module Excursion::CORS
Public Class Methods
included(base)
click to toggle source
# File lib/excursion/cors.rb, line 3 def self.included(base) base.send :before_filter, :cors_headers if Excursion.configuration.enable_cors end
Public Instance Methods
cors_blacklisted?(origin)
click to toggle source
# File lib/excursion/cors.rb, line 19 def cors_blacklisted?(origin) !Excursion.configuration.cors_blacklist.nil? && !Excursion.configuration.cors_blacklist.any? { |cb| cors_match? origin, cb } end
cors_headers()
click to toggle source
# File lib/excursion/cors.rb, line 31 def cors_headers if origin_allowed? headers['Access-Control-Allow-Origin'] = origin_header headers['Access-Control-Allow-Methods'] = Excursion.configuration.cors_allow_methods.join(',') headers['Access-Control-Allow-Headers'] = Excursion.configuration.cors_allow_headers.join(', ') headers['Access-Control-Allow-Credentials'] = Excursion.configuration.cors_allow_credentials.to_s headers['Access-Control-Max-Age'] = Excursion.configuration.cors_max_age.to_s end end
cors_match?(origin, host)
click to toggle source
# File lib/excursion/cors.rb, line 7 def cors_match?(origin, host) host.is_a?(Regexp) ? origin.match(host) : origin.downcase == host.downcase end
cors_whitelisted?(origin)
click to toggle source
# File lib/excursion/cors.rb, line 11 def cors_whitelisted?(origin) if Excursion.configuration.cors_whitelist == :pool Excursion::Pool.all_applications.values.map { |app| app.default_url_options[:host] }.any? { |cw| cors_match? origin, cw } else Excursion.configuration.cors_whitelist.nil? || Excursion.configuration.cors_whitelist.any? { |cw| cors_match? origin, cw } end end
origin_allowed?()
click to toggle source
# File lib/excursion/cors.rb, line 27 def origin_allowed? !origin_header.nil? && cors_whitelisted?(origin_header) && !cors_blacklisted?(origin_header) end
origin_header()
click to toggle source
# File lib/excursion/cors.rb, line 23 def origin_header request.headers['Origin'] || request.headers['HTTP_ORIGIN'] end