access-control

[msedekhyh]

Is it possible to enable this feature CORS so i can restrict access to only localhost?

[msedek]

I added it, so in the BaseRestServer class in the method Response serve(..) at the end just returns as many headers as you want.. Response response = newFixedLengthResponse(responseInfo.getStatus(),
responseInfo.getType(),
responseInfo.getBodyInputStream(),
responseInfo.getBodyLength());
response.addHeader("Access-Control-Allow-Origin", "*");
response.addHeader("Access-Control-Allow-Methods", "GET, POST, PUT");
return response;

elso fixed a bug where you didnt handle the OPTION request and when performing requests from a browser the preflight was getting error 404 so the browser could not continue with the base request

this code goes as the else for this in the BaseRestServer class //If the method is found
if (methodInfo != null) {

                    // Check if the request method is OPTIONS
                    if (session.getMethod() == Method.OPTIONS) {
                        // Create a successful response with CORS headers
                        Response response = newFixedLengthResponse(ResponseStatus.OK, NanoHTTPD.MIME_PLAINTEXT, "");

                        response.addHeader("Access-Control-Allow-Headers", "Content-Type");
                        response.addHeader("Access-Control-Allow-Origin", "*");
                        response.addHeader("Access-Control-Allow-Methods", "POST, GET, OPTIONS");
                        response.addHeader("Access-Control-Allow-Headers", "Content-Type, Accept, Accept-Language, Accept-Encoding");
                        response.addHeader("Vary", "Origin");

                        return response;

feel free to update the library and add some credit to me if you want