Contents

module Pliny::Middleware
  class CORS

    ALLOW_METHODS  =
      %w( GET POST PUT PATCH DELETE OPTIONS ).freeze
    ALLOW_HEADERS  =
      %w( Content-Type Accept Authorization Cache-Control If-None-Match If-Modified-Since Origin).freeze
    EXPOSE_HEADERS =
      %w( Cache-Control Content-Language Content-Type Expires Last-Modified Pragma ).freeze

    def initialize(app)
      @app = app
    end

    def call(env)
      # preflight request: render a stub 200 with the CORS headers
      if cors_request?(env) && env["REQUEST_METHOD"] == "OPTIONS"
        [200, cors_headers(env), [""]]
      else
        status, headers, response = @app.call(env)

        # regualar CORS request: append CORS headers to response
        if cors_request?(env)
          headers.merge!(cors_headers(env))
        end

        [status, headers, response]
      end
    end

    def cors_request?(env)
      env.has_key?("HTTP_ORIGIN")
    end

    def cors_headers(env)
      {
        'Access-Control-Allow-Origin'      => env["HTTP_ORIGIN"],
        'Access-Control-Allow-Methods'     => ALLOW_METHODS.join(', '),
        'Access-Control-Allow-Headers'     => ALLOW_HEADERS.join(', '),
        'Access-Control-Allow-Credentials' => "true",
        'Access-Control-Max-Age'           => "1728000",
        'Access-Control-Expose-Headers'    => EXPOSE_HEADERS.join(', ')
      }
    end
  end
end

Version data entries

15 entries across 15 versions & 1 rubygems

Version	Path
pliny-0.26.0	lib/pliny/middleware/cors.rb
pliny-0.25.1	lib/pliny/middleware/cors.rb
pliny-0.25.0	lib/pliny/middleware/cors.rb
pliny-0.24.0	lib/pliny/middleware/cors.rb
pliny-0.23.0	lib/pliny/middleware/cors.rb
pliny-0.22.0	lib/pliny/middleware/cors.rb
pliny-0.21.0	lib/pliny/middleware/cors.rb
pliny-0.20.2	lib/pliny/middleware/cors.rb
pliny-0.20.1	lib/pliny/middleware/cors.rb
pliny-0.20.0	lib/pliny/middleware/cors.rb
pliny-0.19.0	lib/pliny/middleware/cors.rb
pliny-0.18.0	lib/pliny/middleware/cors.rb
pliny-0.17.1	lib/pliny/middleware/cors.rb
pliny-0.17.0	lib/pliny/middleware/cors.rb
pliny-0.16.3	lib/pliny/middleware/cors.rb