/*
 * Copyright 2014 Red Hat, Inc.
 *
 *  All rights reserved. This program and the accompanying materials
 *  are made available under the terms of the Eclipse Public License v1.0
 *  and Apache License v2.0 which accompanies this distribution.
 *
 *  The Eclipse Public License is available at
 *  http://www.eclipse.org/legal/epl-v10.html
 *
 *  The Apache License v2.0 is available at
 *  http://www.opensource.org/licenses/apache2.0.php
 *
 *  You may elect to redistribute this code under either of these licenses.
 */

package io.vertx.ext.web.handler;

import io.vertx.codegen.annotations.Fluent;
import io.vertx.codegen.annotations.VertxGen;
import io.vertx.core.Handler;
import io.vertx.core.http.HttpMethod;
import io.vertx.ext.web.RoutingContext;
import io.vertx.ext.web.handler.impl.CorsHandlerImpl;

import java.util.Set;

A handler which implements server side http://www.w3.org/TR/cors/[CORS] support for Vert.x-Web.
Author:
Tim Fox/**
 * A handler which implements server side http://www.w3.org/TR/cors/[CORS] support for Vert.x-Web.
 *
 * @author <a href="http://tfox.org">Tim Fox</a>
 */
@VertxGen
public interface CorsHandler extends Handler<RoutingContext> {

  
Create a CORS handler
Params:
allowedOriginPattern –  the allowed origin pattern
Returns:
 the handler/**
   * Create a CORS handler
   *
   * @param allowedOriginPattern  the allowed origin pattern
   * @return  the handler
   */
  static CorsHandler create(String allowedOriginPattern) {
    return new CorsHandlerImpl(allowedOriginPattern);
  }

  
Add an allowed method
Params:
method –  the method to add
Returns:
a reference to this, so the API can be used fluently/**
   * Add an allowed method
   *
   * @param method  the method to add
   * @return a reference to this, so the API can be used fluently
   */
  @Fluent
  CorsHandler allowedMethod(HttpMethod method);

  
Add a set of  allowed methods
Params:
methods – the methods to add
Returns:
a reference to this, so the API can be used fluently/**
   * Add a set of  allowed methods
   *
   * @param methods the methods to add
   * @return a reference to this, so the API can be used fluently
   */
  @Fluent
  CorsHandler allowedMethods(Set<HttpMethod> methods);

  
Add an allowed header
Params:
headerName –  the allowed header name
Returns:
a reference to this, so the API can be used fluently/**
   * Add an allowed header
   *
   * @param headerName  the allowed header name
   * @return a reference to this, so the API can be used fluently
   */
  @Fluent
  CorsHandler allowedHeader(String headerName);

  
Add a set of allowed headers
Params:
headerNames –  the allowed header names
Returns:
a reference to this, so the API can be used fluently/**
   * Add a set of allowed headers
   *
   * @param headerNames  the allowed header names
   * @return a reference to this, so the API can be used fluently
   */
  @Fluent
  CorsHandler allowedHeaders(Set<String> headerNames);

  
Add an exposed header
Params:
headerName –  the exposed header name
Returns:
a reference to this, so the API can be used fluently/**
   * Add an exposed header
   *
   * @param headerName  the exposed header name
   * @return a reference to this, so the API can be used fluently
   */
  @Fluent
  CorsHandler exposedHeader(String headerName);

  
Add a set of exposed headers
Params:
headerNames –  the exposed header names
Returns:
a reference to this, so the API can be used fluently/**
   * Add a set of exposed headers
   *
   * @param headerNames  the exposed header names
   * @return a reference to this, so the API can be used fluently
   */
  @Fluent
  CorsHandler exposedHeaders(Set<String> headerNames);

  
Set whether credentials are allowed. Note that user agents will block
requests that use a wildcard as origin and include credentials.
From the MDN documentation you can read:

Important note: when responding to a credentialed request,
server must specify a domain, and cannot use wild carding.

Params:
allow – true if allowed
Returns:
a reference to this, so the API can be used fluently/**
   * Set whether credentials are allowed. Note that user agents will block
   * requests that use a wildcard as origin and include credentials.
   *
   * From the MDN documentation you can read:
   *
   * <blockquote>
   * Important note: when responding to a credentialed request,
   * server must specify a domain, and cannot use wild carding.
   * </blockquote>
   *
   * @param allow true if allowed
   * @return a reference to this, so the API can be used fluently
   */
  @Fluent
  CorsHandler allowCredentials(boolean allow);

  
Set how long the browser should cache the information
Params:
maxAgeSeconds –  max age in seconds
Returns:
a reference to this, so the API can be used fluently/**
   * Set how long the browser should cache the information
   *
   * @param maxAgeSeconds  max age in seconds
   * @return a reference to this, so the API can be used fluently
   */
  @Fluent
  CorsHandler maxAgeSeconds(int maxAgeSeconds);

}