/*
 * Copyright 2002-2017 the original author or authors.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package org.springframework.web.cors;

import java.util.Collections;
import java.util.LinkedHashMap;
import java.util.Map;
import javax.servlet.http.HttpServletRequest;

import org.springframework.lang.Nullable;
import org.springframework.util.AntPathMatcher;
import org.springframework.util.Assert;
import org.springframework.util.PathMatcher;
import org.springframework.web.util.UrlPathHelper;

Provide a per request CorsConfiguration instance based on a collection of CorsConfiguration mapped on path patterns.

Exact path mapping URIs (such as "/admin") are supported as well as Ant-style path patterns (such as "/admin/**").

Author:Sebastien Deleuze
Since:4.2
/** * Provide a per request {@link CorsConfiguration} instance based on a * collection of {@link CorsConfiguration} mapped on path patterns. * * <p>Exact path mapping URIs (such as {@code "/admin"}) are supported * as well as Ant-style path patterns (such as {@code "/admin/**"}). * * @author Sebastien Deleuze * @since 4.2 */
public class UrlBasedCorsConfigurationSource implements CorsConfigurationSource { private final Map<String, CorsConfiguration> corsConfigurations = new LinkedHashMap<>(); private PathMatcher pathMatcher = new AntPathMatcher(); private UrlPathHelper urlPathHelper = new UrlPathHelper();
Set the PathMatcher implementation to use for matching URL paths against registered URL patterns. Default is AntPathMatcher.
See Also:
  • AntPathMatcher
/** * Set the PathMatcher implementation to use for matching URL paths * against registered URL patterns. Default is AntPathMatcher. * @see org.springframework.util.AntPathMatcher */
public void setPathMatcher(PathMatcher pathMatcher) { Assert.notNull(pathMatcher, "PathMatcher must not be null"); this.pathMatcher = pathMatcher; }
Shortcut to same property on underlying UrlPathHelper.
See Also:
/** * Shortcut to same property on underlying {@link #setUrlPathHelper UrlPathHelper}. * @see org.springframework.web.util.UrlPathHelper#setAlwaysUseFullPath */
public void setAlwaysUseFullPath(boolean alwaysUseFullPath) { this.urlPathHelper.setAlwaysUseFullPath(alwaysUseFullPath); }
Shortcut to same property on underlying UrlPathHelper.
See Also:
/** * Shortcut to same property on underlying {@link #setUrlPathHelper UrlPathHelper}. * @see org.springframework.web.util.UrlPathHelper#setUrlDecode */
public void setUrlDecode(boolean urlDecode) { this.urlPathHelper.setUrlDecode(urlDecode); }
Shortcut to same property on underlying UrlPathHelper.
See Also:
/** * Shortcut to same property on underlying {@link #setUrlPathHelper UrlPathHelper}. * @see org.springframework.web.util.UrlPathHelper#setRemoveSemicolonContent(boolean) */
public void setRemoveSemicolonContent(boolean removeSemicolonContent) { this.urlPathHelper.setRemoveSemicolonContent(removeSemicolonContent); }
Set the UrlPathHelper to use for resolution of lookup paths.

Use this to override the default UrlPathHelper with a custom subclass.

/** * Set the UrlPathHelper to use for resolution of lookup paths. * <p>Use this to override the default UrlPathHelper with a custom subclass. */
public void setUrlPathHelper(UrlPathHelper urlPathHelper) { Assert.notNull(urlPathHelper, "UrlPathHelper must not be null"); this.urlPathHelper = urlPathHelper; }
Set CORS configuration based on URL patterns.
/** * Set CORS configuration based on URL patterns. */
public void setCorsConfigurations(@Nullable Map<String, CorsConfiguration> corsConfigurations) { this.corsConfigurations.clear(); if (corsConfigurations != null) { this.corsConfigurations.putAll(corsConfigurations); } }
Get the CORS configuration.
/** * Get the CORS configuration. */
public Map<String, CorsConfiguration> getCorsConfigurations() { return Collections.unmodifiableMap(this.corsConfigurations); }
Register a CorsConfiguration for the specified path pattern.
/** * Register a {@link CorsConfiguration} for the specified path pattern. */
public void registerCorsConfiguration(String path, CorsConfiguration config) { this.corsConfigurations.put(path, config); } @Override @Nullable public CorsConfiguration getCorsConfiguration(HttpServletRequest request) { String lookupPath = this.urlPathHelper.getLookupPathForRequest(request); for (Map.Entry<String, CorsConfiguration> entry : this.corsConfigurations.entrySet()) { if (this.pathMatcher.match(entry.getKey(), lookupPath)) { return entry.getValue(); } } return null; } }