Test for OPTIONS *

[glennc]

Hopefully I will get a chance to try more of these scenarios. Right now I only know about kestrel:

Kestrel: Passes * through to PathString which throws

We need to know what the other servers behavior is and decide on the right implementation to handle *.

[cesarblum]

IIS running nothing (i.e. Default Site with default content) returns this:

HTTP/1.1 200 OK
Allow: OPTIONS, TRACE, GET, HEAD, POST
Server: Microsoft-IIS/10.0
Public: OPTIONS, TRACE, GET, HEAD, POST
X-Powered-By: ASP.NET
Date: Fri, 18 Mar 2016 21:09:33 GMT
Content-Length: 0

From the RFC:

If the Request-URI is an asterisk (""), the OPTIONS request is intended to apply to the server in general rather than to a specific resource. Since a server's communication options typically depend on the resource, the "" request is only useful as a "ping" or "no-op" type of method; it does nothing beyond allowing the client to test the capabilities of the server. For example, this can be used to test a proxy for HTTP/1.1 compliance (or lack thereof).

I'm not sure there's any reason to pass OPTIONS * to the app. We could just return 200 OK with no other info, or something basic like Allow: GET, HEAD, POST.

[Tratcher]

RFC link?

How about WebListener?

[cesarblum]

https://tools.ietf.org/html/rfc7231#section-4.3.7

Text is a little different because I had copied from RFC2616. But the essence is the same.

WebListener just passes it to the app, but I think the * special case shouldn't be.

[Tratcher]

If we handle it in the server the response needs to be configurable. If we don't then it can be handled by middleware / app code.

[Tratcher]

Discussed offline with @lodejard and we're recommending that servers surface Options * requests to the app but leave both Path and PathBase empty. If in the future there's a raw url field that would contain the *.

[Tratcher]

Filed aspnet/KestrelHttpServer#709 and aspnet/HttpSysServer#183. I'll leave this issue open for adding a shared test.

[analogrelay]

Fixed in Kestrel and HttpSys. Closing.