- decorateCORSProperties(HttpServletRequest, CORSFilter.CORSRequestType) - Static method in class org.ebaysf.web.cors.CORSFilter
-
Decorates the HttpServletRequest
, with CORS attributes.
- decorateRequest - Variable in class org.ebaysf.web.cors.CORSFilter
-
Determines if the request should be decorated or not.
- DEFAULT_ALLOWED_HTTP_HEADERS - Static variable in class org.ebaysf.web.cors.CORSFilter
-
By default, following headers are supported:
Origin,Accept,X-Requested-With, Content-Type,
Access-Control-Request-Method, and Access-Control-Request-Headers.
- DEFAULT_ALLOWED_HTTP_METHODS - Static variable in class org.ebaysf.web.cors.CORSFilter
-
By default, following methods are supported: GET, POST, HEAD and OPTIONS.
- DEFAULT_ALLOWED_ORIGINS - Static variable in class org.ebaysf.web.cors.CORSFilter
-
By default, all origins are allowed to make requests.
- DEFAULT_DECORATE_REQUEST - Static variable in class org.ebaysf.web.cors.CORSFilter
-
By default, request is decorated with CORS attributes.
- DEFAULT_EXPOSED_HEADERS - Static variable in class org.ebaysf.web.cors.CORSFilter
-
By default, none of the headers are exposed in response.
- DEFAULT_LOGGING_ENABLED - Static variable in class org.ebaysf.web.cors.CORSFilter
-
By default, access log logging is turned off
- DEFAULT_PREFLIGHT_MAXAGE - Static variable in class org.ebaysf.web.cors.CORSFilter
-
By default, time duration to cache pre-flight response is 30 mins.
- DEFAULT_SUPPORTS_CREDENTIALS - Static variable in class org.ebaysf.web.cors.CORSFilter
-
By default, support credentials is turned on.
- destroy() - Method in class org.ebaysf.web.cors.CORSFilter
-
- doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.ebaysf.web.cors.CORSFilter
-
- REQUEST_HEADER_ACCESS_CONTROL_REQUEST_HEADERS - Static variable in class org.ebaysf.web.cors.CORSFilter
-
The Access-Control-Request-Headers header indicates which headers will be
used in the actual request as part of the preflight request.
- REQUEST_HEADER_ACCESS_CONTROL_REQUEST_METHOD - Static variable in class org.ebaysf.web.cors.CORSFilter
-
The Access-Control-Request-Method header indicates which method will be
used in the actual request as part of the preflight request.
- REQUEST_HEADER_ORIGIN - Static variable in class org.ebaysf.web.cors.CORSFilter
-
The Origin header indicates where the cross-origin request or preflight
request originates from.
- RESPONSE_HEADER_ACCESS_CONTROL_ALLOW_CREDENTIALS - Static variable in class org.ebaysf.web.cors.CORSFilter
-
The Access-Control-Allow-Credentials header indicates whether the
response to request can be exposed when the omit credentials flag is
unset.
- RESPONSE_HEADER_ACCESS_CONTROL_ALLOW_HEADERS - Static variable in class org.ebaysf.web.cors.CORSFilter
-
The Access-Control-Allow-Headers header indicates, as part of the
response to a preflight request, which header field names can be used
during the actual request.
- RESPONSE_HEADER_ACCESS_CONTROL_ALLOW_METHODS - Static variable in class org.ebaysf.web.cors.CORSFilter
-
The Access-Control-Allow-Methods header indicates, as part of the
response to a preflight request, which methods can be used during the
actual request.
- RESPONSE_HEADER_ACCESS_CONTROL_ALLOW_ORIGIN - Static variable in class org.ebaysf.web.cors.CORSFilter
-
The Access-Control-Allow-Origin header indicates whether a resource can
be shared based by returning the value of the Origin request header in
the response.
- RESPONSE_HEADER_ACCESS_CONTROL_EXPOSE_HEADERS - Static variable in class org.ebaysf.web.cors.CORSFilter
-
The Access-Control-Expose-Headers header indicates which headers are safe
to expose to the API of a CORS API specification
- RESPONSE_HEADER_ACCESS_CONTROL_MAX_AGE - Static variable in class org.ebaysf.web.cors.CORSFilter
-
The Access-Control-Max-Age header indicates how long the results of a
preflight request can be cached in a preflight result cache.