credentials.py (901B)
1 # Returns a valid response when a request has appropriate credentials. 2 def main(request, response): 3 cookie = request.cookies.first(b"cookieName", None) 4 expected_value = request.GET.first(b"value", None) 5 source_origin = request.headers.get(b"origin", None) 6 if source_origin is None: 7 # Same origin GET won't include origin header 8 source_origin = "%s://%s" % (request.url_parts.scheme, 9 request.url_parts.netloc) 10 if request.url_parts.port: 11 source_origin += ":%s" % request.url_parts.port 12 13 response_headers = [(b"Content-Type", b"text/javascript"), 14 (b"Access-Control-Allow-Origin", source_origin), 15 (b"Access-Control-Allow-Credentials", b"true")] 16 17 if cookie == expected_value: 18 return (200, response_headers, u"") 19 20 return (404, response_headers, u"")