1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
|
# -*- coding: utf-8 -*-
"""
test
~~~~
Flask-CORS is a simple extension to Flask allowing you to support cross
origin resource sharing (CORS) using a simple decorator.
:copyright: (c) 2016 by Cory Dolphin.
:license: MIT, see LICENSE for more details.
"""
from ..base_test import FlaskCorsTestCase
from flask import Flask
from flask_cors import *
from flask_cors.core import *
class OriginsW3TestCase(FlaskCorsTestCase):
def setUp(self):
self.app = Flask(__name__)
@self.app.route('/')
@cross_origin(origins='*', send_wildcard=False, always_send=False)
def allowOrigins():
''' This sets up flask-cors to echo the request's `Origin` header,
only if it is actually set. This behavior is most similar to
the actual W3 specification, http://www.w3.org/TR/cors/ but
is not the default because it is more common to use the
wildcard configuration in order to support CDN caching.
'''
return 'Welcome!'
@self.app.route('/default-origins')
@cross_origin(send_wildcard=False, always_send=False)
def noWildcard():
''' With the default origins configuration, send_wildcard should
still be respected.
'''
return 'Welcome!'
def test_wildcard_origin_header(self):
''' If there is an Origin header in the request, the
Access-Control-Allow-Origin header should be echoed back.
'''
example_origin = 'http://example.com'
headers = {'Origin': example_origin}
for resp in self.iter_responses('/', headers=headers):
self.assertEqual(
resp.headers.get(ACL_ORIGIN),
example_origin
)
def test_wildcard_no_origin_header(self):
''' If there is no Origin header in the request, the
Access-Control-Allow-Origin header should not be included.
'''
for resp in self.iter_responses('/'):
self.assertTrue(ACL_ORIGIN not in resp.headers)
def test_wildcard_default_origins(self):
''' If there is an Origin header in the request, the
Access-Control-Allow-Origin header should be echoed back.
'''
example_origin = 'http://example.com'
headers = {'Origin': example_origin}
for resp in self.iter_responses('/default-origins', headers=headers):
self.assertEqual(resp.headers.get(ACL_ORIGIN), example_origin)
if __name__ == "__main__":
unittest.main()
|
