Firebase云函数功能正常但浏览器报500错误，疑CORS问题求排查

我有两个用于简单记账的Firebase云函数：handleUserIn记录用户登录行为，handleUserOut记录用户登出行为。函数代码如下：

import {onRequest} from "firebase-functions/v2/https";
import * as admin from "firebase-admin";
admin.initializeApp();

exports.handleUserIn = onRequest(
  {cors: ["*"]},
  (request, response) => {
    const userId = request.params[0];
    handleUserTrace(userId, "Log-In");
    // response.send(0); // Wrong.
    response.status(200).send("All seems OK.");
  }); /* End of handleUserIn */


export const handleUserOut = onRequest({cors: ["*"]}, (request, response) => {
  response.set("Access-Control-Allow-Origin", "*");
  response.set("Access-Control-Allow-Methods", "GET, POST");
  const userId = request.params[0];
  // corsHandler(request, response, async () => {
  handleUserTrace(userId, "Log-Out");
  // response.send(0); // Wrong.
  response.status(200).send("All seems OK.");
  // }); // End corsHandler.
}); /* End of handleUserOut */

目前两个函数能正常完成预期工作，但测试时浏览器控制台出现500错误，错误信息如下：

GET
https://handleuserout-vzu8tf4c5q-uc.a.run.app/xyxCIPDXZXgiR6DsjWx3yFOuXYZ4
[HTTP/2 500  365ms]

GET
    https://handleuserout-vzu8tf4c5q-uc.a.run.app/xyxCIPDXZXgiR6DsjWx3yFOuXYZ4
Status
500
VersionHTTP/2
Transferred370 B (21 B size)
Referrer Policystrict-origin-when-cross-origin
Request PriorityHighest
DNS ResolutionSystem

补充信息：调用handleUserIn的前端代码如下（handleUserOut调用方式类似）：

const handleUserIn = (usrid:string) => {
  var xhr = new XMLHttpRequest();
  const fnUrl = "https://handleuserin-abc3du7e9q-uc.a.run.app/" + usrid
  xhr.open("GET", fnUrl);
  xhr.send();
} /* End of handleUserIn */

问题分析与修复方案 #

核心问题 #

1. 重复设置CORS头：handleUserOut中同时通过onRequest的cors: ["*"]和手动response.set()设置CORS头，导致服务器返回重复响应头，触发内部错误（500）。
2. 未等待异步操作完成：handleUserTrace大概率是异步操作（比如写入Firebase数据库），当前代码直接发送响应，函数会提前终止，引发服务器异常。

修复步骤 #

1. 移除重复的CORS配置

删除handleUserOut中手动设置CORS头的代码，保留onRequest的统一配置：

export const handleUserOut = onRequest({cors: ["*"]}, async (request, response) => {
  const userId = request.params[0];
  await handleUserTrace(userId, "Log-Out");
  response.status(200).send("All seems OK.");
});

2. 等待异步操作完成

将两个云函数标记为async，并用await等待handleUserTrace执行完毕再发送响应：

exports.handleUserIn = onRequest(
  {cors: ["*"]},
  async (request, response) => {
    const userId = request.params[0];
    await handleUserTrace(userId, "Log-In");
    response.status(200).send("All seems OK.");
  });

3. 增加错误捕获（可选但推荐）

添加try/catch捕获异常，避免未处理错误导致500：

exports.handleUserIn = onRequest(
  {cors: ["*"]},
  async (request, response) => {
    try {
      const userId = request.params[0];
      await handleUserTrace(userId, "Log-In");
      response.status(200).send("All seems OK.");
    } catch (error) {
      console.error("登录记录失败:", error);
      response.status(500).send("服务器内部错误");
    }
  });

export const handleUserOut = onRequest({cors: ["*"]}, async (request, response) => {
  try {
    const userId = request.params[0];
    await handleUserTrace(userId, "Log-Out");
    response.status(200).send("All seems OK.");
  } catch (error) {
    console.error("登出记录失败:", error);
    response.status(500).send("服务器内部错误");
  }
});

内容的提问来源于stack exchange，提问作者Michel