CorsHeaderTrait

CORS (Cross-Origin Resource Sharing) header names.

Tags

author

Marc Alcaraz (ekameleon)

since

1.1.0

Table of Contents

Constants

ACCESS_CONTROL_ALLOW_CREDENTIALS  : string = 'Access-Control-Allow-Credentials'

`Access-Control-Allow-Credentials` — Whether the response may be exposed when credentials are sent.

ACCESS_CONTROL_ALLOW_HEADERS  : string = 'Access-Control-Allow-Headers'

`Access-Control-Allow-Headers` — Request headers allowed during the actual cross-origin request.

ACCESS_CONTROL_ALLOW_METHODS  : string = 'Access-Control-Allow-Methods'

`Access-Control-Allow-Methods` — Methods allowed when accessing the resource cross-origin.

ACCESS_CONTROL_ALLOW_ORIGIN  : string = 'Access-Control-Allow-Origin'

`Access-Control-Allow-Origin` — Origin(s) allowed to access the resource.

ACCESS_CONTROL_ALLOW_PRIVATE_NETWORK  : string = 'Access-Control-Allow-Private-Network'

`Access-Control-Allow-Private-Network` — Grants access to a resource on a private network (Private Network Access).

ACCESS_CONTROL_EXPOSE_HEADERS  : string = 'Access-Control-Expose-Headers'

`Access-Control-Expose-Headers` — Response headers exposed to client-side script.

ACCESS_CONTROL_MAX_AGE  : string = 'Access-Control-Max-Age'

`Access-Control-Max-Age` — How long (seconds) the preflight result may be cached.

ACCESS_CONTROL_REQUEST_HEADERS  : string = 'Access-Control-Request-Headers'

`Access-Control-Request-Headers` — Preflight: headers the actual request will use.

ACCESS_CONTROL_REQUEST_METHOD  : string = 'Access-Control-Request-Method'

`Access-Control-Request-Method` — Preflight: method the actual request will use.

ACCESS_CONTROL_REQUEST_PRIVATE_NETWORK  : string = 'Access-Control-Request-Private-Network'

`Access-Control-Request-Private-Network` — Preflight: actual request targets a private network (Private Network Access).