Module: Sinatra::CrossOrigin::Helpers

Defined in:
lib/sinatra/cross_origin.rb

Instance Method Summary collapse

Instance Method Details

#cross_origin(hash = nil) ⇒ Object

Apply cross origin headers either from global config or custom config passed as a hash



28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
 
# File 'lib/sinatra/cross_origin.rb', line 28

def cross_origin(hash=nil)
  request_origin = request.env['HTTP_ORIGIN']
  return unless request_origin
  settings.set hash if hash

  if settings.allow_origin == :any
    origin = request_origin
  else
    allowed_origins = *settings.allow_origin # make sure its an array
    origin = allowed_origins.join('|')       # we'll return this unless allowed

    allowed_origins.each do |allowed_origin|
      if allowed_origin.is_a?(Regexp) ? 
          request_origin =~ allowed_origin : 
          request_origin == allowed_origin
        origin = request_origin
        break
      end
    end
  end

  methods = settings.allow_methods.map{ |m| m.to_s.upcase! }.join(', ')

  headers_list = {
    'Access-Control-Allow-Origin' => origin,
    'Access-Control-Allow-Methods' => methods,
    'Access-Control-Allow-Headers' => settings.allow_headers.map(&:to_s).join(', '),
    'Access-Control-Allow-Credentials' => settings.allow_credentials.to_s,
    'Access-Control-Max-Age' => settings.max_age.to_s,
    'Access-Control-Expose-Headers' => settings.expose_headers.join(', ')
  }

  headers headers_list
end