o
    iiU                     @  s   d dl mZ d dlZd dlZd dlmZ d dlmZmZ d dl	m
Z
mZ d dlmZmZmZmZmZ dZh dZG d	d
 d
ZdS )    )annotationsN)Sequence)HeadersMutableHeaders)PlainTextResponseResponse)ASGIAppMessageReceiveScopeSend)DELETEGETHEADOPTIONSPATCHPOSTPUT>   Content-TypeAccept-LanguageContent-LanguageAcceptc                   @  sh   e Zd Z								d3d4ddZd5ddZd6d"d#Zd7d'd(Zd8d)d*Zd9d-d.Ze	d:d1d2Z
dS );CORSMiddleware r   FNX  appr   allow_originsSequence[str]allow_methodsallow_headersallow_credentialsboolallow_origin_regex
str | Noneallow_private_networkexpose_headersmax_ageintreturnNonec
                 C  s&  d|v rt }d }
|d urt|}
d|v }d|v }| p|}i }|r&d|d< |r,d|d< |r5d||d< i }|r>d|d< nd|d< |d|t|	d	 ttt|B }|rb|sbd||d
< |rhd|d< || _	|| _
|| _dd |D | _|| _|| _|| _|| _|
| _|| _|| _|| _d S )N*Access-Control-Allow-Origintruez Access-Control-Allow-Credentials, zAccess-Control-Expose-HeadersOriginVary)zAccess-Control-Allow-MethodszAccess-Control-Max-AgeAccess-Control-Allow-Headersc                 S     g | ]}|  qS r   lower.0hr   r   a/var/www/scraper.webshop2u.hu/html/venv/lib/python3.10/site-packages/starlette/middleware/cors.py
<listcomp>D       z+CORSMiddleware.__init__.<locals>.<listcomp>)ALL_METHODSrecompilejoinupdatestrsortedSAFELISTED_HEADERSsetr   r   r   r    allow_all_originsallow_all_headersr!   preflight_explicit_allow_originr#   r%   simple_headerspreflight_headers)selfr   r   r   r    r!   r#   r%   r&   r'   compiled_allow_origin_regexrD   rE   rF   rG   rH   r   r   r8   __init__   sR   



zCORSMiddleware.__init__scoper   receiver
   sendr   c                   s   |d dkr|  |||I d H  d S |d }t|d}|d}|d u r1|  |||I d H  d S |dkrJd|v rJ| j|d}||||I d H  d S | j||||dI d H  d S )	NtypehttpmethodrL   originr   access-control-request-method)request_headers)r   r   getpreflight_responsesimple_response)rI   rL   rM   rN   rQ   headersrS   responser   r   r8   __call__N   s   

zCORSMiddleware.__call__rS   r@   c                 C  s.   | j rdS | jd ur| j|rdS || jv S )NT)rD   r#   	fullmatchr   )rI   rS   r   r   r8   is_allowed_originb   s
   
z CORSMiddleware.is_allowed_originrU   r   r   c           
      C  s  |d }|d }| d}| d}t| j}g }| j|dr'| jr&||d< n|d || jvr6|d | jrB|d urB||d< n|d urad	d
 |dD D ]}|	 | j
vr`|d  nqP|d urr| jrmd|d< n|d |rdd| }	t|	d|dS tdd|dS )NrS   rT   zaccess-control-request-headersz&access-control-request-private-networkrS   r,   rQ   r1   c                 S  r2   r   r3   r5   r   r   r8   r9      r:   z5CORSMiddleware.preflight_response.<locals>.<listcomp>,rY   r-   z$Access-Control-Allow-Private-Networkzprivate-networkzDisallowed CORS r.   i  )status_coderY   OK   )rV   dictrH   r]   rF   appendr   rE   splitstripr    r%   r>   r   )
rI   rU   requested_originrequested_methodrequested_headersrequested_private_networkrY   failuresheaderfailure_textr   r   r8   rW   k   s:   









z!CORSMiddleware.preflight_responsec                   s,   t j| j||d}| |||I d H  d S )N)rN   rU   )	functoolspartialrN   r   )rI   rL   rM   rN   rU   r   r   r8   rX      s   zCORSMiddleware.simple_responsemessager	   c                   s   |d dkr||I d H  d S | dg  t|d}|| j |d }| jr2| jr2| || n| jsA| j|drA| || ||I d H  d S )NrO   zhttp.response.startrY   rR   r/   r^   )
setdefaultr   r?   rG   rD   r!   allow_explicit_originr]   )rI   rp   rN   rU   rY   rS   r   r   r8   rN      s   
zCORSMiddleware.sendrY   r   c                 C  s   || d< |  d d S )Nr,   r/   )add_vary_header)rY   rS   r   r   r8   rr      s   z$CORSMiddleware.allow_explicit_origin)r   r   r   FNFr   r   )r   r   r   r   r   r   r    r   r!   r"   r#   r$   r%   r"   r&   r   r'   r(   r)   r*   )rL   r   rM   r
   rN   r   r)   r*   )rS   r@   r)   r"   )rU   r   r)   r   )
rL   r   rM   r
   rN   r   rU   r   r)   r*   )rp   r	   rN   r   rU   r   r)   r*   )rY   r   rS   r@   r)   r*   )__name__
__module____qualname__rK   r[   r]   rW   rX   rN   staticmethodrr   r   r   r   r8   r      s"    
>

	
-
r   )
__future__r   rn   r<   collections.abcr   starlette.datastructuresr   r   starlette.responsesr   r   starlette.typesr   r	   r
   r   r   r;   rB   r   r   r   r   r8   <module>   s    