gvsafronov/tile38
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Access-Control-Allow-Headers is apparently required by the spec

Browse Source
This commit is contained in:
Kilowhisky 2024-05-06 22:07:07 -07:00
parent e653b765b7
commit 1a437d3855
2 changed files with 8 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
internal/server/server.go
View File

@ -1453,6 +1453,7 @@ func readNextHTTPCommand(packet []byte, argsIn [][]byte, msg *Message, wr io.Wri
corshead := "HTTP/1.1 204 No Content\r\n" + corshead := "HTTP/1.1 204 No Content\r\n" +
"Connection: close\r\n" + "Connection: close\r\n" +
"Access-Control-Allow-Origin: *\r\n" + "Access-Control-Allow-Origin: *\r\n" +
"Access-Control-Allow-Headers: *, Authorization\r\n" +
"Access-Control-Allow-Methods: POST, GET, OPTIONS\r\n\r\n" "Access-Control-Allow-Methods: POST, GET, OPTIONS\r\n\r\n"
if _, err = wr.Write([]byte(corshead)); err != nil { if _, err = wr.Write([]byte(corshead)); err != nil {

4
tests/proto_test.go
View File

@ -31,12 +31,16 @@ func proto_HTTP_CORS_test(mc *mockServer) error {
} }
origin := resp.Header.Get("Access-Control-Allow-Origin") origin := resp.Header.Get("Access-Control-Allow-Origin")
methods := resp.Header.Get("Access-Control-Allow-Methods") methods := resp.Header.Get("Access-Control-Allow-Methods")
headers := resp.Header.Get("Access-Control-Allow-Headers")
if !(origin == "*" || origin == morigin) { if !(origin == "*" || origin == morigin) {
return fmt.Errorf("expected http access-control-allow-origin value '*', got '%s'", origin) return fmt.Errorf("expected http access-control-allow-origin value '*', got '%s'", origin)
} }
if methods != "POST, GET, OPTIONS" { if methods != "POST, GET, OPTIONS" {
return fmt.Errorf("expected http access-control-allow-Methods value 'POST, GET, OPTIONS', got '%s'", methods) return fmt.Errorf("expected http access-control-allow-Methods value 'POST, GET, OPTIONS', got '%s'", methods)
} }
if headers != "*, Authorization" {
return fmt.Errorf("expected http access-control-allow-headers value '*, Authorization', got '%s'", headers)
}
// Make the actual request now // Make the actual request now
resp, err = http.Get(url) resp, err = http.Get(url)