content/base/test/file_restrictedEventSource.sjs

Thu, 15 Jan 2015 21:03:48 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Thu, 15 Jan 2015 21:03:48 +0100
branch
TOR_BUG_9701
changeset 11
deefc01c0e14
permissions
-rw-r--r--

Integrate friendly tips from Tor colleagues to make (or not) 4.5 alpha 3;
This includes removal of overloaded (but unused) methods, and addition of
a overlooked call to DataStruct::SetData(nsISupports, uint32_t, bool.)

michael@0 1 function handleRequest(request, response)
michael@0 2 {
michael@0 3 if ((request.queryString == "test=user1_xhr" &&
michael@0 4 request.hasHeader("Authorization") &&
michael@0 5 request.getHeader("Authorization") == "Basic dXNlciAxOnBhc3N3b3JkIDE=") ||
michael@0 6 (request.queryString == "test=user1_evtsrc" &&
michael@0 7 request.hasHeader("Authorization") &&
michael@0 8 request.getHeader("Authorization") == "Basic dXNlciAxOnBhc3N3b3JkIDE=")) {
michael@0 9 response.setStatusLine(null, 200, "OK");
michael@0 10 response.setHeader("Content-Type", "text/event-stream", false);
michael@0 11 response.setHeader("Access-Control-Allow-Origin", "http://mochi.test:8888", false);
michael@0 12 response.setHeader("Access-Control-Allow-Credentials", "true", false);
michael@0 13 response.setHeader("Cache-Control", "no-cache, must-revalidate", false);
michael@0 14 if (request.queryString == "test=user1_xhr") {
michael@0 15 response.setHeader("Set-Cookie", "test=5c", false);
michael@0 16 }
michael@0 17 response.write("event: message\ndata: 1\n\n");
michael@0 18 } else if ((request.queryString == "test=user2_xhr" &&
michael@0 19 request.hasHeader("Authorization") &&
michael@0 20 request.getHeader("Authorization") == "Basic dXNlciAyOnBhc3N3b3JkIDI=") ||
michael@0 21 (request.queryString == "test=user2_evtsrc" &&
michael@0 22 request.hasHeader("Authorization") &&
michael@0 23 request.getHeader("Authorization") == "Basic dXNlciAyOnBhc3N3b3JkIDI=" &&
michael@0 24 request.hasHeader("Cookie") &&
michael@0 25 request.getHeader("Cookie") == "test=5d")) {
michael@0 26 response.setStatusLine(null, 200, "OK");
michael@0 27 response.setHeader("Content-Type", "text/event-stream", false);
michael@0 28 response.setHeader("Access-Control-Allow-Origin", "http://mochi.test:8888", false);
michael@0 29 response.setHeader("Access-Control-Allow-Credentials", "true", false);
michael@0 30 response.setHeader("Cache-Control", "no-cache, must-revalidate", false);
michael@0 31 if (request.queryString == "test=user2_xhr") {
michael@0 32 response.setHeader("Set-Cookie", "test=5d", false);
michael@0 33 }
michael@0 34 response.write("event: message\ndata: 1\n\n");
michael@0 35 } else if (request.queryString == "test=user1_xhr" ||
michael@0 36 request.queryString == "test=user2_xhr") {
michael@0 37 response.setStatusLine(null, 401, "Unauthorized");
michael@0 38 response.setHeader("WWW-Authenticate", "basic realm=\"restricted\"", false);
michael@0 39 response.setHeader("Access-Control-Allow-Origin", "http://mochi.test:8888", false);
michael@0 40 response.setHeader("Access-Control-Allow-Credentials", "true", false);
michael@0 41 response.write("Unauthorized");
michael@0 42 } else {
michael@0 43 response.setStatusLine(null, 403, "Forbidden");
michael@0 44 response.setHeader("Access-Control-Allow-Origin", "http://mochi.test:8888", false);
michael@0 45 response.setHeader("Access-Control-Allow-Credentials", "true", false);
michael@0 46 response.write("Forbidden");
michael@0 47 }
michael@0 48 }

mercurial