Package swiss.trustbroker.util

Class CorsSupport

java.lang.Object

swiss.trustbroker.util.CorsSupport

public class CorsSupport
extends Object

Field Summary

Fields

Modifier and Type	Field	Description
static final String	ALL_ORIGINS
static final String	DEFAULT_HEADERS
static final String	DEFAULT_MAXAGE
static final String	DEFAULT_METHODS
static final Set<String>	DEFAULT_ORIGINS

Method Summary

Modifier and Type	Method	Description
static String	getAllowedOrigin(jakarta.servlet.http.HttpServletRequest request, Set<String> allowedOrigins)
static void	setAccessControlHeaders(jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response, CorsPolicies corsPolicies, Set<String> ownOrigins)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

ALL_ORIGINS

public static final String ALL_ORIGINS

See Also:

• Constant Field Values

DEFAULT_ORIGINS

public static final Set<String> DEFAULT_ORIGINS

DEFAULT_METHODS

public static final String DEFAULT_METHODS

See Also:

• Constant Field Values

DEFAULT_HEADERS

public static final String DEFAULT_HEADERS

See Also:

• Constant Field Values

DEFAULT_MAXAGE

public static final String DEFAULT_MAXAGE

See Also:

• Constant Field Values

Method Details

setAccessControlHeaders

public static void setAccessControlHeaders(jakarta.servlet.http.HttpServletRequest request,
 jakarta.servlet.http.HttpServletResponse response,
 CorsPolicies corsPolicies,
 Set<String> ownOrigins)

getAllowedOrigin

public static String getAllowedOrigin(jakarta.servlet.http.HttpServletRequest request,
 Set<String> allowedOrigins)

Parameters:

request - received from HTTP client

allowedOrigins - may be null

Returns:

request's origin header if in allowedOrigins (truncated to scheme, host, port)