Abort connection based on origin header

Pithikos / python-websocket-server

A simple fully working websocket-server in Python with no external dependencies

MIT License

1.15k stars 385 forks source link

Closed lgfrbcsgo closed 4 years ago

lgfrbcsgo commented 6 years ago

RFC 6455 specifies that a handshake may be aborted by the server based on the origin header.

This PR adds another handler function which gets called when a handshake has been initiated.

The handler is called with the value of the origin header or None and returns a Boolean.
In case a falsy value is returned from the handler, the handshake is aborted with a 403 Forbidden response.