content/base/test/file_restrictedEventSource.sjs

Thu, 15 Jan 2015 21:03:48 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Thu, 15 Jan 2015 21:03:48 +0100
branch
TOR_BUG_9701
changeset 11
deefc01c0e14
permissions
-rw-r--r--

Integrate friendly tips from Tor colleagues to make (or not) 4.5 alpha 3;
This includes removal of overloaded (but unused) methods, and addition of
a overlooked call to DataStruct::SetData(nsISupports, uint32_t, bool.)

     1 function handleRequest(request, response)
     2 {
     3   if ((request.queryString == "test=user1_xhr" &&
     4        request.hasHeader("Authorization") &&
     5        request.getHeader("Authorization") == "Basic dXNlciAxOnBhc3N3b3JkIDE=") ||
     6       (request.queryString == "test=user1_evtsrc" &&
     7        request.hasHeader("Authorization") &&
     8        request.getHeader("Authorization") == "Basic dXNlciAxOnBhc3N3b3JkIDE=")) {
     9     response.setStatusLine(null, 200, "OK");
    10     response.setHeader("Content-Type", "text/event-stream", false);
    11     response.setHeader("Access-Control-Allow-Origin", "http://mochi.test:8888", false);
    12     response.setHeader("Access-Control-Allow-Credentials", "true", false);
    13     response.setHeader("Cache-Control", "no-cache, must-revalidate", false);
    14     if (request.queryString == "test=user1_xhr") {
    15       response.setHeader("Set-Cookie", "test=5c", false);
    16     }
    17     response.write("event: message\ndata: 1\n\n");
    18   } else if ((request.queryString == "test=user2_xhr" &&
    19               request.hasHeader("Authorization") &&
    20               request.getHeader("Authorization") == "Basic dXNlciAyOnBhc3N3b3JkIDI=") ||
    21              (request.queryString == "test=user2_evtsrc" &&
    22               request.hasHeader("Authorization") &&
    23               request.getHeader("Authorization") == "Basic dXNlciAyOnBhc3N3b3JkIDI=" &&
    24               request.hasHeader("Cookie") &&
    25               request.getHeader("Cookie") == "test=5d")) {
    26     response.setStatusLine(null, 200, "OK");
    27     response.setHeader("Content-Type", "text/event-stream", false);
    28     response.setHeader("Access-Control-Allow-Origin", "http://mochi.test:8888", false);
    29     response.setHeader("Access-Control-Allow-Credentials", "true", false);
    30     response.setHeader("Cache-Control", "no-cache, must-revalidate", false);
    31     if (request.queryString == "test=user2_xhr") {
    32       response.setHeader("Set-Cookie", "test=5d", false);
    33     }
    34     response.write("event: message\ndata: 1\n\n");
    35   } else if (request.queryString == "test=user1_xhr" ||
    36              request.queryString == "test=user2_xhr") {
    37     response.setStatusLine(null, 401, "Unauthorized");
    38     response.setHeader("WWW-Authenticate", "basic realm=\"restricted\"", false);
    39     response.setHeader("Access-Control-Allow-Origin", "http://mochi.test:8888", false);
    40     response.setHeader("Access-Control-Allow-Credentials", "true", false);
    41     response.write("Unauthorized");
    42   } else {
    43     response.setStatusLine(null, 403, "Forbidden");
    44     response.setHeader("Access-Control-Allow-Origin", "http://mochi.test:8888", false);
    45     response.setHeader("Access-Control-Allow-Credentials", "true", false);
    46     response.write("Forbidden");
    47   }
    48 }

mercurial