Changeset 460 for TFP-WebServer/WebServer/src/UrlHandlers/ApiHandler.cs

Timestamp:

Aug 11, 2023, 6:29:09 PM (15 months ago)

Author:

alloc

Message:

More OpenAPI specs added
OpenAPI specs cleanup to have everything validate fine
Added CORS support to API endpoints

File:

• TFP-WebServer/WebServer/src/UrlHandlers/ApiHandler.cs (modified) (2 diffs)

TFP-WebServer/WebServer/src/UrlHandlers/ApiHandler.cs

@@ -53 +53 @@
                 private static readonly UnityEngine.Profiling.CustomSampler apiHandlerSampler = UnityEngine.Profiling.CustomSampler.Create ("API_Handler");
 
+                private bool HandleCors (RequestContext _context) {
+                        _context.Request.Headers.TryGetValue ("Origin", out string origin);
+                        _context.Response.AddHeader ("Access-Control-Allow-Origin", origin ?? "*");
+
+                        if (_context.Method != ERequestMethod.OPTIONS) {
+                                return false;
+                        }
+
+                        if (!_context.Request.Headers.TryGetValue ("Access-Control-Request-Method", out _)) {
+                                return false;
+                        }
+
+                        _context.Response.AddHeader ("Access-Control-Allow-Methods", "GET, PUT, POST, DELETE, OPTIONS, HEAD");
+                        _context.Response.AddHeader ("Access-Control-Allow-Headers", "X-SDTD-API-TOKENNAME, X-SDTD-API-SECRET");
+                        _context.Response.AddHeader ("Access-Control-Allow-Credentials", "true");
+                        return true;
+                }
+
                 public override void HandleRequest (RequestContext _context) {
 
@@ -72 +90 @@
                         }
 
+                        // CORS specific stuff
+                        if (HandleCors (_context)) {
+                                return;
+                        }
+                        // CORS end
+                        
                         _context.RequestPath = subPath;