org.picketlink.http.internal.cors

Class CORS

java.lang.Object

org.picketlink.http.internal.cors.CORS

public class CORS
extends Object

Cross-Origin Resource Sharing (CORS) Class.

The class intercepts incoming HTTP requests and applies the CORS policy as specified by the configuration parameters. The actual CORS request is processed by this class.

Supported configuration parameters:

• cors.allowOrigin {"*"|origin-list} defaults to *.
• cors.allowMethods {method-list} defaults to "GET, POST, HEAD, OPTIONS".
• cors.allowHeaders {"*"|header-list} defaults to *.
• cors.exposedHeaders {header-list} defaults to empty list.
• cors.allowCredentials {true|false} defaults to true.
• cors.maxAge {int} defaults to -1 (unspecified).

Author:

Giriraj Sharma

Field Summary

Fields

Modifier and Type	Field and Description
static String	ACCESS_CONTROL_ALLOW_CREDENTIALS
static String	ACCESS_CONTROL_ALLOW_HEADERS
static String	ACCESS_CONTROL_ALLOW_METHODS
static String	ACCESS_CONTROL_ALLOW_ORIGIN
static String	ACCESS_CONTROL_ALLOW_ORIGIN_WILDCARD
static String	ACCESS_CONTROL_EXPOSE_HEADERS
static String	ACCESS_CONTROL_MAX_AGE
static String	ACCESS_CONTROL_REQUEST_HEADERS
static String	ACCESS_CONTROL_REQUEST_METHOD
static String	DEFAULT_ALLOW_METHODS
static long	DEFAULT_MAX_AGE
static String	HOST
static String	ORIGIN

Constructor Summary

Constructors

Constructor and Description
CORS()

Method Summary

Modifier and Type	Method and Description
static void	handleActualRequest(CORSConfiguration corsConfiguration, HttpServletRequest request, HttpServletResponse response)
static void	handlePreflightRequest(CORSConfiguration corsConfiguration, HttpServletRequest request, HttpServletResponse response)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

ORIGIN

public static final String ORIGIN

See Also:

Constant Field Values

HOST

public static final String HOST

See Also:

Constant Field Values

DEFAULT_MAX_AGE

public static final long DEFAULT_MAX_AGE

DEFAULT_ALLOW_METHODS

public static final String DEFAULT_ALLOW_METHODS

See Also:

Constant Field Values

ACCESS_CONTROL_REQUEST_METHOD

public static final String ACCESS_CONTROL_REQUEST_METHOD

See Also:

Constant Field Values

ACCESS_CONTROL_REQUEST_HEADERS

public static final String ACCESS_CONTROL_REQUEST_HEADERS

See Also:

Constant Field Values

ACCESS_CONTROL_ALLOW_ORIGIN

public static final String ACCESS_CONTROL_ALLOW_ORIGIN

See Also:

Constant Field Values

ACCESS_CONTROL_ALLOW_METHODS

public static final String ACCESS_CONTROL_ALLOW_METHODS

See Also:

Constant Field Values

ACCESS_CONTROL_ALLOW_HEADERS

public static final String ACCESS_CONTROL_ALLOW_HEADERS

See Also:

Constant Field Values

ACCESS_CONTROL_EXPOSE_HEADERS

public static final String ACCESS_CONTROL_EXPOSE_HEADERS

See Also:

Constant Field Values

ACCESS_CONTROL_ALLOW_CREDENTIALS

public static final String ACCESS_CONTROL_ALLOW_CREDENTIALS

See Also:

Constant Field Values

ACCESS_CONTROL_MAX_AGE

public static final String ACCESS_CONTROL_MAX_AGE

See Also:

Constant Field Values

ACCESS_CONTROL_ALLOW_ORIGIN_WILDCARD

public static final String ACCESS_CONTROL_ALLOW_ORIGIN_WILDCARD

See Also:

Constant Field Values

Constructor Detail

CORS

public CORS()

Method Detail

handleActualRequest

public static void handleActualRequest(CORSConfiguration corsConfiguration,
                                       HttpServletRequest request,
                                       HttpServletResponse response)

handlePreflightRequest

public static void handlePreflightRequest(CORSConfiguration corsConfiguration,
                                          HttpServletRequest request,
                                          HttpServletResponse response)