Implement referred Token Bindings

net/tools/testserver/testserver.py

Index: net/tools/testserver/testserver.py
diff --git a/net/tools/testserver/testserver.py b/net/tools/testserver/testserver.py
index fe57a54c1717861f819bc7060d83bebb7a4562e2..ba130af9943364d9941f55cba3746f2175a799dc 100755
--- a/net/tools/testserver/testserver.py
+++ b/net/tools/testserver/testserver.py
@@ -341,6 +341,7 @@ class TestPageHandler(testserver_base.BasePageHandler):
       self.SSLManySmallRecords,
       self.GetChannelID,
       self.GetTokenBindingEKM,
+      self.ForwardTokenBindingHeader,
       self.GetClientCert,
       self.ClientCipherListHandler,
       self.CloseSocketHandler,
@@ -1532,6 +1533,26 @@ class TestPageHandler(testserver_base.BasePageHandler):
     self.wfile.write(ekm)
     return True
 
+  def ForwardTokenBindingHeader(self):
+    """Send a redirect that sets the Include-Referer-Token-Binding-ID
+    header."""
+
+    test_name = '/forward-tokbind'
+    if not self._ShouldHandleRequest(test_name):
+      return False
+
+    query_char = self.path.find('?')
+    if query_char < 0 or len(self.path) <= query_char + 1:
+      self.sendRedirectHelp(test_name)
+      return True
+    dest = urllib.unquote(self.path[query_char + 1:])
+
+    self.send_response(302)
+    self.send_header('Location', dest)
+    self.send_header('Include-Referer-Token-Binding-ID', 'true')
+    self.end_headers()
+    return True
+
   def GetClientCert(self):
     """Send a reply whether a client certificate was provided."""