Documentation

A CorsPolicy interprets the request's provided Origin and the current routing context to determine how to expose resources to the requestor.

The CorsContext provides data from which we can make choices about how to respond to CORS requests.

Descrbes what parts of the response should be made available cross-origin. The Monoid product on AccessSets permits all accesses of either of the constituents.

Class describing types which describe CORS Policys.

The PermitAll policy produces the permitAll Policy.

The most permissive CORS Policy possible. Differs from Wildcard in that it allows credentials. Max age is not provided (so no caching)

Effects a wildcard policy which provides maximal cross-origin access to all request origins. This disallows credentials use, however.

Provides access to all origins which pass a predicate