mirror of
https://github.com/0rangebananaspy/authelia.git
synced 2024-09-14 22:47:21 +07:00
4ebd8fdf4e
This adjusts the CORS headers appropriately for OpenID Connect. This includes responding to OPTIONS requests appropriately. Currently this is only configured to operate when the Origin scheme is HTTPS; but can easily be expanded in the future to include additional Origins.
72 lines
2.5 KiB
Go
72 lines
2.5 KiB
Go
package middlewares
|
|
|
|
import (
|
|
"errors"
|
|
|
|
"github.com/valyala/fasthttp"
|
|
)
|
|
|
|
var (
|
|
headerAccept = []byte(fasthttp.HeaderAccept)
|
|
headerContentLength = []byte(fasthttp.HeaderContentLength)
|
|
|
|
headerXForwardedProto = []byte(fasthttp.HeaderXForwardedProto)
|
|
headerXForwardedHost = []byte(fasthttp.HeaderXForwardedHost)
|
|
headerXForwardedFor = []byte(fasthttp.HeaderXForwardedFor)
|
|
headerXRequestedWith = []byte(fasthttp.HeaderXRequestedWith)
|
|
|
|
headerXForwardedURI = []byte("X-Forwarded-URI")
|
|
headerXOriginalURL = []byte("X-Original-URL")
|
|
headerXForwardedMethod = []byte("X-Forwarded-Method")
|
|
|
|
headerVary = []byte(fasthttp.HeaderVary)
|
|
headerAllow = []byte(fasthttp.HeaderAllow)
|
|
headerOrigin = []byte(fasthttp.HeaderOrigin)
|
|
|
|
headerAccessControlAllowCredentials = []byte(fasthttp.HeaderAccessControlAllowCredentials)
|
|
headerAccessControlAllowHeaders = []byte(fasthttp.HeaderAccessControlAllowHeaders)
|
|
headerAccessControlAllowMethods = []byte(fasthttp.HeaderAccessControlAllowMethods)
|
|
headerAccessControlAllowOrigin = []byte(fasthttp.HeaderAccessControlAllowOrigin)
|
|
headerAccessControlMaxAge = []byte(fasthttp.HeaderAccessControlMaxAge)
|
|
headerAccessControlRequestHeaders = []byte(fasthttp.HeaderAccessControlRequestHeaders)
|
|
headerAccessControlRequestMethod = []byte(fasthttp.HeaderAccessControlRequestMethod)
|
|
)
|
|
|
|
var (
|
|
headerValueFalse = []byte("false")
|
|
headerValueTrue = []byte("true")
|
|
headerValueMaxAge = []byte("100")
|
|
headerValueVary = []byte("Accept-Encoding, Origin")
|
|
headerValueVaryWildcard = []byte("Accept-Encoding")
|
|
headerValueOriginWildcard = []byte("*")
|
|
headerValueZero = []byte("0")
|
|
)
|
|
|
|
var (
|
|
protoHTTPS = []byte("https")
|
|
protoHTTP = []byte("http")
|
|
|
|
// UserValueKeyBaseURL is the User Value key where we store the Base URL.
|
|
UserValueKeyBaseURL = []byte("base_url")
|
|
|
|
headerSeparator = []byte(", ")
|
|
)
|
|
|
|
const (
|
|
headerValueXRequestedWithXHR = "XMLHttpRequest"
|
|
contentTypeApplicationJSON = "application/json"
|
|
contentTypeTextHTML = "text/html"
|
|
)
|
|
|
|
var okMessageBytes = []byte("{\"status\":\"OK\"}")
|
|
|
|
const (
|
|
messageOperationFailed = "Operation failed"
|
|
messageIdentityVerificationTokenAlreadyUsed = "The identity verification token has already been used"
|
|
messageIdentityVerificationTokenHasExpired = "The identity verification token has expired"
|
|
)
|
|
|
|
var protoHostSeparator = []byte("://")
|
|
|
|
var errPasswordPolicyNoMet = errors.New("the supplied password does not met the security policy")
|