-
Notifications
You must be signed in to change notification settings - Fork 7
/
override.go
64 lines (56 loc) · 1.77 KB
/
override.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
// package method implements http method override
// using the X-HTTP-Method-Override http header.
package method
import (
"errors"
"net/http"
)
// HeaderHTTPMethodOverride is a commonly used
// Http header to override the method.
const HeaderHTTPMethodOverride = "X-HTTP-Method-Override"
// ParamHTTPMethodOverride is a commonly used
// HTML form parameter to override the method.
const ParamHTTPMethodOverride = "_method"
var httpMethods = []string{"PUT", "PATCH", "DELETE"}
// ErrInvalidOverrideMethod is returned when
// an invalid http method was given to OverrideRequestMethod.
var ErrInvalidOverrideMethod = errors.New("invalid override method")
func isValidOverrideMethod(method string) bool {
for _, m := range httpMethods {
if m == method {
return true
}
}
return false
}
// Override checks for the X-HTTP-Method-Override header
// or the HTML for parameter, `_method`
// and uses (if valid) the http method instead of
// Request.Method.
// This is especially useful for http clients
// that don't support many http verbs.
// It isn't secure to override e.g a GET to a POST,
// so only Request.Method which are POSTs are considered.
func Override() http.Handler {
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
if r.Method == "POST" {
m := r.FormValue(ParamHTTPMethodOverride)
if isValidOverrideMethod(m) {
OverrideRequestMethod(r, m)
}
m = r.Header.Get(HeaderHTTPMethodOverride)
if isValidOverrideMethod(m) {
r.Method = m
}
}
})
}
// OverrideRequestMethod overrides the http
// request's method with the specified method.
func OverrideRequestMethod(r *http.Request, method string) error {
if !isValidOverrideMethod(method) {
return ErrInvalidOverrideMethod
}
r.Header.Set(HeaderHTTPMethodOverride, method)
return nil
}