Awesome GitHub RepositoriesCross-Origin Resource Sharing

Agent-skills is a collection of structured instructions and behavioral personas designed to standardize how AI coding agents perform engineering tasks. It functions as a workflow orchestrator that maps natural language intent to repeatable technical sequences and verification checklists. The project distinguishes itself through the use of specialized markdown-defined roles, such as security auditors or test engineers, to apply targeted domain expertise. It employs an evidence-based verification model that requires runtime data or passing tests as mandatory exit criteria to ensure AI-generated

Payload is a headless content management system and application framework that uses a code-first approach to define data schemas and administrative interfaces. By utilizing a centralized, type-safe configuration object, it automatically generates database schemas, API endpoints, and a fully customizable admin panel. The system is built on a database-agnostic architecture, allowing it to interface with various storage engines while providing a unified, type-safe API for server-side operations, REST, and GraphQL. What distinguishes Payload is its deep extensibility and developer-centric design.

Nomad is a distributed workload orchestrator and infrastructure automation platform designed to manage the lifecycle of applications across large-scale, heterogeneous environments. It functions as a multi-cloud orchestration engine, providing a unified control plane to deploy, scale, and govern containers, virtual machines, and legacy applications. By utilizing declarative job specifications, the system ensures infrastructure convergence and maintains the desired state across distributed data centers and geographic regions. The platform distinguishes itself through a flexible, plugin-based ar

This project is a lightweight Node.js web server and command-line tool designed for hosting static assets and delivering local files over HTTP. It functions as a static site host that provides a minimal environment for serving HTML, CSS, and JavaScript files to web browsers. The server includes built-in support for TLS encryption to enable secure HTTPS access and allows for the configuration of cross-origin resource sharing headers. It also features basic authentication to restrict folder access via username and password verification. The system manages content delivery through browser cache

Drogon is a high-performance, cross-platform C++ framework designed for building asynchronous web services and server-side applications. It functions as a multi-threaded, event-driven server engine that manages concurrent network traffic and WebSocket connections with minimal latency. By leveraging non-blocking input/output and native code compilation, the framework provides a foundation for scalable applications that operate efficiently across diverse hardware architectures. The framework distinguishes itself through its compile-time template rendering, which transforms dynamic HTML views in

Starlette is an asynchronous web framework and toolkit for building high-performance web services based on the ASGI specification. It serves as a lightweight foundation for creating web applications with a focus on asynchronous request and response handling. The framework provides specialized toolkits for managing persistent bidirectional WebSocket communication and an asynchronous HTTP server toolkit for routing and middleware. It distinguishes itself by offering a non-blocking background task queue that executes functions after a response has been sent to the client. The project covers a b

Starlette is a lightweight ASGI web framework and asynchronous HTTP toolkit used to build high-performance HTTP and WebSocket services. It functions as a WebSocket server framework and a collection of ASGI middleware components for managing network requests through non-blocking asynchronous logic. The framework provides tools for real-time communication via persistent bidirectional channels and infrastructure for high-performance APIs. It includes specialized capabilities for response compression, incremental data streaming, and the execution of non-blocking background tasks after a response

This project is a technical interview study guide and a markdown-driven static site designed to help developers prepare for coding screenings. It serves as a curated collection of common technical questions and expert answers, functioning as a comprehensive educational resource. The platform provides a structured curriculum and reference materials across several key domains. This includes a JavaScript language reference covering programming fundamentals, a frontend engineering curriculum focused on UI patterns and responsive design, and a web security knowledge base detailing attack vectors a

gqlgen is a schema-first Go library designed to build type-safe GraphQL servers. It functions as a code generation engine that transforms declarative GraphQL schema definitions into strongly-typed Go source code, ensuring strict alignment between the API contract and the underlying implementation. The framework distinguishes itself through its deep integration with the Go type system and its highly extensible build pipeline. By using schema-first development, it automates the creation of server boilerplate and resolver stubs, allowing developers to map schema fields directly to Go structs and

