Contents

require 'rack'

module AssetAccessControl
  class Middleware

    def initialize(app, origin)
      @app = app
      @origin = origin
    end

    def access_control_headers
      {
        "Access-Control-Allow-Origin" => @origin,
        "Access-Control-Allow-Methods" => "GET",
        "Access-Control-Allow-Headers" => "x-requested-with",
        "Access-Control-Max-Age" => "3628800"
      }
    end

    def call(env)
      # intercept the "preflight" request
      if env["REQUEST_METHOD"] == "OPTIONS"
        return [200, access_control_headers, []]
      else
        code, headers, body = @app.call(env)
        set_headers! headers, body, env["PATH_INFO"]
        [code, headers, body]
      end
    end

    private

    def extension(path)
      "." + path.split("?").first.split(".").last
    end

    def asset?(path)
      %w(.css .js).include? extension(path)
    end

    def set_headers!(headers, body, path)
      if ext = extension(path) and asset?(ext)
        headers.merge!(access_control_headers)
      end
    end
  end
end

Version data entries

2 entries across 2 versions & 1 rubygems

Version	Path
asset_access_control-0.0.2	lib/asset_access_control/middleware.rb
asset_access_control-0.0.1	lib/asset_access_control/middleware.rb