .then((response) => { |
| 50 | + if (response.status === 0) { |
| 51 | + return response; |
| 52 | + } |
| 53 | + |
| 54 | + const newHeaders = new Headers(response.headers); |
| 55 | + newHeaders.set( |
| 56 | + 'Cross-Origin-Embedder-Policy', |
| 57 | + coepCredentialless ? 'credentialless' : 'require-corp', |
| 58 | + ); |
| 59 | + if (!coepCredentialless) { |
| 60 | + newHeaders.set('Cross-Origin-Resource-Policy', 'cross-origin'); |
| 61 | + } |
| 62 | + newHeaders.set('Cross-Origin-Opener-Policy', 'same-origin'); |
| 63 | + |
| 64 | + return new Response(response.body, { |
| 65 | + status: response.status, |
| 66 | + statusText: response.statusText, |
| 67 | + headers: newHeaders, |
| 68 | + }); |
| 69 | + }) |
| 70 | + .catch((e) => console.error(e)), |
| 71 | + ); |
| 72 | + }); |
| 73 | +} else { |
| 74 | + (() => { |
| 75 | + const reloadedBySelf = window.sessionStorage.getItem('coiReloadedBySelf'); |
| 76 | + window.sessionStorage.removeItem('coiReloadedBySelf'); |
| 77 | + const coepDegrading = reloadedBySelf === 'coepdegrade'; |
| 78 | + |
| 79 | + // You can customize the behavior of this script through a global `coi` variable. |
| 80 | + const coi = { |
| 81 | + shouldRegister: () => !reloadedBySelf, |
| 82 | + shouldDeregister: () => false, |
| 83 | + coepCredentialless: () => true, |
| 84 | + coepDegrade: () => true, |
| 85 | + doReload: () => window.location.reload(), |
| 86 | + quiet: false, |
| 87 | + ...window.coi, |
| 88 | + }; |
| 89 | + |
| 90 | + const n = navigator; |
| 91 | + const controlling = !!n.serviceWorker && !!n.serviceWorker.controller; |
| 92 | + |
| 93 | + // Record the failure if the page is served by serviceWorker. |
| 94 | + if (controlling && !window.crossOriginIsolated) { |
| 95 | + window.sessionStorage.setItem('coiCoepHasFailed', 'true'); |
| 96 | + } |
| 97 | + const coepHasFailed = window.sessionStorage.getItem('coiCoepHasFailed'); |
| 98 | + |
| 99 | + if (controlling) { |
| 100 | + // Reload only on the first failure. |
| 101 | + const reloadToDegrade = coi.coepDegrade() && !( |
| 102 | + coepDegrading || window.crossOriginIsolated |
| 103 | + ); |
| 104 | + n.serviceWorker.controller.postMessage({ |
| 105 | + type: 'coepCredentialless', |
| 106 | + value: (reloadToDegrade || coepHasFailed && coi.coepDegrade()) |
| 107 | + ? false |
| 108 | + : coi.coepCredentialless(), |
| 109 | + }); |
| 110 | + if (reloadToDegrade) { |
| 111 | + !coi.quiet && console.log('Reloading page to degrade COEP.'); |
| 112 | + window.sessionStorage.setItem('coiReloadedBySelf', 'coepdegrade'); |
| 113 | + coi.doReload('coepdegrade'); |
| 114 | + } |
| 115 | + |
| 116 | + if (coi.shouldDeregister()) { |
| 117 | + n.serviceWorker.controller.postMessage({ type: 'deregister' }); |
| 118 | + } |
| 119 | + } |
| 120 | + |
| 121 | + // If we're already coi: do nothing. Perhaps it's due to this script doing its job, or COOP/COEP are |
| 122 | + // already set from the origin server. Also if the browser has no notion of crossOriginIsolated, just give up here. |
| 123 | + if (window.crossOriginIsolated !== false || !coi.shouldRegister()) return; |
| 124 | + |
| 125 | + if (!window.isSecureContext) { |
| 126 | + !coi.quiet && |
| 127 | + console.log( |
| 128 | + 'COOP/COEP Service Worker not registered, a secure context is required.', |
| 129 | + ); |
| 130 | + return; |
| 131 | + } |
| 132 | + |
| 133 | + // In some environments (e.g. Firefox private mode) this won't be available |
| 134 | + if (!n.serviceWorker) { |
| 135 | + !coi.quiet && |
| 136 | + console.error( |
| 137 | + 'COOP/COEP Service Worker not registered, perhaps due to private mode.', |
| 138 | + ); |
| 139 | + return; |
| 140 | + } |
| 141 | + |
| 142 | + n.serviceWorker.register(window.document.currentScript.src).then( |
| 143 | + (registration) => { |
| 144 | + !coi.quiet && |
| 145 | + console.log( |
| 146 | + 'COOP/COEP Service Worker registered', |
| 147 | + registration.scope, |
| 148 | + ); |
| 149 | + |
| 150 | + registration.addEventListener('updatefound', () => { |
| 151 | + !coi.quiet && |
| 152 | + console.log( |
| 153 | + 'Reloading page to make use of updated COOP/COEP Service Worker.', |
| 154 | + ); |
| 155 | + window.sessionStorage.setItem('coiReloadedBySelf', 'updatefound'); |
| 156 | + coi.doReload(); |
| 157 | + }); |
| 158 | + |
| 159 | + // If the registration is active, but it's not controlling the page |
| 160 | + if (registration.active && !n.serviceWorker.controller) { |
| 161 | + !coi.quiet && |
| 162 | + console.log( |
| 163 | + 'Reloading page to make use of COOP/COEP Service Worker.', |
| 164 | + ); |
| 165 | + window.sessionStorage.setItem('coiReloadedBySelf', 'notcontrolling'); |
| 166 | + coi.doReload(); |
| 167 | + } |
| 168 | + }, |
| 169 | + (err) => { |
| 170 | + !coi.quiet && |
| 171 | + console.error('COOP/COEP Service Worker failed to register:', err); |
| 172 | + }, |
| 173 | + ); |
| 174 | + })(); |
| 175 | +} |
0 commit comments