RuoYi-Vue3 is a full-stack administrative dashboard and permission management framework built with SpringBoot and Vue 3. It serves as an enterprise management backend providing a decoupled architecture that separates the API from the user interface. The project features a low-code CRUD generator that automatically produces frontend and backend boilerplate code and API documentation from database tables. It implements a comprehensive role-based access control system for managing users, departments, and granular permissions at the menu and button levels, secured by stateless JSON Web Token auth

laravel-cors 是一个用于 Laravel 应用程序的中间件包，用于管理跨域资源共享（CORS）。它作为一个 HTTP 安全层，验证请求来源并将必要的标头注入到应用程序响应中，以控制外部域如何访问后端 API。 该项目提供了一个配置驱动的策略引擎，用于将传入的请求来源和方法与允许的值进行匹配。这包括支持通配符来源匹配，以通过单个规则授权多个受信任的域，并自动处理预检（pre-flight）OPTIONS 请求。 该系统集成到请求-响应管道中，以提供全局 API 访问控制和浏览器安全配置。它管理安全标头的注入，以解决跨域浏览器错误，并确保 Laravel 服务器与托管在不同域上的前端之间的安全通信。

This is a Node.js middleware for Express and Node.js servers that manages Cross-Origin Resource Sharing policies. It functions as a policy manager and origin validator to define which origins, HTTP methods, and headers are permitted to access server resources. The project provides mechanisms for dynamic origin validation, allowing request origins to be checked against custom logic or databases. It also acts as an HTTP preflight request handler to process OPTIONS requests and verify server permissions before complex cross-site interactions occur. Its capability surface covers the management o

django-cors-headers 是一个用于管理跨域资源共享（CORS）的 Django 应用工具。它向响应添加 HTTP 标头，以便 Web 浏览器可以允许来自指定外部域的跨域请求。 该项目提供了用于定义哪些外部域、HTTP 方法和标头被允许访问 API 的工具。它支持通过静态列表和正则表达式限制允许的来源，并支持传输用于跨站点会话处理的 Cookie 和身份验证凭据。 其他功能包括限制跨域共享到特定 URL 模式的 API 访问控制，以及管理私有网络预检标头，以允许公共 IP 地址与私有网络服务器之间的通信。

This project is a self-hosted WebDAV file server and HTTP file manager that exposes a local file system for remote access and management. It functions as a private cloud storage solution, enabling users to perform file synchronization and automated network backups across different platforms and devices. The server includes built-in security to mitigate brute-force attacks by using middleware to block IP addresses after repeated failed authentication attempts. It also provides cross-origin resource sharing configuration to regulate how external web applications interact with the server. The s

go-restful 是一个用于在 Go 中构建 RESTful Web 服务的框架。它作为一个管理 API 端点的工具包，提供了一个请求路由器，使用路径参数和自定义 URL 模式将传入的 HTTP 请求映射到处理函数。 该框架包括一个数据转换层，将 Go 结构转换为 JSON 或 XML 格式以用于请求和响应体。它还提供了一个将相关 Web 服务组织到容器中的系统，以管理端点前缀和共享配置。 该项目通过用于验证和身份验证的中间件过滤器，以及跨域资源共享（CORS）头的管理来涵盖请求生命周期管理。其他功能包括使用 gzip 或 deflate 的负载压缩，以及用于返回标准化错误响应的 panic 恢复中间件。

Spring Authorization Server is an OAuth 2.1 and OpenID Connect 1.0 authorization server built on Spring Security. It implements the full protocol surface for issuing access and refresh tokens, including authorization code, client credentials, device code, and token exchange grants, as well as pushed authorization requests and user consent management. The server also functions as an OpenID Connect provider, supporting ID tokens, userinfo, discovery, logout, and dynamic client registration. The project distinguishes itself through an extensible framework that allows custom grant types, pluggabl

This project is a serverless application framework used to define and deploy cloud infrastructure, serverless APIs, and static frontends through infrastructure as code. It functions as a full stack deployment pipeline and a cloud infrastructure orchestrator for provisioning resources like databases and storage buckets across multiple cloud accounts. The framework includes a local cloud development environment that allows for testing and debugging API endpoints and cloud functions on a local machine before deployment. It also features a containerized build pipeline specifically designed to con

The Google API JavaScript Client Library is an official client for calling Google APIs directly from browser applications. It provides a programmatic interface to exchange data and execute service requests while managing request construction and response parsing. The library features dynamic client discovery, which loads machine-readable metadata at runtime to automatically generate request methods and parameter validation for various endpoints. It also includes an authentication client that handles OAuth 2.0 authorization flows to securely manage user identity and access tokens in the browse

Express es6 rest api is a starter template for building RESTful backend applications using modern JavaScript syntax and standard server routes. It provides a foundational code structure for setting up HTTP routing, middleware parsing, and database models in backend services. The project organizes application routes into modular components and handles incoming HTTP requests cleanly. It includes configuration for cross-origin resource sharing to manage security headers and access controls, enabling web applications on different domains to safely reach backend endpoints.