Awesome GitHub RepositoriesCross-Origin Resource Sharing

Agent-skills is a collection of structured instructions and behavioral personas designed to standardize how AI coding agents perform engineering tasks. It functions as a workflow orchestrator that maps natural language intent to repeatable technical sequences and verification checklists. The project distinguishes itself through the use of specialized markdown-defined roles, such as security auditors or test engineers, to apply targeted domain expertise. It employs an evidence-based verification model that requires runtime data or passing tests as mandatory exit criteria to ensure AI-generated

Payload is a headless content management system and application framework that uses a code-first approach to define data schemas and administrative interfaces. By utilizing a centralized, type-safe configuration object, it automatically generates database schemas, API endpoints, and a fully customizable admin panel. The system is built on a database-agnostic architecture, allowing it to interface with various storage engines while providing a unified, type-safe API for server-side operations, REST, and GraphQL. What distinguishes Payload is its deep extensibility and developer-centric design.

Nomad is a distributed workload orchestrator and infrastructure automation platform designed to manage the lifecycle of applications across large-scale, heterogeneous environments. It functions as a multi-cloud orchestration engine, providing a unified control plane to deploy, scale, and govern containers, virtual machines, and legacy applications. By utilizing declarative job specifications, the system ensures infrastructure convergence and maintains the desired state across distributed data centers and geographic regions. The platform distinguishes itself through a flexible, plugin-based ar

This project is a lightweight Node.js web server and command-line tool designed for hosting static assets and delivering local files over HTTP. It functions as a static site host that provides a minimal environment for serving HTML, CSS, and JavaScript files to web browsers. The server includes built-in support for TLS encryption to enable secure HTTPS access and allows for the configuration of cross-origin resource sharing headers. It also features basic authentication to restrict folder access via username and password verification. The system manages content delivery through browser cache

Drogon is a high-performance, cross-platform C++ framework designed for building asynchronous web services and server-side applications. It functions as a multi-threaded, event-driven server engine that manages concurrent network traffic and WebSocket connections with minimal latency. By leveraging non-blocking input/output and native code compilation, the framework provides a foundation for scalable applications that operate efficiently across diverse hardware architectures. The framework distinguishes itself through its compile-time template rendering, which transforms dynamic HTML views in

Starlette is an asynchronous web framework and toolkit for building high-performance web services based on the ASGI specification. It serves as a lightweight foundation for creating web applications with a focus on asynchronous request and response handling. The framework provides specialized toolkits for managing persistent bidirectional WebSocket communication and an asynchronous HTTP server toolkit for routing and middleware. It distinguishes itself by offering a non-blocking background task queue that executes functions after a response has been sent to the client. The project covers a b

Starlette is a lightweight ASGI web framework and asynchronous HTTP toolkit used to build high-performance HTTP and WebSocket services. It functions as a WebSocket server framework and a collection of ASGI middleware components for managing network requests through non-blocking asynchronous logic. The framework provides tools for real-time communication via persistent bidirectional channels and infrastructure for high-performance APIs. It includes specialized capabilities for response compression, incremental data streaming, and the execution of non-blocking background tasks after a response

This project is a technical interview study guide and a markdown-driven static site designed to help developers prepare for coding screenings. It serves as a curated collection of common technical questions and expert answers, functioning as a comprehensive educational resource. The platform provides a structured curriculum and reference materials across several key domains. This includes a JavaScript language reference covering programming fundamentals, a frontend engineering curriculum focused on UI patterns and responsive design, and a web security knowledge base detailing attack vectors a

gqlgen is a schema-first Go library designed to build type-safe GraphQL servers. It functions as a code generation engine that transforms declarative GraphQL schema definitions into strongly-typed Go source code, ensuring strict alignment between the API contract and the underlying implementation. The framework distinguishes itself through its deep integration with the Go type system and its highly extensible build pipeline. By using schema-first development, it automates the creation of server boilerplate and resolver stubs, allowing developers to map schema fields directly to Go structs and

RuoYi-Vue3 is a full-stack administrative dashboard and permission management framework built with SpringBoot and Vue 3. It serves as an enterprise management backend providing a decoupled architecture that separates the API from the user interface. The project features a low-code CRUD generator that automatically produces frontend and backend boilerplate code and API documentation from database tables. It implements a comprehensive role-based access control system for managing users, departments, and granular permissions at the menu and button levels, secured by stateless JSON Web Token auth

laravel-cors es un paquete de middleware para aplicaciones Laravel que gestiona el Intercambio de Recursos de Origen Cruzado (CORS). Funciona como una capa de seguridad HTTP que valida los orígenes de las solicitudes e inyecta los encabezados necesarios en las respuestas de la aplicación para controlar cómo los dominios externos acceden a una API backend. El proyecto proporciona un motor de políticas basado en configuración para comparar los orígenes y métodos de las solicitudes entrantes con los valores permitidos. Esto incluye soporte para coincidencia de origen con comodines para autorizar múltiples dominios de confianza a través de una única regla y el manejo automático de solicitudes OPTIONS de pre-vuelo. El sistema se integra en el pipeline de solicitud-respuesta para proporcionar control de acceso global a la API y configuración de seguridad del navegador. Gestiona la inyección de encabezados de seguridad para resolver errores de navegador de origen cruzado y asegurar una comunicación segura entre un servidor Laravel y frontends alojados en diferentes dominios.

