6e99d1737a
This adds the CORS support middleware to Barbican, allowing a deployer to optionally configure rules under which a javascript client may break the single-origin policy and access the API directly. Included are Barbican's custom headers, so that anyone activating this middleware does not have to explicitly enable them. The paste.ini method of deploying the middleware was chosen, because it needs to be able to annotate responses created by other middleware. OpenStack CrossProject Spec: http://specs.openstack.org/openstack/openstack-specs/specs/cors-support.html Oslo_Middleware Docs: http://docs.openstack.org/developer/oslo.middleware/cors.html OpenStack Cloud Admin Guide: http://docs.openstack.org/admin-guide-cloud/cross_project_cors.html Change-Id: If144ec774c01e8fc9e10903076fad11a0b946b6d