--cors Access-Control-Max-Age: 3600, closes #2079

This commit is contained in:
Simon Willison 2023-05-25 15:05:58 -07:00
commit b49fa446d6
3 changed files with 20 additions and 1 deletions

View file

@ -941,6 +941,7 @@ def test_cors(
assert (
response.headers["Access-Control-Allow-Methods"] == "GET, POST, HEAD, OPTIONS"
)
assert response.headers["Access-Control-Max-Age"] == "3600"
# Same request to app_client_two_attached_databases_one_immutable
# should not have those headers - I'm using that fixture because
# regular app_client doesn't have immutable fixtures.db which means
@ -951,6 +952,7 @@ def test_cors(
assert "Access-Control-Allow-Headers" not in response.headers
assert "Access-Control-Expose-Headers" not in response.headers
assert "Access-Control-Allow-Methods" not in response.headers
assert "Access-Control-Max-Age" not in response.headers
@pytest.mark.parametrize(