|
|
@ -242,6 +242,9 @@ recommended.
|
|
|
|
|
|
|
|
|
|
|
|
{{versions_cs_http_api}}
|
|
|
|
{{versions_cs_http_api}}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
.. _`CORS`:
|
|
|
|
|
|
|
|
|
|
|
|
Web Browser Clients
|
|
|
|
Web Browser Clients
|
|
|
|
-------------------
|
|
|
|
-------------------
|
|
|
|
|
|
|
|
|
|
|
@ -250,9 +253,14 @@ web browser or similar environment. In these cases, the homeserver should respon
|
|
|
|
to pre-flight requests and supply Cross-Origin Resource Sharing (CORS) headers on
|
|
|
|
to pre-flight requests and supply Cross-Origin Resource Sharing (CORS) headers on
|
|
|
|
all requests.
|
|
|
|
all requests.
|
|
|
|
|
|
|
|
|
|
|
|
When a client approaches the server with a pre-flight (``OPTIONS``) request, the
|
|
|
|
Servers MUST expect that clients will approach them with ``OPTIONS`` requests,
|
|
|
|
server should respond with the CORS headers for that route. The recommended CORS
|
|
|
|
allowing clients to discover the CORS headers. All endpoints in this specification s
|
|
|
|
headers to be returned by servers on all requests are:
|
|
|
|
upport the ``OPTIONS`` method, however the server MUST NOT perform any logic defined
|
|
|
|
|
|
|
|
for the endpoints when approached with an ``OPTIONS`` request.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
When a client approaches the server with a request, the server should respond with
|
|
|
|
|
|
|
|
the CORS headers for that route. The recommended CORS headers to be returned by
|
|
|
|
|
|
|
|
servers on all requests are:
|
|
|
|
|
|
|
|
|
|
|
|
.. code::
|
|
|
|
.. code::
|
|
|
|
|
|
|
|
|
|
|
@ -296,6 +304,10 @@ In this section, the following terms are used with specific meanings:
|
|
|
|
Well-known URI
|
|
|
|
Well-known URI
|
|
|
|
~~~~~~~~~~~~~~
|
|
|
|
~~~~~~~~~~~~~~
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
.. Note::
|
|
|
|
|
|
|
|
Servers hosting the ``.well-known`` JSON file SHOULD offer CORS headers, as
|
|
|
|
|
|
|
|
per the `CORS`_ section in this specification.
|
|
|
|
|
|
|
|
|
|
|
|
The ``.well-known`` method uses a JSON file at a predetermined location to
|
|
|
|
The ``.well-known`` method uses a JSON file at a predetermined location to
|
|
|
|
specify parameter values. The flow for this method is as follows:
|
|
|
|
specify parameter values. The flow for this method is as follows:
|
|
|
|
|
|
|
|
|
|
|
|