summaryrefslogtreecommitdiffstats
path: root/testing/web-platform/tests/XMLHttpRequest/resources/auth8/corsenabled-no-authorize.py
blob: cb40efb081b4c0a080b6c3834c9dd82122b7ea20 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
import imp
import os

def main(request, response):
    response.headers.set('Access-Control-Allow-Origin', request.headers.get("origin"));
    response.headers.set('Access-Control-Allow-Credentials', 'true');
    response.headers.set('Access-Control-Allow-Methods', 'GET');
    response.headers.set('Access-Control-Allow-Headers', 'x-user, x-pass');
    response.headers.set('Access-Control-Expose-Headers', 'x-challenge, xhr-user, ses-user');
    auth = imp.load_source("", os.path.join(os.path.abspath(os.curdir),
                                            "XMLHttpRequest",
                                            "resources",
                                            "authentication.py"))
    if request.method == "OPTIONS":
        return ""
    else:
        return auth.main(request, response)