XrdHttpCorsHandler.cc

Go to the documentation of this file.

//------------------------------------------------------------------------------
// This file is part of the XRootD framework
//
// Copyright (c) 2025 by European Organization for Nuclear Research (CERN)
// Author: Cedric Caffy <cedric.caffy@cern.ch>
// File Date: Jun 2025
//------------------------------------------------------------------------------
// XRootD is free software: you can redistribute it and/or modify
// it under the terms of the GNU Lesser General Public License as published by
// the Free Software Foundation, either version 3 of the License, or
// (at your option) any later version.
//
// XRootD is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
// GNU General Public License for more details.
//
// You should have received a copy of the GNU Lesser General Public License
// along with XRootD.  If not, see <http://www.gnu.org/licenses/>.
//------------------------------------------------------------------------------
 
#include "XrdHttpCorsHandler.hh"
#include "XrdOuc/XrdOucGatherConf.hh"
#include "XrdVersion.hh"
#include "XrdOuc/XrdOucUtils.hh"
 
extern "C"
{
XrdHttpCors *XrdHttpCorsGetHandler(XrdHttpCorsGetHandlerArgs) {
  return new XrdHttpCorsHandler();
}
}

int XrdHttpCorsHandler::Configure(const char *configFN, XrdSysError *errP) {
  // Get the cors.origin parameters which can be either space-delimited or a repetition of cors.origin
  XrdOucGatherConf gconf("cors.origin",errP);
  if(gconf.Gather(configFN,XrdOucGatherConf::only_body) < 0){
    return 1;
  }
  if(gconf.GetLine()) {
    while(char * val = gconf.GetToken()) {
      // No need to check for correctness
      addAllowedOrigin(val);
    }
  }
  return 0;
}
 
std::optional<std::string> XrdHttpCorsHandler::getCORSAllowOriginHeader(const std::string & origin) {
  auto originItor = m_origins.find(origin);
  if(originItor != m_origins.end()) {
    return "Access-Control-Allow-Origin: " + origin;
  }
  // We did not find any allowed origin, return nullopt
  return std::nullopt;
}
 
void XrdHttpCorsHandler::addAllowedOrigin(const std::string & origin) {
  std::string_view origin_sv(origin);
  XrdOucUtils::trim(origin_sv);
  if(!origin_sv.empty()) {
    m_origins.emplace(origin_sv);
  }
}
 
XrdVERSIONINFO(XrdHttpCorsget,XrdHttpCorsHandler);