HttpRouteCorsPolicyResponse

data class HttpRouteCorsPolicyResponse(val allowCredentials: Boolean, val allowHeaders: List<String>, val allowMethods: List<String>, val allowOriginRegexes: List<String>, val allowOrigins: List<String>, val disabled: Boolean, val exposeHeaders: List<String>, val maxAge: String)

The Specification for allowing client side cross-origin requests.

Constructors

Link copied to clipboard
fun HttpRouteCorsPolicyResponse(allowCredentials: Boolean, allowHeaders: List<String>, allowMethods: List<String>, allowOriginRegexes: List<String>, allowOrigins: List<String>, disabled: Boolean, exposeHeaders: List<String>, maxAge: String)

Types

Link copied to clipboard
object Companion

Properties

Link copied to clipboard

In response to a preflight request, setting this to true indicates that the actual request can include user credentials. This translates to the Access-Control-Allow-Credentials header. Default value is false.

Link copied to clipboard

Specifies the content for Access-Control-Allow-Headers header.

Link copied to clipboard

Specifies the content for Access-Control-Allow-Methods header.

Link copied to clipboard

Specifies the regular expression patterns that match allowed origins. For regular expression grammar, please see https://github.com/google/re2/wiki/Syntax.

Link copied to clipboard

Specifies the list of origins that will be allowed to do CORS requests. An origin is allowed if it matches either an item in allow_origins or an item in allow_origin_regexes.

Link copied to clipboard

If true, the CORS policy is disabled. The default value is false, which indicates that the CORS policy is in effect.

Link copied to clipboard

Specifies the content for Access-Control-Expose-Headers header.

Link copied to clipboard

Specifies how long result of a preflight request can be cached in seconds. This translates to the Access-Control-Max-Age header.