server_no_accounts_accounts.sjs (1181B)
1 /* Any copyright is dedicated to the Public Domain. 2 * http://creativecommons.org/publicdomain/zero/1.0/ 3 */ 4 5 function handleRequest(request, response) { 6 if ( 7 !request.hasHeader("Cookie") || 8 request.getHeader("Cookie") != "credential=authcookieval" 9 ) { 10 response.setStatusLine(request.httpVersion, 400, "Bad Request"); 11 return; 12 } 13 if ( 14 !request.hasHeader("Sec-Fetch-Dest") || 15 request.getHeader("Sec-Fetch-Dest") != "webidentity" 16 ) { 17 response.setStatusLine(request.httpVersion, 400, "Bad Request"); 18 return; 19 } 20 if (request.hasHeader("Origin") && request.getHeader("Origin") != "null") { 21 response.setStatusLine(request.httpVersion, 400, "Bad Request"); 22 return; 23 } 24 if (request.hasHeader("Referer")) { 25 response.setStatusLine(request.httpVersion, 400, "Bad Request"); 26 return; 27 } 28 29 response.setHeader("Access-Control-Allow-Origin", "*"); 30 response.setHeader("Access-Control-Allow-Credentials", "true"); 31 response.setHeader("Content-Type", "application/json"); 32 let content = { 33 accounts: [], 34 }; 35 let body = JSON.stringify(content); 36 response.setStatusLine(request.httpVersion, 200, "OK"); 37 response.write(body); 38 }