origin.pony

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
use uri = "uri"

class val Origin is (Equatable[Origin] & Stringable)
  """
  The origin of a URL: whether it is secure (https), the host, and the port.

  Two requests share an origin when all three match. Host comparison is
  case-insensitive; the host is lowercased on construction. Redirect header
  stripping uses origin equality — credentials are removed when a hop crosses
  to a different origin.
  """
  let secure: Bool
  let host: String
  let port: String

  new val create(secure': Bool, host': String, port': String) =>
    secure = secure'
    host = host'.lower()
    port = port'

  new val from_uri(url: uri.URI val) =>
    """
    Extract the origin from a parsed URI. The host is lowercased and IPv6
    brackets are stripped; the port defaults to 443 (https) or 80 (http)
    when the URI omits it. When the URI has no authority, host is empty.
    """
    secure =
      match url.scheme
      | let s: String => s.lower() == "https"
      else false
      end
    match url.authority
    | let a: uri.URIAuthority =>
      let h = a.host
      host =
        if try h(0)? == '[' else false end then
          h.substring(1, (h.size() - 1).isize()).lower()
        else
          h.lower()
        end
      port =
        match \exhaustive\ a.port
        | let p: U16 => p.string()
        | None => if secure then "443" else "80" end
        end
    else
      host = ""
      port = if secure then "443" else "80" end
    end

  fun eq(that: Origin box): Bool =>
    (secure == that.secure) and (host == that.host) and (port == that.port)

  fun string(): String iso^ =>
    recover
      String
        .> append(if secure then "https" else "http" end)
        .> append("://")
        .> append(host)
        .> append(":")
        .> append(port)
    end