a
    ^g                     @  s~   d dl mZ d dlZd dlZd dlZd dlmZmZ d dlm	Z	m
Z
 d dlmZmZmZmZmZ dZh dZG dd	 d	ZdS )
    )annotationsN)HeadersMutableHeaders)PlainTextResponseResponse)ASGIAppMessageReceiveScopeSend)DELETEGETHEADOPTIONSPATCHPOSTPUT>   zContent-TypezAccept-LanguageAcceptzContent-Languagec                   @  s   e Zd Zd)dddddd	dd
dd	ddZdddddddZdddddZdddddZdddddddd Zd!dddd"d#d$Ze	d%ddd&d'd(Z
dS )*CORSMiddleware r   FNX  r   ztyping.Sequence[str]boolz
str | NoneintNone)	appallow_originsallow_methodsallow_headersallow_credentialsallow_origin_regexexpose_headersmax_agereturnc	                 C  s  d|v rt }d }	|d ur"t|}	d|v }
d|v }|
 p:|}i }|
rLd|d< |rXd|d< |rjd||d< i }|r|d|d< nd|d< |d|t|d	 ttt|B }|r|sd||d
< |rd|d< || _	|| _
|| _dd |D | _|
| _|| _|| _|	| _|| _|| _d S )N*Access-Control-Allow-Origintruez Access-Control-Allow-Credentials, zAccess-Control-Expose-HeadersOriginZVary)zAccess-Control-Allow-MethodszAccess-Control-Max-AgeAccess-Control-Allow-Headersc                 S  s   g | ]}|  qS r   lower.0hr   r   g/var/www/html/cobodadashboardai.evdpl.com/venv/lib/python3.9/site-packages/starlette/middleware/cors.py
<listcomp>C       z+CORSMiddleware.__init__.<locals>.<listcomp>)ALL_METHODSrecompilejoinupdatestrsortedSAFELISTED_HEADERSsetr   r   r   r   allow_all_originsallow_all_headerspreflight_explicit_allow_originr    simple_headerspreflight_headers)selfr   r   r   r   r   r    r!   r"   Zcompiled_allow_origin_regexr;   r<   r=   r>   r?   r   r   r/   __init__   sN    


zCORSMiddleware.__init__r
   r	   r   )scopereceivesendr#   c                   s   |d dkr$|  |||I d H  d S |d }t|d}|d}|d u r`|  |||I d H  d S |dkrd|v r| j|d}||||I d H  d S | j||||dI d H  d S )	NtypehttpmethodrB   originr   access-control-request-method)request_headers)r   r   getpreflight_responsesimple_response)r@   rB   rC   rD   rG   headersrI   responser   r   r/   __call__K   s    

zCORSMiddleware.__call__r7   )rI   r#   c                 C  s.   | j r
dS | jd ur$| j|r$dS || jv S )NT)r;   r    	fullmatchr   )r@   rI   r   r   r/   is_allowed_origin_   s
    z CORSMiddleware.is_allowed_originr   r   )rK   r#   c           	      C  s   |d }|d }| d}t| j}g }| j|drD| jrN||d< n
|d || jvrb|d | jrz|d urz||d< n>|d urdd	 |d
D D ] }|	 | j
vr|d  qq|rdd| }t|d|dS tdd|dS )NrI   rJ   zaccess-control-request-headersrI   r%   rG   r)   c                 S  s   g | ]}|  qS r   r*   r,   r   r   r/   r0      r1   z5CORSMiddleware.preflight_response.<locals>.<listcomp>,rO   zDisallowed CORS r'   i  )status_coderO   OK   )rL   dictr?   rS   r=   appendr   r<   splitstripr   r5   r   )	r@   rK   Zrequested_originZrequested_methodZrequested_headersrO   ZfailuresheaderZfailure_textr   r   r/   rM   h   s,    







z!CORSMiddleware.preflight_response)rB   rC   rD   rK   r#   c                   s*   t j| j||d}| |||I d H  d S )N)rD   rK   )	functoolspartialrD   r   )r@   rB   rC   rD   rK   r   r   r/   rN      s    zCORSMiddleware.simple_responser   )messagerD   rK   r#   c                   s   |d dkr||I d H  d S | dg  t|d}|| j |d }d|v }| jrh|rh| || n| js| j|dr| || ||I d H  d S )NrE   zhttp.response.startrO   rH   r(   cookierT   )
setdefaultr   r6   r>   r;   allow_explicit_originrS   )r@   r`   rD   rK   rO   rI   Z
has_cookier   r   r/   rD      s    

zCORSMiddleware.sendr   )rO   rI   r#   c                 C  s   || d< |  d d S )Nr%   r(   )Zadd_vary_header)rO   rI   r   r   r/   rc      s    z$CORSMiddleware.allow_explicit_origin)r   r   r   FNr   r   )__name__
__module____qualname__rA   rQ   rS   rM   rN   rD   staticmethodrc   r   r   r   r/   r      s           ;	&r   )
__future__r   r^   r3   typingZstarlette.datastructuresr   r   Zstarlette.responsesr   r   Zstarlette.typesr   r   r	   r
   r   r2   r9   r   r   r   r   r/   <module>   s   