Sha256: 1cbec5ca6cf06fac7122eb13cbca1dd5885233fad46b37e9d3893f9ef479a522
Contents?: true
Size: 1.03 KB
Versions: 18
Compression:
Stored size: 1.03 KB
Contents
@allow-rescue
Feature: Cross-Origin Support
Scenario Outline: Only supported from declared origins, within the API namespace
When I request CORS from "<path>" with:
| origin | method |
| <origin> | <method> |
Then the response should be <code>
Examples:
| path | origin | method | code |
| /priority | http://cors.test | PUT | 404 "Not Found" |
| /api/pages | http://cors.test | PUT | 200 "OK" |
| /api/pages | http://anything.else | PUT | 404 "Not Found" |
Scenario: Response headers to successful CORS OPTIONS requests
When I request CORS from "/api/pages" with:
| origin | method |
| http://cors.test | PUT |
Then the response should be 200 "OK"
And the response headers should include:
| header | value |
| Access-Control-Allow-Origin | http://cors.test |
| Access-Control-Allow-Methods | GET, POST, PUT, PATCH, DELETE |
Version data entries
18 entries across 18 versions & 1 rubygems