9a4d204b55
remove methodannotationreader namespace fix namespace for server container fix tests fail if with cors credentials header is set to true, implement a reusable preflighted cors method in the controller baseclass, make corsmiddleware private and register it for every request remove uneeded local in cors middleware registratio dont uppercase cors to easily use it from routes fix indention comment fixes explicitely set allow credentials header to false dont depend on better controllers PR, fix that stuff later split cors methods to be in a seperate controller for exposing apis remove protected definitions from apicontroller since controller has it
55 lines
1.7 KiB
PHP
55 lines
1.7 KiB
PHP
<?php
|
|
|
|
/**
|
|
* ownCloud - App Framework
|
|
*
|
|
* @author Bernhard Posselt
|
|
* @copyright 2012 Bernhard Posselt nukeawhale@gmail.com
|
|
*
|
|
* This library is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE
|
|
* License as published by the Free Software Foundation; either
|
|
* version 3 of the License, or any later version.
|
|
*
|
|
* This library is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU AFFERO GENERAL PUBLIC LICENSE for more details.
|
|
*
|
|
* You should have received a copy of the GNU Affero General Public
|
|
* License along with this library. If not, see <http://www.gnu.org/licenses/>.
|
|
*
|
|
*/
|
|
|
|
|
|
namespace OCP\AppFramework;
|
|
|
|
use OC\AppFramework\Http\Request;
|
|
use OCP\AppFramework\Http\TemplateResponse;
|
|
|
|
|
|
class ChildApiController extends ApiController {};
|
|
|
|
|
|
class ApiControllerTest extends \PHPUnit_Framework_TestCase {
|
|
|
|
|
|
public function testCors() {
|
|
$request = new Request(
|
|
array('server' => array('HTTP_ORIGIN' => 'test'))
|
|
);
|
|
$this->controller = new ChildApiController('app', $request, 'verbs',
|
|
'headers', 100);
|
|
|
|
$response = $this->controller->preflightedCors();
|
|
|
|
$headers = $response->getHeaders();
|
|
|
|
$this->assertEquals('test', $headers['Access-Control-Allow-Origin']);
|
|
$this->assertEquals('verbs', $headers['Access-Control-Allow-Methods']);
|
|
$this->assertEquals('headers', $headers['Access-Control-Allow-Headers']);
|
|
$this->assertEquals('false', $headers['Access-Control-Allow-Credentials']);
|
|
$this->assertEquals(100, $headers['Access-Control-Max-Age']);
|
|
}
|
|
|
|
}
|