Support OPTIONS in routes

[seancorfield]

Whilst you can add "$OPTIONS*" = "/main/options" and hand back a canned response for preflight checks, it would be much better to be able to enable this for all routes and actually return the allowed verbs specific to each route as well as be able to specify the headers / credentials stuff.

[seancorfield]

This would also need to be baked into the resource template stuff.

[seancorfield]

Here's a canned-response preflight function just to show what might be returned:

function preflight( rc ) {
    var resp = getPageContext().getResponse();
    resp.setHeader( "Access-Control-Allow-Origin", "*" );
    resp.setHeader( "Access-Control-Allow-Methods", "GET, OPTIONS, POST" );
    resp.setHeader( "Access-Control-Allow-Headers", "Accept,Authorization,Content-Type" );
    resp.setHeader( "Access-Control-Allow-Credentials", "true" );
    resp.setHeader( "Access-Control-Max-Age", "1728000" );
    variables.fw.renderData( "text", "" );
}

Any/all portions of this should be overridable. The methods should reflect what is configured in any matching route (this part is hard since we don't currently track this if the method does not match).

[seancorfield]

I'm thinking that adding a boolean preflightsOptions (default false) than when enabled provides built-in OPTIONS support, and an optionsAccessControl struct (default {}) that lets you specify overrides for origin : "*", methods : "GET, OPTIONS, POST", headers : "Accept,Authorization,Content-Type", credentials : true, maxAge : 1728000 values. The methods value will be used if no specific methods are given in routes.

[seancorfield]

For processRoutes(), I'll need to track the methods in non-matches (where the route itself does match) and accumulate a struct of such things). That might match multiple routes but I don't think the framework can (or should) do anything to restrict that.

[seancorfield]

This has now been integrated into the World Singles code base for more extensive QA internally. If no issues arise, I'll close this out and update the documentation.

[seancorfield]

Seems to be working appropriately. Closing.