This is a Node.js middleware for Express and Node.js servers that manages Cross-Origin Resource Sharing policies. It functions as a policy manager and origin validator to define which origins, HTTP methods, and headers are permitted to access server resources. The project provides mechanisms for dynamic origin validation, allowing request origins to be checked against custom logic or databases. It also acts as an HTTP preflight request handler to process OPTIONS requests and verify server permissions before complex cross-site interactions occur. Its capability surface covers the management o

django-cors-headers es una utilidad de aplicación de Django para gestionar el intercambio de recursos de origen cruzado (CORS). Añade cabeceras HTTP a las respuestas para que los navegadores web puedan permitir solicitudes de origen cruzado desde dominios externos especificados. El proyecto proporciona herramientas para definir qué dominios externos, métodos HTTP y cabeceras tienen permiso para acceder a una API. Admite la restricción de orígenes permitidos a través de listas estáticas y expresiones regulares, y permite la transmisión de cookies y credenciales de autenticación para el manejo de sesiones entre sitios. Las capacidades adicionales incluyen el control de acceso a la API para limitar el intercambio de origen cruzado a patrones de URL específicos y la gestión de cabeceras de pre-vuelo de red privada para permitir la comunicación entre direcciones IP públicas y servidores de red privada.

This project is a self-hosted WebDAV file server and HTTP file manager that exposes a local file system for remote access and management. It functions as a private cloud storage solution, enabling users to perform file synchronization and automated network backups across different platforms and devices. The server includes built-in security to mitigate brute-force attacks by using middleware to block IP addresses after repeated failed authentication attempts. It also provides cross-origin resource sharing configuration to regulate how external web applications interact with the server. The s

go-restful es un framework para construir servicios web RESTful en Go. Funciona como un kit de herramientas para gestionar endpoints de API, proporcionando un enrutador de peticiones que mapea las peticiones HTTP entrantes a funciones manejadoras utilizando parámetros de ruta y patrones de URL personalizados. El framework incluye una capa de conversión de datos que transforma estructuras de Go a formatos JSON o XML para cuerpos de petición y respuesta. También proporciona un sistema para organizar servicios web relacionados en contenedores para gestionar el prefijado de endpoints y la configuración compartida. El proyecto cubre la gestión del ciclo de vida de las peticiones mediante filtros de middleware para validación y autenticación, así como la gestión de cabeceras de intercambio de recursos de origen cruzado (CORS). Las capacidades adicionales incluyen compresión de carga útil mediante gzip o deflate y middleware de recuperación de pánico para devolver respuestas de error estandarizadas.

Spring Authorization Server is an OAuth 2.1 and OpenID Connect 1.0 authorization server built on Spring Security. It implements the full protocol surface for issuing access and refresh tokens, including authorization code, client credentials, device code, and token exchange grants, as well as pushed authorization requests and user consent management. The server also functions as an OpenID Connect provider, supporting ID tokens, userinfo, discovery, logout, and dynamic client registration. The project distinguishes itself through an extensible framework that allows custom grant types, pluggabl

This project is a serverless application framework used to define and deploy cloud infrastructure, serverless APIs, and static frontends through infrastructure as code. It functions as a full stack deployment pipeline and a cloud infrastructure orchestrator for provisioning resources like databases and storage buckets across multiple cloud accounts. The framework includes a local cloud development environment that allows for testing and debugging API endpoints and cloud functions on a local machine before deployment. It also features a containerized build pipeline specifically designed to con

The Google API JavaScript Client Library is an official client for calling Google APIs directly from browser applications. It provides a programmatic interface to exchange data and execute service requests while managing request construction and response parsing. The library features dynamic client discovery, which loads machine-readable metadata at runtime to automatically generate request methods and parameter validation for various endpoints. It also includes an authentication client that handles OAuth 2.0 authorization flows to securely manage user identity and access tokens in the browse

Express es6 rest api is a starter template for building RESTful backend applications using modern JavaScript syntax and standard server routes. It provides a foundational code structure for setting up HTTP routing, middleware parsing, and database models in backend services. The project organizes application routes into modular components and handles incoming HTTP requests cleanly. It includes configuration for cross-origin resource sharing to manage security headers and access controls, enabling web applications on different domains to safely reach backend endpoints.