blob: d5fb05aecab485c65aabcfaed529834217fc91a1 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
|
# Returns a valid response when a request has appropriate credentials.
def main(request, response):
cookie = request.cookies.first(b"cookieName", None)
expected_value = request.GET.first(b"value", None)
source_origin = request.headers.get(b"origin", None)
if source_origin is None:
# Same origin GET won't include origin header
source_origin = "%s://%s" % (request.url_parts.scheme,
request.url_parts.netloc)
if request.url_parts.port:
source_origin += ":%s" % request.url_parts.port
response_headers = [(b"Content-Type", b"text/javascript"),
(b"Access-Control-Allow-Origin", source_origin),
(b"Access-Control-Allow-Credentials", b"true")]
if cookie == expected_value:
return (200, response_headers, u"")
return (404, response_headers, u"")
|
