Merge pull request #529 from threefoldtech/development_cors_header

Add cors header and options to gedis http server

jumpscale/servers/gedis_http/__init__.py

@@ -11,12 +11,16 @@
 class GedisHTTPServer(Base):
     host = fields.String(default="127.0.0.1")
     port = fields.Integer(default=8000)
+    allow_cors = fields.Boolean(default=True)
 
     def __init__(self, *args, **kwargs):
         super().__init__(*args, **kwargs)
         self._app = Bottle()
         self._client = None
-        self._app.route("/<package>/<actor>/<method>", ["GET", "POST"], self.handler)
+        http_methods = ["GET", "POST"]
+        if self.allow_cors:
+            http_methods.extend(["OPTIONS", "PUT", "DELETE"])
+        self._app.route("/<package>/<actor>/<method>", http_methods, self.enable_cors(self.handler, self.allow_cors))
 
     @property
     def client(self):
@@ -30,6 +34,24 @@ def make_response(self, code, content):
         response.content_type = "application/json"
         return json.dumps(content)
 
+    def enable_cors(self, fn, allow_cors=True):
+        def _enable_cors(*args, **kwargs):
+            # set CORS headers
+            response.headers["Access-Control-Allow-Origin"] = "*"
+            response.headers["Access-Control-Allow-Methods"] = "GET, POST, PUT, OPTIONS, DELETE"
+            response.headers[
+                "Access-Control-Allow-Headers"
+            ] = "Origin, Accept, Content-Type, X-Requested-With, X-CSRF-Token"
+
+            if request.method != "OPTIONS":
+                # actual request; reply with the actual response
+                return fn(*args, **kwargs)
+
+        if allow_cors:
+            return _enable_cors
+        else:
+            return fn
+
     def handler(self, package, actor, method):
         actors = self.client.actors