18 lines
627 B
ReStructuredText
18 lines
627 B
ReStructuredText
|
.. _-checkSameOrigin-java-:
|
||
|
|
|
||
|
|
checkSameOrigin
|
||
|
|
===============
|
||
|
|
|
||
|
|
Description
|
||
|
|
-----------
|
||
|
|
Checks that request comes from the same origin. Extracts the ``Origin`` header value and verifies that allowed range
|
||
|
|
contains the obtained value. In the case of absent of the ``Origin`` header rejects with a ``MissingHeaderRejection``.
|
||
|
|
If the origin value is not in the allowed range rejects with an ``InvalidOriginHeaderRejection``
|
||
|
|
and ``StatusCodes.FORBIDDEN`` status.
|
||
|
|
|
||
|
|
Example
|
||
|
|
-------
|
||
|
|
Checking the ``Origin`` header:
|
||
|
|
|
||
|
|
.. includecode:: ../../../../code/docs/http/javadsl/server/directives/HeaderDirectivesExamplesTest.java#checkSameOrigin
|