fix(cors): allow routing the cors request with credentials

microsoft · Aug 7, 2020 · d17a9da · d17a9da
1 parent 411c738
commit d17a9da
Show file tree

Hide file tree

Showing 2 changed files with 29 additions and 2 deletions.
diff --git a/src/chromium/crNetworkManager.ts b/src/chromium/crNetworkManager.ts
@@ -193,8 +193,9 @@ export class CRNetworkManager {
         if (requestPausedEvent.request.method === 'OPTIONS' && this._page._isRouted(requestPausedEvent.request.url)) {
           const requestHeaders = requestPausedEvent.request.headers;
           const responseHeaders: Protocol.Fetch.HeaderEntry[] = [
-            { name: 'Access-Control-Allow-Origin', value: requestHeaders['Access-Control-Allow-Methods'] || '*' },
-            { name: 'Access-Control-Allow-Methods', value: requestHeaders['Access-Control-Request-Method'] || 'GET, POST, OPTIONS, DELETE' }
+            { name: 'Access-Control-Allow-Origin', value: requestHeaders['Origin'] || '*' },
+            { name: 'Access-Control-Allow-Methods', value: requestHeaders['Access-Control-Request-Method'] || 'GET, POST, OPTIONS, DELETE' },
+            { name: 'Access-Control-Allow-Credentials', value: 'true' }
           ];
           if (requestHeaders['Access-Control-Request-Headers'])
             responseHeaders.push({ name: 'Access-Control-Allow-Headers', value: requestHeaders['Access-Control-Request-Headers'] });

diff --git a/test/page-route.spec.js b/test/page-route.spec.js
@@ -470,6 +470,32 @@ it('should support cors with POST', async({page, server}) => {
   expect(resp).toEqual(['electric', 'gas']);
 });
 
+fit('should support cors with credentials', async({page, server}) => {
+  await page.goto(server.EMPTY_PAGE);
+  await page.route('**/cars', async (route) => {
+    await route.fulfill({
+      contentType: 'application/json',
+      headers: {
+        'Access-Control-Allow-Origin': server.PREFIX,
+        'Access-Control-Allow-Credentials': 'true'
+      },
+      status: 200,
+      body: JSON.stringify(['electric', 'gas']),
+    });
+  });
+  const resp = await page.evaluate(async () => {
+    const response = await fetch('https://example.com/cars', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      mode: 'cors',
+      body: JSON.stringify({ 'number': 1 }),
+      credentials: 'include'
+    });
+    return response.json();
+  });
+  expect(resp).toEqual(['electric', 'gas']);
+});
+
 it('should support cors for different methods', async({page, server}) => {
   await page.goto(server.EMPTY_PAGE);
   await page.route('**/cars', async (route, request) => {