1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000
1.2 +++ b/content/base/test/file_restrictedEventSource.sjs Wed Dec 31 06:09:35 2014 +0100
1.3 @@ -0,0 +1,48 @@
1.4 +function handleRequest(request, response)
1.5 +{
1.6 + if ((request.queryString == "test=user1_xhr" &&
1.7 + request.hasHeader("Authorization") &&
1.8 + request.getHeader("Authorization") == "Basic dXNlciAxOnBhc3N3b3JkIDE=") ||
1.9 + (request.queryString == "test=user1_evtsrc" &&
1.10 + request.hasHeader("Authorization") &&
1.11 + request.getHeader("Authorization") == "Basic dXNlciAxOnBhc3N3b3JkIDE=")) {
1.12 + response.setStatusLine(null, 200, "OK");
1.13 + response.setHeader("Content-Type", "text/event-stream", false);
1.14 + response.setHeader("Access-Control-Allow-Origin", "http://mochi.test:8888", false);
1.15 + response.setHeader("Access-Control-Allow-Credentials", "true", false);
1.16 + response.setHeader("Cache-Control", "no-cache, must-revalidate", false);
1.17 + if (request.queryString == "test=user1_xhr") {
1.18 + response.setHeader("Set-Cookie", "test=5c", false);
1.19 + }
1.20 + response.write("event: message\ndata: 1\n\n");
1.21 + } else if ((request.queryString == "test=user2_xhr" &&
1.22 + request.hasHeader("Authorization") &&
1.23 + request.getHeader("Authorization") == "Basic dXNlciAyOnBhc3N3b3JkIDI=") ||
1.24 + (request.queryString == "test=user2_evtsrc" &&
1.25 + request.hasHeader("Authorization") &&
1.26 + request.getHeader("Authorization") == "Basic dXNlciAyOnBhc3N3b3JkIDI=" &&
1.27 + request.hasHeader("Cookie") &&
1.28 + request.getHeader("Cookie") == "test=5d")) {
1.29 + response.setStatusLine(null, 200, "OK");
1.30 + response.setHeader("Content-Type", "text/event-stream", false);
1.31 + response.setHeader("Access-Control-Allow-Origin", "http://mochi.test:8888", false);
1.32 + response.setHeader("Access-Control-Allow-Credentials", "true", false);
1.33 + response.setHeader("Cache-Control", "no-cache, must-revalidate", false);
1.34 + if (request.queryString == "test=user2_xhr") {
1.35 + response.setHeader("Set-Cookie", "test=5d", false);
1.36 + }
1.37 + response.write("event: message\ndata: 1\n\n");
1.38 + } else if (request.queryString == "test=user1_xhr" ||
1.39 + request.queryString == "test=user2_xhr") {
1.40 + response.setStatusLine(null, 401, "Unauthorized");
1.41 + response.setHeader("WWW-Authenticate", "basic realm=\"restricted\"", false);
1.42 + response.setHeader("Access-Control-Allow-Origin", "http://mochi.test:8888", false);
1.43 + response.setHeader("Access-Control-Allow-Credentials", "true", false);
1.44 + response.write("Unauthorized");
1.45 + } else {
1.46 + response.setStatusLine(null, 403, "Forbidden");
1.47 + response.setHeader("Access-Control-Allow-Origin", "http://mochi.test:8888", false);
1.48 + response.setHeader("Access-Control-Allow-Credentials", "true", false);
1.49 + response.write("Forbidden");
1.50 + }
1.51 +}
1.52 \ No newline at end of file
