content/base/test/file_restrictedEventSource.sjs@b8a032363ba2 (annotated)
content/base/test/file_restrictedEventSource.sjs
Thu, 22 Jan 2015 13:21:57 +0100
- author
- Michael Schloh von Bennewitz <michael@schloh.com>
- date
- Thu, 22 Jan 2015 13:21:57 +0100
- branch
- TOR_BUG_9701
- changeset 15
- b8a032363ba2
- permissions
- -rw-r--r--
Incorporate requested changes from Mozilla in review:
https://bugzilla.mozilla.org/show_bug.cgi?id=1123480#c6
| michael@0 | 1 | function handleRequest(request, response) |
| michael@0 | 2 | { |
| michael@0 | 3 | if ((request.queryString == "test=user1_xhr" && |
| michael@0 | 4 | request.hasHeader("Authorization") && |
| michael@0 | 5 | request.getHeader("Authorization") == "Basic dXNlciAxOnBhc3N3b3JkIDE=") || |
| michael@0 | 6 | (request.queryString == "test=user1_evtsrc" && |
| michael@0 | 7 | request.hasHeader("Authorization") && |
| michael@0 | 8 | request.getHeader("Authorization") == "Basic dXNlciAxOnBhc3N3b3JkIDE=")) { |
| michael@0 | 9 | response.setStatusLine(null, 200, "OK"); |
| michael@0 | 10 | response.setHeader("Content-Type", "text/event-stream", false); |
| michael@0 | 11 | response.setHeader("Access-Control-Allow-Origin", "http://mochi.test:8888", false); |
| michael@0 | 12 | response.setHeader("Access-Control-Allow-Credentials", "true", false); |
| michael@0 | 13 | response.setHeader("Cache-Control", "no-cache, must-revalidate", false); |
| michael@0 | 14 | if (request.queryString == "test=user1_xhr") { |
| michael@0 | 15 | response.setHeader("Set-Cookie", "test=5c", false); |
| michael@0 | 16 | } |
| michael@0 | 17 | response.write("event: message\ndata: 1\n\n"); |
| michael@0 | 18 | } else if ((request.queryString == "test=user2_xhr" && |
| michael@0 | 19 | request.hasHeader("Authorization") && |
| michael@0 | 20 | request.getHeader("Authorization") == "Basic dXNlciAyOnBhc3N3b3JkIDI=") || |
| michael@0 | 21 | (request.queryString == "test=user2_evtsrc" && |
| michael@0 | 22 | request.hasHeader("Authorization") && |
| michael@0 | 23 | request.getHeader("Authorization") == "Basic dXNlciAyOnBhc3N3b3JkIDI=" && |
| michael@0 | 24 | request.hasHeader("Cookie") && |
| michael@0 | 25 | request.getHeader("Cookie") == "test=5d")) { |
| michael@0 | 26 | response.setStatusLine(null, 200, "OK"); |
| michael@0 | 27 | response.setHeader("Content-Type", "text/event-stream", false); |
| michael@0 | 28 | response.setHeader("Access-Control-Allow-Origin", "http://mochi.test:8888", false); |
| michael@0 | 29 | response.setHeader("Access-Control-Allow-Credentials", "true", false); |
| michael@0 | 30 | response.setHeader("Cache-Control", "no-cache, must-revalidate", false); |
| michael@0 | 31 | if (request.queryString == "test=user2_xhr") { |
| michael@0 | 32 | response.setHeader("Set-Cookie", "test=5d", false); |
| michael@0 | 33 | } |
| michael@0 | 34 | response.write("event: message\ndata: 1\n\n"); |
| michael@0 | 35 | } else if (request.queryString == "test=user1_xhr" || |
| michael@0 | 36 | request.queryString == "test=user2_xhr") { |
| michael@0 | 37 | response.setStatusLine(null, 401, "Unauthorized"); |
| michael@0 | 38 | response.setHeader("WWW-Authenticate", "basic realm=\"restricted\"", false); |
| michael@0 | 39 | response.setHeader("Access-Control-Allow-Origin", "http://mochi.test:8888", false); |
| michael@0 | 40 | response.setHeader("Access-Control-Allow-Credentials", "true", false); |
| michael@0 | 41 | response.write("Unauthorized"); |
| michael@0 | 42 | } else { |
| michael@0 | 43 | response.setStatusLine(null, 403, "Forbidden"); |
| michael@0 | 44 | response.setHeader("Access-Control-Allow-Origin", "http://mochi.test:8888", false); |
| michael@0 | 45 | response.setHeader("Access-Control-Allow-Credentials", "true", false); |
| michael@0 | 46 | response.write("Forbidden"); |
| michael@0 | 47 | } |
| michael@0 | 48 | } |
