Add cross-origin test with credentials.

tools/testing/dart/http_server.dart

 // Copyright (c) 2012, the Dart project authors.  Please see the AUTHORS file
 // for details. All rights reserved. Use of this source code is governed by a
 // BSD-style license that can be found in the LICENSE file.
 
 library http_server;
 
 import 'dart:io';
 import 'dart:isolate';
 import 'test_suite.dart';  // For TestUtils.
 
-HttpServer _httpServer;
-
-void startHttpServer(String host, int port) {
+HttpServer startHttpServer(String host, [int allowedPort=-1]) {

[Mads Ager (google), 2013/01/04 09:39:20]

Could you add spaces: [int allowedPort = -1]?

[Emily Fortuna, 2013/01/04 23:26:54]

Done.

   var basePath = TestUtils.dartDir();
-  _httpServer = new HttpServer();
-  _httpServer.onError = (e) {
+  var httpServer = new HttpServer();
+  httpServer.onError = (e) {
     // Consider errors in the builtin http server fatal.
     // Intead of just throwing the exception we print
     // a message that makes it clearer what happened.
     print('Test http server error: $e');
     exit(1);
   };
-  _httpServer.defaultRequestHandler = (request, resp) {
+  httpServer.defaultRequestHandler = (request, resp) {
     var requestPath = new Path(request.path).canonicalize();
     if (!requestPath.isAbsolute) {
       resp.statusCode = HttpStatus.NOT_FOUND;
       resp.outputStream.close();
     } else {
       var path = basePath;
       requestPath.segments().forEach((s) => path = path.append(s));
       var file = new File(path.toNativePath());
       file.exists().then((exists) {
         if (exists) {
-          // Allow loading from localhost in browsers.
-          resp.headers.set("Access-Control-Allow-Origin", "*");
+          if (allowedPort != -1) {
+            // Allow loading from localhost:$allowedPort in browsers.
+            resp.headers.set("Access-Control-Allow-Origin",
+                "http://127.0.0.1:$allowedPort");
+            resp.headers.set('Access-Control-Allow-Credentials', 'true');
+          } else {
+            // No allowedPort specified. Allow from anywhere (but cross-origin
+            // requests *with credentials* will fail because you can't use "*").
+            resp.headers.set("Access-Control-Allow-Origin", "*");
+          }
           file.openInputStream().pipe(resp.outputStream);
         } else {
           resp.statusCode = HttpStatus.NOT_FOUND;
           resp.outputStream.close();
         }
       });
     }
   };
 
   // Echos back the contents of the request as the response data.
-  _httpServer.addRequestHandler((req) => req.path == "/echo", (request, resp) {
+  httpServer.addRequestHandler((req) => req.path == "/echo", (request, resp) {
     resp.headers.set("Access-Control-Allow-Origin", "*");
 
     request.inputStream.pipe(resp.outputStream);
   });
 
-  _httpServer.listen(host, port);
+  httpServer.listen(host, 0);
+  return httpServer;
 }
 
-terminateHttpServer() {
-  if (_httpServer != null) _httpServer.close();
+terminateHttpServers([List<HttpServer> servers = const []]) {

[Mads Ager (google), 2013/01/04 09:39:20]

Can we make the servers argument mandatory?

[Emily Fortuna, 2013/01/04 23:26:54]

Done.

+  for (var server in servers) server.close();
 }